Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1a0aab38-546d-378d-821c-d80efbba81e2.roa
File:                     1a0aab38-546d-378d-821c-d80efbba81e2.roa (raw, json)
Hash identifier:          M+VL9kGWAr3JBMsFmccC+/IIZzG9847wlRnqD/J5x6Y=
Subject key identifier:   79:07:79:10:0A:BA:43:E9:3E:90:7C:E1:E0:2C:75:00:32:88:85:30
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F5322039F280D6A63B50F2D60
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1a0aab38-546d-378d-821c-d80efbba81e2.roa
Signing time:             Wed 21 Sep 2022 12:00:00 +0000
ROA not before:           Wed 21 Sep 2022 12:00:00 +0000
ROA not after:            Thu 27 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.12.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:53:22:03:9f:28:0d:6a:63:b5:0f:2d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 21 12:00:00 2022 GMT
            Not After : Oct 27 04:00:00 2022 GMT
        Subject: CN=495558e8-95af-41ca-8e9f-8327656cb598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d0:9d:5f:42:9b:43:43:de:35:04:8a:4a:0f:
                    4d:2e:1e:2c:e3:d0:d9:f7:a9:f8:28:e9:75:b5:e5:
                    46:3a:7e:5e:62:b0:41:d5:5e:18:b2:0f:62:f8:84:
                    da:cd:31:8c:2b:75:c1:b2:60:45:8a:35:e1:9f:c4:
                    54:68:dc:ab:cd:71:02:17:0a:f6:76:d2:df:23:b9:
                    97:af:3a:d0:22:bd:72:89:a9:b6:a6:30:58:4f:12:
                    ab:2d:bf:fd:be:29:c5:71:7d:d7:7d:8c:04:11:cb:
                    0e:97:dd:b7:8f:b7:ce:87:4f:eb:12:05:2f:7c:05:
                    29:bc:d5:1b:6f:fc:e1:64:ed:50:dc:2d:6f:d8:a3:
                    ae:4d:08:0d:e5:10:58:97:ea:ae:fd:d7:c5:fc:d7:
                    70:f1:99:0c:2f:35:05:66:9a:16:8a:ea:f9:42:5f:
                    15:19:fc:c4:3a:05:6f:6e:ae:06:86:8c:81:53:bd:
                    0c:79:82:58:d1:9d:7c:ed:5c:0c:52:d4:19:31:31:
                    4b:14:ef:15:de:b1:8f:53:44:d0:58:3f:aa:fd:ab:
                    3f:b2:6c:ad:7e:f0:c3:67:f6:d5:74:b2:4b:db:c6:
                    69:d5:b1:a8:a6:62:e3:75:62:69:79:08:55:23:e3:
                    5b:d0:02:e2:1e:86:43:48:03:67:96:5e:96:be:98:
                    19:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:07:79:10:0A:BA:43:E9:3E:90:7C:E1:E0:2C:75:00:32:88:85:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1a0aab38-546d-378d-821c-d80efbba81e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.12.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:a8:97:6b:c6:ec:6f:dc:f6:fe:53:cb:78:e8:80:f9:13:89:
         c6:e7:4d:66:50:3d:c7:71:85:69:32:a9:9d:f7:1e:fc:c3:90:
         8d:c7:68:1e:bf:ab:da:cd:8e:8c:ba:f1:66:80:e7:c3:fa:8b:
         9b:1c:9b:74:d3:e7:0f:09:4e:75:c6:e4:3e:99:3b:4b:db:5a:
         0b:42:6d:53:98:a6:a5:7a:74:0f:08:80:41:84:ba:09:09:83:
         dd:0a:7f:47:23:7c:9c:57:69:0c:f8:4c:58:5b:ae:1e:73:a6:
         0c:0b:57:66:e3:a4:dc:89:33:86:b4:e6:8b:3c:08:21:75:0b:
         0d:bc:8f:9f:a0:fb:30:c6:39:a3:1e:09:f4:5f:63:e1:4b:7e:
         e0:28:05:22:ab:8d:8a:cb:6a:35:16:d5:07:c6:f7:56:d1:a7:
         4a:cf:2c:4e:83:e9:7c:53:f0:bb:0c:2b:37:96:44:45:28:08:
         9b:3b:c6:87:9d:d1:4a:49:9a:57:93:7f:d0:78:b9:ed:39:92:
         ee:14:fe:92:4c:e7:96:03:c9:93:87:82:70:80:69:b4:27:8c:
         88:1f:25:e8:26:f2:9f:19:e4:1e:f0:ed:81:6d:6a:4c:8e:92:
         d7:2f:bb:70:1f:e5:87:8e:67:5d:cf:02:aa:90:a0:81:66:23:
         05:96:02:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----