Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/14d78dd4-e958-3a1e-a459-f71bf5aeb0f2.roa
File:                     14d78dd4-e958-3a1e-a459-f71bf5aeb0f2.roa (raw, json)
Hash identifier:          osf8p6goRwh2qEPkQpUiWhkR8LNqDmA+h9kiJANxF48=
Subject key identifier:   3A:DF:9E:9C:EE:06:6D:84:2B:03:92:90:0B:05:F9:91:21:D8:11:B8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584056794FF10D577AA355515E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/14d78dd4-e958-3a1e-a459-f71bf5aeb0f2.roa
Signing time:             Fri 23 Dec 2022 12:00:00 +0000
ROA not before:           Fri 23 Dec 2022 12:00:00 +0000
ROA not after:            Sat 28 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        16.15.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:56:79:4f:f1:0d:57:7a:a3:55:51:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 23 12:00:00 2022 GMT
            Not After : Jan 28 05:00:00 2023 GMT
        Subject: CN=ba99d2e8-4cbe-4860-aa46-a02890f8f40f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:65:d4:71:19:62:3a:4a:12:f7:e1:ae:cc:
                    63:76:5a:93:ca:00:d9:52:c4:b9:65:0d:03:e1:55:
                    8b:12:6f:a3:35:e5:72:af:3c:47:e3:12:34:a8:9e:
                    e7:dd:cb:52:9e:2b:38:5f:b8:5c:05:cc:bb:ac:79:
                    0a:37:8a:a6:cb:10:89:64:2c:40:c4:01:f9:cf:71:
                    1a:f3:3f:e8:25:b1:96:1e:76:b7:65:7d:db:b1:6c:
                    08:27:91:f9:c9:75:a7:d3:4c:11:b5:12:f2:6a:71:
                    ce:28:51:64:42:4e:92:0a:50:eb:07:94:4e:81:e4:
                    99:9a:f9:bc:86:ad:34:21:c5:d9:d3:27:22:39:95:
                    9d:ae:ea:3e:5e:f5:b1:16:44:2a:d3:26:17:98:cf:
                    6e:f8:f9:ee:88:a5:92:5b:a4:3e:f9:19:8c:c8:a4:
                    f2:ae:10:d0:fc:6d:97:d6:63:f6:02:47:1d:c8:c8:
                    56:d5:7e:0a:e6:df:47:cf:29:62:64:6c:38:fa:02:
                    49:cc:4c:89:4b:c2:05:b4:57:8d:97:e2:94:5d:b5:
                    e7:9f:c8:65:d9:69:2a:6c:20:c9:24:86:2c:b3:8f:
                    09:4b:f5:e3:02:c9:86:8f:f2:4f:e6:00:a3:d5:a1:
                    1b:f1:1b:c8:db:88:0f:87:0a:26:94:54:6f:b0:51:
                    2a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DF:9E:9C:EE:06:6D:84:2B:03:92:90:0B:05:F9:91:21:D8:11:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/14d78dd4-e958-3a1e-a459-f71bf5aeb0f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.15.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:34:7c:ac:6c:65:8c:0b:d3:c3:0b:4c:a3:2a:fd:23:4e:47:
         9d:ac:3b:2a:fd:8e:08:56:47:d6:8c:7a:b3:0f:9b:e3:0b:14:
         d5:0a:bc:d5:69:81:ab:dc:df:d2:0f:54:9e:d5:75:0b:55:50:
         30:e3:8b:e7:4b:b5:11:b9:81:fa:a2:b6:72:fb:76:cd:d4:23:
         20:a9:67:12:5c:c4:86:3f:ba:93:69:17:45:48:c0:99:82:2e:
         a1:e6:c5:0b:91:ce:17:6b:84:12:75:d4:33:47:9d:31:3f:66:
         e5:6a:4a:8e:7d:b3:09:27:c4:94:13:53:2c:70:8b:5b:cf:b6:
         f0:04:54:c0:5d:7a:ff:ea:cd:7b:20:ff:90:9d:67:a4:b5:6e:
         4c:62:ab:37:d2:ec:25:bb:5a:fb:85:8b:62:9a:dc:5b:d0:db:
         28:6d:cf:10:cf:81:51:81:b0:79:fd:26:4e:6f:dd:80:6f:21:
         a4:2b:61:12:3a:31:3a:5a:3e:76:8a:b0:63:0a:d8:dd:12:d7:
         9b:d0:85:64:32:79:81:6d:c5:01:00:4a:87:5a:8f:75:ee:81:
         f2:ed:cf:43:75:37:32:28:4c:21:c8:c1:97:0e:25:b4:90:ab:
         27:c2:9d:7f:b3:3e:f5:8a:ab:db:2a:84:35:d0:1d:38:52:41:
         be:56:d9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----