Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2931acfa-4524-3397-ab13-34dbe26507e7.roa
File:                     2931acfa-4524-3397-ab13-34dbe26507e7.roa (raw, json)
Hash identifier:          ZBiURo0Op5f8pSttWu+wTfqpjnjPu2Rmr/PYGCBoto8=
Subject key identifier:   28:31:D8:53:B8:B0:AC:26:7B:C5:97:5E:C4:A6:B2:CC:CB:E1:08:B7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D593F4BB688F6A24CA58B6C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2931acfa-4524-3397-ab13-34dbe26507e7.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.135.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:59:3f:4b:b6:88:f6:a2:4c:a5:8b:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=7e5acb33-a1f4-4f09-9e5b-31c90c43736d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:28:da:d5:09:4f:8d:be:9a:f6:12:3c:7d:d8:
                    b3:54:fc:9f:50:01:5e:20:e5:d8:06:74:59:d6:07:
                    b4:37:31:7e:94:58:ce:59:3f:8e:c7:8c:f3:40:5d:
                    75:af:6e:d6:7d:05:40:93:48:c2:ff:51:44:0f:15:
                    71:60:58:ca:72:7c:3a:0c:ad:e6:f9:a4:d7:c5:44:
                    a1:6a:79:a6:81:89:6c:24:c4:8c:87:6a:82:39:b8:
                    5f:7f:cd:68:83:51:c7:b4:c4:24:42:3c:0f:ee:1a:
                    19:1f:aa:d1:3b:d1:33:17:4c:77:72:da:f5:f9:2b:
                    e0:e0:79:a6:6e:d2:7e:e8:3a:29:2f:a0:ac:79:2f:
                    39:38:98:26:6f:80:0b:2a:66:d9:51:04:39:a7:41:
                    ef:f4:14:f6:14:44:9a:e4:8b:87:0e:01:e5:91:16:
                    76:68:4a:f3:ea:44:fd:9f:cf:d0:f5:32:3c:9e:6e:
                    17:df:42:78:83:c0:1e:7b:a8:a2:e0:46:a2:f0:11:
                    0e:00:34:74:4c:03:c8:bb:68:e0:61:b9:35:71:44:
                    b8:12:4e:94:7a:50:3b:6c:33:7e:4f:f8:08:68:e6:
                    2f:4f:99:e5:93:50:11:ce:9a:17:49:1c:3a:2d:3d:
                    31:ae:12:29:0e:e1:7f:92:86:13:12:f0:a2:61:91:
                    80:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:31:D8:53:B8:B0:AC:26:7B:C5:97:5E:C4:A6:B2:CC:CB:E1:08:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2931acfa-4524-3397-ab13-34dbe26507e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.135.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:5c:6b:17:54:66:00:cc:91:72:0d:ce:fc:f7:0b:10:78:1e:
         6c:ca:04:1e:72:b9:b8:6b:8d:e7:d5:07:92:b0:e4:c8:c1:b5:
         34:7c:2d:18:ee:99:59:c2:42:30:30:0b:0d:f0:cb:b9:91:f1:
         72:7a:cc:26:cf:dd:a5:8b:a7:40:44:07:74:a6:69:97:4c:b9:
         65:9b:55:28:fc:ae:d3:75:74:db:90:6c:36:92:7d:10:a0:41:
         27:a3:ed:e0:5c:53:2e:e2:b6:5d:5b:26:1c:b9:19:98:ce:3b:
         6d:4a:02:e4:89:b9:56:48:db:6a:b1:f3:1d:7e:4d:6d:ab:eb:
         83:0a:2b:1e:ad:b0:b3:3d:7b:58:6e:82:9d:ad:49:3c:36:4a:
         f9:40:8b:fa:a8:89:0b:ca:c2:2b:70:12:d8:03:64:e5:64:10:
         a7:59:30:7a:18:e0:ce:e3:01:4d:d2:29:bb:7d:5d:20:6d:f2:
         8c:69:d4:7d:05:20:db:47:d6:97:fe:09:f9:3f:5b:b4:8c:2a:
         6a:08:1f:a8:10:3c:82:6b:99:7c:0c:e6:e0:b5:3c:03:99:ec:
         5e:fc:c7:c4:f1:9a:55:05:fd:39:74:5a:01:ca:78:3e:bf:74:
         9c:ac:7a:1c:50:5d:46:d9:00:14:ba:6c:98:da:97:c4:ca:12:
         84:98:c4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----