Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2559b9e9-9dc4-3b2c-91a8-00b13a601922.roa
File:                     2559b9e9-9dc4-3b2c-91a8-00b13a601922.roa (raw, json)
Hash identifier:          n4gjWD+aNXY3IKXjrvPZHvfX9uenizL0JPTLeg8C52A=
Subject key identifier:   31:5D:5D:44:D1:72:83:99:A5:C0:FF:71:17:E5:05:F6:19:F0:DA:0F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D336AA03C11D3C9C1A98E6CD4
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2559b9e9-9dc4-3b2c-91a8-00b13a601922.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        184.32.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:6a:a0:3c:11:d3:c9:c1:a9:8e:6c:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=a0bcc287-f9cb-4636-9d16-9be63f368871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c0:6f:ca:1c:e3:88:15:dd:1c:6f:2c:08:fc:
                    3e:63:bb:0e:35:e4:78:02:63:cc:5d:09:45:4b:7a:
                    cf:30:23:70:bd:83:ae:d7:32:ff:3b:2a:b3:76:6d:
                    d1:21:e3:8c:32:45:de:27:27:02:23:f3:72:b1:34:
                    e4:ff:5b:61:fd:8c:68:52:39:74:b6:cf:78:bc:99:
                    cc:38:78:42:a8:c2:f3:da:55:77:91:b0:09:65:a1:
                    68:46:8b:d4:85:93:e6:bf:47:c0:90:0d:b2:70:6b:
                    8e:c1:4e:d1:8f:b0:a2:77:9d:e9:03:b3:a5:e8:18:
                    36:9d:0b:c4:1f:9d:8f:04:9a:6b:23:77:b5:04:db:
                    cd:67:86:e6:cc:49:e7:1b:4e:e2:24:61:26:b1:36:
                    c0:56:40:ef:71:8d:89:f5:21:2f:00:25:87:be:81:
                    8d:41:bc:73:3e:ba:61:91:47:83:cd:6e:3d:8d:8a:
                    3e:75:49:32:f8:27:7a:ba:79:fb:c1:fe:57:23:35:
                    d6:a4:e2:d4:f0:19:fa:d8:22:a0:7f:e9:0c:4f:05:
                    1d:2b:d0:d1:e7:21:1b:02:07:63:29:4b:68:2c:2d:
                    e9:77:5d:7f:44:c2:96:e7:20:1a:62:0f:f8:67:ca:
                    f5:8b:1f:18:bc:b9:d9:3e:3b:35:f0:72:db:04:bc:
                    b2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5D:5D:44:D1:72:83:99:A5:C0:FF:71:17:E5:05:F6:19:F0:DA:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2559b9e9-9dc4-3b2c-91a8-00b13a601922.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.32.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:4b:43:92:dc:cb:84:cb:43:53:29:3f:8e:7b:49:17:a2:8b:
         38:7d:84:c2:8d:c4:3b:dd:4b:80:b1:ef:3d:bd:d7:17:25:5c:
         82:33:d2:65:fd:49:11:21:74:ca:24:5a:5c:6a:5b:e5:87:af:
         28:0f:92:7f:de:55:7b:b1:f3:af:e7:d3:7e:68:25:52:47:5c:
         44:55:b6:3b:27:4f:6d:e5:14:14:a7:d9:97:5e:ac:7a:8d:6a:
         e2:68:49:74:8e:0a:dd:9d:07:4b:14:43:91:06:d5:ff:68:1c:
         67:c9:fe:08:d0:6c:69:24:50:ca:d6:af:ee:19:a0:2e:f9:22:
         df:df:c9:00:19:32:eb:2f:c1:54:d2:74:a3:ee:50:47:32:21:
         83:63:c8:84:b7:ec:9f:6f:47:ac:7c:fc:89:48:11:73:92:3f:
         14:fd:56:46:61:55:bc:70:6f:78:d9:7c:07:5e:b4:ca:6d:67:
         dc:97:80:14:af:c8:36:e5:d1:fc:2a:38:6c:42:28:c6:bc:56:
         25:b5:7d:21:d3:7a:aa:39:a6:7a:a2:8c:4c:2e:41:e7:54:84:
         d6:a8:4a:2e:a0:5b:f8:35:cd:e7:4e:d6:80:52:48:c4:f0:bd:
         8c:b1:9e:f0:5c:f0:6f:e7:14:1d:14:d6:e9:52:68:da:c8:71:
         4a:97:d1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----