Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2803daf6-711e-3b94-86b6-4e3bce6b5096.roa
File:                     2803daf6-711e-3b94-86b6-4e3bce6b5096.roa (raw, json)
Hash identifier:          j9YNBclAw6f1Jj1ezMl0L0V5rmWb2BD8V9FWv7J+Bw0=
Subject key identifier:   E7:E8:36:F5:E8:05:43:4D:82:B8:0B:8C:F4:75:87:BB:12:70:47:42
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EB1275826E2CB2E253401FA00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2803daf6-711e-3b94-86b6-4e3bce6b5096.roa
Signing time:             Mon 25 Jul 2022 17:39:07 +0000
ROA not before:           Mon 25 Jul 2022 17:39:07 +0000
ROA not after:            Tue 30 Aug 2022 04:00:00 +0000
asID:                     701
IP address blocks:        139.56.1.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b1:27:58:26:e2:cb:2e:25:34:01:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 25 17:39:07 2022 GMT
            Not After : Aug 30 04:00:00 2022 GMT
        Subject: CN=eddd8e77-95d6-47a4-99ab-ffb593291b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:da:86:ce:0d:01:ef:79:b0:de:18:a8:b4:4d:
                    2b:1c:09:99:ea:2d:4f:6c:5d:33:4d:08:4c:55:01:
                    fa:d5:8b:6f:8d:1a:4e:0e:7f:97:ed:56:5c:ce:ff:
                    00:22:cc:d4:81:07:e6:e6:11:bb:fb:54:ed:1f:cd:
                    84:6d:71:9b:6f:f4:72:61:23:fd:b4:99:1f:80:a1:
                    7b:0f:63:7a:ce:27:27:08:fc:d6:75:c9:2c:e5:c6:
                    6a:19:f0:cb:e9:a0:2b:10:6e:99:aa:d5:80:d7:02:
                    ab:b0:85:96:7e:bf:13:e1:f1:c3:24:ca:1d:35:3a:
                    a0:d5:87:49:41:92:14:68:20:15:0b:69:5e:a3:1c:
                    2e:31:1f:6d:0c:2d:5c:c4:3f:ad:08:b3:72:d3:38:
                    37:58:5c:79:4a:dc:ba:10:f0:d3:b7:5a:67:9a:0a:
                    95:1c:45:91:05:76:97:cf:a9:32:8c:87:16:53:19:
                    65:81:96:39:17:87:74:10:5a:77:b7:41:10:9c:09:
                    81:55:80:99:7c:31:91:ec:30:df:cb:19:8f:d5:e3:
                    b3:da:a1:d1:44:f1:8d:14:61:27:ff:0e:71:16:c7:
                    f2:44:6a:f2:34:1c:ac:f9:c7:65:ea:b6:29:19:d9:
                    79:3e:74:20:9d:f0:5d:e1:fe:43:e1:3f:f9:fd:5c:
                    84:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E8:36:F5:E8:05:43:4D:82:B8:0B:8C:F4:75:87:BB:12:70:47:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2803daf6-711e-3b94-86b6-4e3bce6b5096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.56.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:ae:79:8c:67:dd:90:d8:42:36:f8:2b:ed:22:62:c6:e7:91:
         a9:4c:52:58:f6:03:30:c8:f7:7e:bb:1f:30:63:30:66:ad:5a:
         19:b6:5c:54:b7:42:cc:5d:cd:e1:a1:f6:6d:52:60:d3:94:80:
         24:0c:db:90:a9:00:31:92:f4:f8:fa:dd:ac:62:12:82:30:92:
         b4:1e:93:37:73:09:bd:a0:83:51:d2:7b:c2:75:60:ed:e7:61:
         80:eb:96:7f:8e:a1:ba:04:93:21:c1:ed:52:b1:1b:1a:7c:ff:
         42:3b:c7:68:96:6e:db:1c:dc:b3:38:44:90:4c:f7:ab:a5:ae:
         7a:56:be:3c:26:a5:98:4b:ed:7d:c7:fd:87:39:ff:2e:fb:29:
         aa:3d:06:1d:7b:f9:21:09:4c:62:04:d7:4b:48:d0:c5:c3:e5:
         f7:c8:a0:fe:22:12:75:48:07:a1:8e:86:6c:52:ef:bc:8b:19:
         7a:47:e4:82:27:21:a5:fb:4f:83:7d:76:2e:90:7c:40:da:19:
         09:d0:69:b9:9d:3e:7c:36:fe:03:e5:04:cf:89:b4:e7:97:75:
         48:6e:22:86:73:58:bc:17:96:10:99:2b:af:3a:8f:96:95:27:
         e0:8b:f6:15:2b:e3:64:13:7b:aa:7a:54:29:c6:40:b0:02:a9:
         7b:c3:77:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----