Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/200b7df4-5e29-3f9b-b576-cca7f73cc701.roa
File:                     200b7df4-5e29-3f9b-b576-cca7f73cc701.roa (raw, json)
Hash identifier:          blR5kZq4h2Y2tBtNRFpqy4a8P2UyaugQrjsQVTBurf4=
Subject key identifier:   EA:CE:C6:68:96:A5:AC:B5:C3:9A:EB:30:8A:AD:58:6B:CD:D2:C5:42
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858408F0915BA3C771F4E5B63B220
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/200b7df4-5e29-3f9b-b576-cca7f73cc701.roa
Signing time:             Thu 12 Jan 2023 12:00:00 +0000
ROA not before:           Thu 12 Jan 2023 12:00:00 +0000
ROA not after:            Fri 17 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        16.107.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:8f:09:15:ba:3c:77:1f:4e:5b:63:b2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 12 12:00:00 2023 GMT
            Not After : Feb 17 05:00:00 2023 GMT
        Subject: CN=3083abaf-ffdf-40bc-b26c-9374b860956c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bb:32:fb:60:cf:cc:a5:ae:36:9c:0e:61:38:
                    d2:49:e2:d4:57:d3:4e:0e:12:ee:ee:02:c2:5b:9e:
                    10:2e:78:21:c5:56:c4:11:df:74:e6:fc:b6:54:4a:
                    75:c1:85:28:7b:2c:be:c8:90:c6:47:4e:7c:d6:65:
                    da:2f:12:b5:78:26:6b:ba:8c:33:00:50:70:fb:6b:
                    83:56:d9:d9:13:8c:a9:65:c2:02:5b:98:04:0b:82:
                    7c:18:d5:c7:71:c0:9d:b4:83:49:c8:26:7b:3c:58:
                    43:6d:74:6d:64:33:34:8d:50:9a:e8:0b:69:9d:12:
                    58:a0:97:7d:51:d5:c7:47:86:91:8d:9c:db:28:9a:
                    42:67:92:5f:de:f8:98:bb:e9:8f:cc:6f:e0:4e:5a:
                    08:ff:0d:8c:af:37:94:02:f9:c6:0a:62:2c:c7:2d:
                    e8:36:31:30:f4:07:b5:c3:53:ad:6e:13:92:e0:61:
                    e5:3f:ae:4c:f5:51:ab:e9:80:bb:f1:0b:ed:f5:54:
                    e2:43:30:e8:74:da:39:c1:f6:23:48:be:cb:b7:a7:
                    50:d7:7f:f3:7b:70:82:77:51:de:e2:c6:0d:0c:6b:
                    78:94:22:4b:d5:ad:69:f8:fe:e6:11:40:3f:72:0d:
                    64:55:e4:a3:c8:8f:30:13:2a:9c:8d:82:a5:e9:3a:
                    b3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CE:C6:68:96:A5:AC:B5:C3:9A:EB:30:8A:AD:58:6B:CD:D2:C5:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/200b7df4-5e29-3f9b-b576-cca7f73cc701.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.107.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:39:0b:08:47:92:9d:b6:b0:67:eb:b4:80:d2:64:f3:62:36:
         ae:2b:80:70:e9:af:58:fc:32:98:b5:d4:31:1c:1b:26:6a:7d:
         64:c1:60:4b:1f:4f:15:25:65:61:39:e2:ea:75:cc:5f:47:65:
         26:46:61:1c:6f:24:0e:8d:1e:34:d8:79:d6:55:21:44:b1:44:
         1d:26:cf:39:a4:a3:0a:24:0d:bd:ef:10:c3:06:8c:02:0f:98:
         09:d7:dd:2d:54:d5:f8:7b:c3:60:d3:a4:53:9f:d8:84:b8:97:
         73:ec:bf:50:74:66:bb:da:7a:fa:c3:24:c8:5f:dd:37:42:2e:
         41:da:f8:24:fd:d1:12:ac:93:43:b5:2a:16:8c:4b:fa:15:44:
         df:cd:07:2a:20:7c:b4:54:f5:a9:7f:fa:0e:11:4b:ec:09:83:
         0c:d5:6e:cb:c3:4f:1d:82:e3:07:02:00:bd:ce:1c:2d:8c:ea:
         21:01:29:73:1c:e2:14:e3:ec:bd:26:69:77:04:f8:b3:1c:be:
         e2:01:d7:5b:cc:c1:ee:9a:51:7a:45:39:7e:a9:68:59:03:bb:
         73:81:e1:e1:1b:42:da:ef:aa:cb:d8:61:5a:8c:c7:95:76:e0:
         9b:0b:ca:57:f6:8b:36:3e:f1:32:ec:88:b4:65:8b:f3:56:2e:
         34:79:2a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----