Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/111b39ca-ed7f-31c6-b869-5c39f1a9aadb.roa
File:                     111b39ca-ed7f-31c6-b869-5c39f1a9aadb.roa (raw, json)
Hash identifier:          V0enrDL5NngGPbT75Ey0tHgh0bySc3gOObREE+yCWyA=
Subject key identifier:   93:3E:17:B9:00:71:B9:23:85:93:52:FC:E8:E3:19:B4:A3:68:02:33
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FEF7FB6F1BF6593064FEAFC00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/111b39ca-ed7f-31c6-b869-5c39f1a9aadb.roa
Signing time:             Wed 16 Nov 2022 12:00:00 +0000
ROA not before:           Wed 16 Nov 2022 12:00:00 +0000
ROA not after:            Thu 22 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        136.1.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ef:7f:b6:f1:bf:65:93:06:4f:ea:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 16 12:00:00 2022 GMT
            Not After : Dec 22 05:00:00 2022 GMT
        Subject: CN=1a69eea4-e8ab-478d-b565-82d6d5fe78bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:af:5a:55:ee:13:7b:87:d0:e8:c1:f9:69:1b:
                    4a:92:2a:5c:93:39:5c:ca:ad:af:98:8f:65:80:2a:
                    96:00:69:96:37:71:d2:94:c8:20:70:ec:ec:b3:cd:
                    bd:ad:6f:c0:db:39:f6:a3:c1:b9:14:b9:a3:3a:e7:
                    2b:23:28:34:57:6b:3e:c7:a1:f9:c8:ec:2d:cc:94:
                    98:57:67:e0:ca:8a:6e:21:82:1e:84:4e:7d:03:1c:
                    32:a9:65:a7:74:a0:29:9b:6c:a0:7d:c1:01:f9:5e:
                    ff:8b:a2:57:e3:63:35:15:a1:ee:24:65:8e:dd:4c:
                    00:49:cd:d9:b8:51:39:9f:3d:e5:d0:00:eb:1f:cf:
                    d1:b3:b4:e7:7d:99:51:af:fd:a6:4b:bb:47:96:31:
                    cc:e1:ab:81:80:0b:fb:1f:5e:b6:e4:cd:3a:61:8d:
                    6f:67:dd:94:7f:ae:a5:7b:1a:bd:e6:c9:24:d4:10:
                    4b:6a:b7:cd:dd:bf:d8:53:1a:98:f3:a7:71:91:60:
                    8c:d6:98:17:ad:4f:a9:12:2f:e5:1b:6d:b5:61:27:
                    48:b3:6a:ae:5e:f3:2a:44:e8:4f:f3:1f:28:ed:e8:
                    e6:b3:a4:0b:51:86:8a:1c:cb:c9:bd:54:d9:32:53:
                    cf:66:53:d0:44:1c:85:95:c5:e0:25:19:57:35:ce:
                    f5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3E:17:B9:00:71:B9:23:85:93:52:FC:E8:E3:19:B4:A3:68:02:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/111b39ca-ed7f-31c6-b869-5c39f1a9aadb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.1.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:25:b8:85:92:d9:54:85:a4:47:18:c1:8b:bd:20:8a:8e:21:
         02:14:a3:bd:07:45:03:db:c8:6a:8a:b2:0d:ca:9d:91:28:9b:
         5c:f1:d2:3e:8e:bf:9b:61:b0:9b:ea:c8:81:22:83:3e:a3:b2:
         58:eb:d7:b8:ca:64:22:93:c4:f1:e2:a4:87:74:ab:dd:7a:51:
         33:84:c4:4a:30:2a:68:96:9a:e7:1d:19:3a:8f:92:87:68:d4:
         bb:cb:53:10:c8:c9:76:f6:cb:96:94:94:bb:46:72:6b:69:03:
         5b:43:4d:15:7b:32:3d:79:71:bd:2e:49:27:43:57:29:18:4f:
         51:49:82:05:bb:0e:42:48:33:29:54:a8:a4:e0:aa:60:49:86:
         6c:d4:92:ef:f7:ae:9c:a2:60:36:88:5e:f8:50:91:48:5b:45:
         48:92:96:cc:54:f1:2b:68:41:2f:0e:2b:a1:89:0f:62:d5:e1:
         3f:c6:9a:e6:49:32:05:71:8c:d4:46:a1:52:29:69:94:b6:ba:
         cc:66:44:9b:2e:22:71:0e:72:8a:0e:1c:6e:8d:89:da:cb:c7:
         fc:7c:9c:f0:48:23:d9:22:ba:1d:aa:1c:d9:44:72:d4:d4:9f:
         91:7d:2c:2f:b7:86:fa:c1:7b:bc:dc:cc:b2:75:96:eb:fa:63:
         18:ab:c7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----