Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/26d60268-352a-35a2-aa86-9c673b710915.roa
File:                     26d60268-352a-35a2-aa86-9c673b710915.roa (raw, json)
Hash identifier:          wotApD6cBM4H29ZQsK/snlS8gHUzZYnbWsOg2VGzyaA=
Subject key identifier:   8C:08:98:20:DE:D1:E1:A8:15:C8:5C:13:B6:3F:BF:32:61:19:66:BC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858404444E30FD0902DF71F9E1080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/26d60268-352a-35a2-aa86-9c673b710915.roa
Signing time:             Fri 16 Dec 2022 12:00:00 +0000
ROA not before:           Fri 16 Dec 2022 12:00:00 +0000
ROA not after:            Sat 21 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        165.178.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:44:44:e3:0f:d0:90:2d:f7:1f:9e:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 16 12:00:00 2022 GMT
            Not After : Jan 21 05:00:00 2023 GMT
        Subject: CN=86162149-133a-46de-98cb-d69276708f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a8:2e:9d:e4:a0:39:85:51:f2:12:74:d0:df:
                    e1:08:ab:b9:87:00:9d:db:65:e6:61:50:51:e5:ae:
                    3e:3b:9f:ed:f8:41:de:1c:31:62:4a:ea:7a:82:f1:
                    e7:8f:d9:42:61:e3:db:0c:4f:b1:64:2f:3f:c0:85:
                    29:67:62:34:d7:dd:e1:67:f5:83:35:4b:e3:e2:d2:
                    99:36:77:ce:90:18:90:e8:a7:33:1f:ba:24:b8:cc:
                    61:cd:30:5f:bd:3c:d6:d8:51:33:8b:13:f2:44:7c:
                    f8:37:7e:95:47:10:cb:41:38:92:7a:31:33:38:ba:
                    51:11:b0:93:44:ff:20:c8:8a:02:b1:05:8f:a6:bf:
                    3b:4c:1f:72:76:4c:d7:67:23:39:8b:c7:ea:a1:b8:
                    64:6c:13:33:d0:70:43:89:27:52:19:fa:26:1a:e6:
                    b7:b7:67:44:2b:e2:3c:02:01:4a:9b:dd:71:b6:38:
                    e2:bb:b2:0a:42:76:d5:6d:b6:3d:ad:21:91:2c:b8:
                    a2:41:9a:68:1a:c0:a3:e0:88:4a:ed:dc:58:f2:dd:
                    54:bc:42:64:51:04:c1:63:e3:c9:70:80:69:eb:39:
                    ed:bd:15:87:8c:da:a6:9d:a9:a6:c1:95:73:68:4b:
                    8f:d1:b5:c2:a7:20:61:bc:09:40:22:58:4d:a4:71:
                    1f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:08:98:20:DE:D1:E1:A8:15:C8:5C:13:B6:3F:BF:32:61:19:66:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/26d60268-352a-35a2-aa86-9c673b710915.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.178.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:2b:46:ce:8a:d2:f6:3d:9e:1b:c9:cd:88:00:b4:33:34:fb:
         9e:41:cf:fb:05:ab:bd:ed:7e:2e:2f:3f:c2:3f:77:0f:04:a8:
         2f:df:28:59:b6:4e:7e:36:43:0b:3f:78:80:17:d7:af:f4:15:
         2d:89:fc:07:a5:05:95:2e:0e:a2:ae:da:90:91:81:31:8c:9a:
         74:ab:65:4c:48:9f:ee:4c:1d:5b:28:80:53:e8:a2:52:0a:2b:
         3f:52:b5:b6:e4:56:e6:eb:da:b4:04:8f:b7:78:91:6b:04:95:
         e2:5a:83:11:4e:6f:6c:11:f4:d4:4b:57:bf:31:74:2c:93:c3:
         78:6d:d7:2f:89:5e:8f:fc:d1:75:85:6f:f9:fe:1b:48:36:f5:
         38:96:57:db:a2:d5:c2:44:16:90:78:3c:f5:d2:95:57:a0:96:
         cf:61:e1:b8:cc:d6:43:14:fb:1d:27:72:11:34:a0:a3:a6:2d:
         5e:c6:e9:d8:64:47:d4:0f:e1:2f:82:b3:f5:2e:cb:27:d8:1a:
         2f:68:9d:10:a3:7a:a8:bb:09:d4:69:7e:81:0d:db:fd:25:7c:
         cf:ac:7d:2b:ac:c2:73:2e:8a:b0:98:81:ab:9a:13:13:d1:0d:
         a3:dd:2b:10:32:4e:df:76:32:9e:27:5b:83:43:2e:82:cd:6d:
         a7:a8:60:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----