Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/141a6f46-895f-32fc-af23-b07f234dbefb.roa
File:                     141a6f46-895f-32fc-af23-b07f234dbefb.roa (raw, json)
Hash identifier:          Mla6J84QZNLtpcToFl59Qdje436wEeuqlE/B3hQR7kI=
Subject key identifier:   1A:8C:20:94:0F:15:96:74:DF:32:56:37:6E:62:79:7A:C5:DE:9D:78
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858409471AAA888A88A085A4A0A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/141a6f46-895f-32fc-af23-b07f234dbefb.roa
Signing time:             Sat 14 Jan 2023 12:00:00 +0000
ROA not before:           Sat 14 Jan 2023 12:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        16.138.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:94:71:aa:a8:88:a8:8a:08:5a:4a:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 12:00:00 2023 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=9ddea8e3-2744-425c-869c-c26ca6f8577a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:96:80:ad:e2:02:21:3f:9a:e6:e4:72:6b:5e:
                    b8:99:3d:63:21:f4:65:52:e8:7e:93:fb:99:e5:eb:
                    90:d8:da:85:4a:23:2d:14:9c:cf:bb:63:23:12:a8:
                    df:82:2d:8c:78:e4:51:b4:28:7d:0b:82:92:4d:85:
                    bf:ed:26:37:5c:48:b3:72:93:71:39:84:21:48:98:
                    d5:7b:cc:3c:22:3c:58:b1:2f:70:de:d2:ff:2d:25:
                    45:3d:45:23:a6:45:ed:f9:5e:65:1f:04:71:d9:5e:
                    5d:f5:31:e3:3e:6b:7d:70:92:b1:81:60:e6:31:e0:
                    77:34:20:dc:71:78:b4:2e:4e:6d:2b:2e:3c:78:05:
                    36:31:b3:03:3a:d6:68:ba:12:f3:64:d3:e1:3b:ef:
                    eb:89:ac:88:4f:41:0e:c2:84:1a:b0:c5:12:01:71:
                    a6:ff:74:31:8f:2c:b9:d5:9e:c0:e7:4c:80:e8:16:
                    ad:56:d3:d0:78:6e:73:ec:37:d0:4e:30:82:5e:c2:
                    87:81:6e:03:05:cc:d6:3f:5c:01:9c:5d:95:2f:80:
                    f4:4e:9b:40:0a:8f:45:9f:f1:eb:58:ac:18:6f:17:
                    97:91:01:09:6a:a8:82:79:86:11:7e:8f:28:36:5f:
                    a5:3b:f7:7a:12:48:b5:fd:eb:1d:41:2f:d3:b5:a4:
                    60:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8C:20:94:0F:15:96:74:DF:32:56:37:6E:62:79:7A:C5:DE:9D:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/141a6f46-895f-32fc-af23-b07f234dbefb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.138.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:cb:bb:8b:bb:d9:55:a6:e7:60:c7:a6:4e:7b:0e:73:29:ea:
         91:3e:61:43:c3:15:45:dc:e2:77:9b:e6:00:9e:7f:ef:84:71:
         a7:ee:78:74:91:2b:4f:15:09:28:19:c6:49:3f:bb:5a:54:ac:
         90:ef:2e:84:81:b5:e7:d5:75:b8:29:28:cb:5a:6e:27:1b:87:
         dc:d8:11:6b:53:fa:af:e1:e5:1b:33:22:d9:9f:14:bf:96:71:
         b9:71:09:8c:62:a2:e4:57:76:c6:dc:d6:2e:d1:91:9d:e4:d6:
         8d:45:eb:d6:1b:1f:90:d0:56:4a:e8:09:1b:10:0b:f1:ce:d1:
         e0:d2:f0:56:fc:f2:de:c6:6c:8a:2f:d1:96:bb:92:47:7e:36:
         36:30:69:3d:32:63:2f:a2:11:9e:a4:4a:40:a4:f1:6a:eb:71:
         6c:8b:bb:d7:3b:3a:22:be:2a:33:54:e7:62:98:0a:d7:ca:3d:
         c3:5b:eb:44:45:ac:f9:95:11:82:69:43:14:4f:61:f1:0e:88:
         ec:df:6d:89:19:a1:80:47:24:28:25:5c:4d:b7:d0:92:12:28:
         cf:43:31:8b:9c:e3:dc:9f:f4:95:fb:61:0b:86:fa:27:2c:66:
         c6:ea:01:2d:b1:04:f7:47:d0:71:1e:eb:b5:b6:fe:30:7c:fd:
         8d:88:19:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----