Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/159610c3-ec59-3614-94f7-3abdef88b890.roa
File:                     159610c3-ec59-3614-94f7-3abdef88b890.roa (raw, json)
Hash identifier:          x6MXHWEtYvsLXZEakmb/WeMzVWiJj3B0tIMgIG6WzVg=
Subject key identifier:   B9:8A:4B:C6:8E:21:3A:E1:8D:1C:ED:64:83:F0:82:60:DC:23:E4:0C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F04C2A005ED025E60D174BAC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/159610c3-ec59-3614-94f7-3abdef88b890.roa
Signing time:             Wed 24 Aug 2022 12:00:00 +0000
ROA not before:           Wed 24 Aug 2022 12:00:00 +0000
ROA not after:            Thu 29 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.119.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:04:c2:a0:05:ed:02:5e:60:d1:74:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 24 12:00:00 2022 GMT
            Not After : Sep 29 04:00:00 2022 GMT
        Subject: CN=a1d640ec-2e86-4808-9d3b-f5234dfc6434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:50:f9:3c:f0:dd:39:61:c6:e2:e1:91:10:be:
                    8a:09:47:22:db:f4:27:83:91:a4:a4:cc:02:75:99:
                    eb:05:55:33:bf:90:7d:36:58:f2:a2:ee:de:ab:3a:
                    f9:9c:e5:34:e7:32:39:19:fe:7b:eb:21:e0:45:e7:
                    11:ab:17:7e:9f:5c:a2:37:9b:a3:f3:80:ad:96:74:
                    a0:ba:c7:9c:a2:0d:12:5d:3b:89:fe:9e:46:26:c5:
                    60:8d:ab:e2:69:fd:f3:b1:5a:67:94:71:16:2c:36:
                    fe:e4:a8:a2:5a:5b:a7:78:f7:b4:b7:8c:b2:7a:9d:
                    f2:da:01:e6:c5:f3:0d:f2:62:88:ee:50:62:fc:00:
                    28:52:dc:74:36:f7:92:c6:54:d3:f7:6e:0d:3e:07:
                    7d:78:8a:73:5c:85:45:61:33:cf:d1:72:53:81:46:
                    10:4d:6b:be:45:34:a1:2a:bf:69:6b:4e:83:2d:b9:
                    0a:5e:9d:46:16:be:0a:23:95:1b:64:0c:2a:57:90:
                    1a:c2:75:37:1d:c5:a1:f3:87:d9:4b:0f:3f:0f:d1:
                    70:13:1c:d9:1e:99:a6:a6:dc:db:aa:ec:5c:58:b1:
                    75:72:d6:c4:5b:f7:c2:29:6f:4b:76:14:75:cb:f6:
                    c4:3e:60:8a:b5:a6:27:47:d6:9d:f6:0e:e0:0d:86:
                    69:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8A:4B:C6:8E:21:3A:E1:8D:1C:ED:64:83:F0:82:60:DC:23:E4:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/159610c3-ec59-3614-94f7-3abdef88b890.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.119.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:2a:9d:8e:c2:50:a0:a6:0a:dc:75:19:d2:41:2a:ad:3a:00:
         d4:a4:cc:e8:e7:24:5d:72:ce:5a:b8:96:9b:f4:e2:89:82:5c:
         6b:2c:e0:dc:ff:e7:9f:03:c3:c0:74:ff:42:a0:06:1d:42:a4:
         cd:21:55:a6:a0:f0:5e:d4:36:d4:ec:1f:30:86:f5:c8:13:57:
         0c:43:50:47:73:b9:0a:cf:97:f7:fb:1f:86:a2:95:83:79:23:
         bd:ae:ca:84:f4:2d:4f:2c:b3:d3:1d:5c:d5:1a:9e:00:29:80:
         7a:9f:d6:50:d5:7e:40:a1:0d:4e:a6:ca:2d:bc:98:be:81:0a:
         df:59:d1:dd:3a:e1:c9:0c:3c:d8:13:85:be:7a:a7:49:fa:2e:
         27:10:96:f7:55:58:d9:13:89:aa:f8:46:bb:c5:0f:d8:d0:61:
         ce:e4:cf:6b:1b:04:f2:15:4b:d3:c7:73:79:d8:70:d0:42:f9:
         4c:31:42:6b:4d:b1:17:1e:6a:ef:8f:52:30:e4:a0:76:d3:a2:
         87:10:77:af:fb:f7:82:c7:0c:46:17:7e:7d:53:6a:7e:f0:44:
         e8:e9:0d:95:2d:6a:d0:14:c4:a8:52:51:e4:92:5a:70:4f:49:
         c3:60:5b:a1:ba:67:a4:df:65:17:f6:55:44:2a:a0:98:ae:ba:
         a0:7e:3d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----