Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/226a67cb-9d73-30d4-85ae-afc92ad887d4.roa
File:                     226a67cb-9d73-30d4-85ae-afc92ad887d4.roa (raw, json)
Hash identifier:          ZjN/7VcPvTCgQnL57SQoyjJc37bu/Cuami/CVXY+zNU=
Subject key identifier:   C6:44:4B:AB:7E:87:45:FC:81:F4:E4:BF:1D:18:C5:12:FF:45:2C:E6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F01A5FCBE4A8C2E7832525D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/226a67cb-9d73-30d4-85ae-afc92ad887d4.roa
Signing time:             Tue 23 Aug 2022 12:00:00 +0000
ROA not before:           Tue 23 Aug 2022 12:00:00 +0000
ROA not after:            Wed 28 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2600:1f01:4800::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:01:a5:fc:be:4a:8c:2e:78:32:52:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 23 12:00:00 2022 GMT
            Not After : Sep 28 04:00:00 2022 GMT
        Subject: CN=452e39fd-575b-4be9-bb29-f6921de06dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8c:6f:e8:7c:96:2c:cb:45:e7:25:a9:33:42:
                    c5:4d:50:80:a8:4e:30:25:c7:b4:65:b8:9f:45:8c:
                    bb:13:a2:ea:76:cc:f8:da:ff:e3:af:5c:4c:bd:c2:
                    e3:f3:b1:eb:b4:a7:9c:2a:52:e0:16:79:4b:13:f5:
                    c3:dc:92:b4:67:56:40:8e:a4:23:2d:78:e6:28:d4:
                    b0:0b:24:0a:e7:46:4f:85:7a:f2:19:57:22:5a:09:
                    6c:a6:fe:00:49:5d:90:99:eb:74:52:8d:d1:2e:3d:
                    38:66:10:4c:69:6f:81:2e:c2:fa:b1:62:e3:2f:f1:
                    b8:93:ab:33:50:5f:cd:40:e4:f2:07:4d:b7:10:67:
                    98:d8:b8:9d:80:65:0e:56:77:c9:45:9a:ec:17:d9:
                    99:0e:a4:21:62:6e:8e:07:09:d9:a9:fd:a9:77:f3:
                    6a:63:24:3b:2d:ae:c7:fa:3f:17:53:e6:7e:66:9b:
                    65:bf:e6:dd:b7:96:4e:42:7b:ec:db:6a:26:82:9c:
                    ea:dc:2e:90:bf:1d:6c:5d:51:cc:16:6d:08:60:53:
                    b9:71:4a:4d:ad:56:e1:67:01:96:ae:14:9e:77:84:
                    9b:06:2d:fe:42:b3:c2:86:05:19:19:17:18:b5:f1:
                    40:e6:88:f3:4f:89:a8:60:46:8a:ee:ea:82:72:ee:
                    4c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:44:4B:AB:7E:87:45:FC:81:F4:E4:BF:1D:18:C5:12:FF:45:2C:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/226a67cb-9d73-30d4-85ae-afc92ad887d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f01:4800::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:a0:6e:87:9b:17:76:14:7d:09:ff:00:ac:b7:18:ac:f9:61:
         5e:e4:cb:2a:a1:84:5d:a9:77:ae:72:32:cb:bc:c8:5d:17:2a:
         d3:38:52:2a:60:90:e2:c5:8d:b6:1f:a0:7a:1a:01:0e:13:0e:
         4c:d0:ee:fb:8b:47:d7:65:35:f1:50:12:91:f7:23:f5:92:89:
         e2:8e:5a:ba:46:16:b6:2e:bf:a3:20:18:95:c7:79:d7:de:6f:
         24:ba:b1:9e:2c:b7:c4:94:79:9b:37:6d:b9:95:75:fc:3a:60:
         19:e6:b0:ae:cf:e3:12:fa:5f:77:73:35:39:9e:7f:dc:61:9d:
         9e:4d:72:4f:55:46:92:5f:79:f7:2d:06:b6:92:48:fb:da:b6:
         fc:6c:77:dc:b2:ef:c2:78:ee:b3:1c:cf:5d:99:79:17:8e:43:
         51:1d:63:1c:f6:7d:90:40:68:9f:9b:47:2f:83:25:50:4f:42:
         6d:1f:05:48:be:54:53:e1:42:7e:e5:5e:70:b5:30:8d:ca:93:
         bc:c2:db:71:2b:37:7e:86:8e:ba:b4:e0:4e:fa:e8:37:70:f8:
         ae:e4:d1:99:9e:ce:31:dc:e5:de:3b:5a:00:7f:be:71:c0:0e:
         7b:f6:8a:bc:38:f4:c3:26:40:31:a1:36:64:bc:5b:87:cc:f8:
         30:28:03:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----