Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ec74a6c-3126-38b6-b6c3-6c341336b29e.roa
File:                     2ec74a6c-3126-38b6-b6c3-6c341336b29e.roa (raw, json)
Hash identifier:          R+vu3GyDCRFgVpfOYZZe9DW6Qxhv5I28f2B9Vlm3ApM=
Subject key identifier:   25:93:1F:DC:89:4C:20:C4:0E:75:B1:E6:60:F2:F2:C2:66:5F:12:0C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858403DDEFFBC8026A3177E2BC660
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ec74a6c-3126-38b6-b6c3-6c341336b29e.roa
Signing time:             Wed 14 Dec 2022 12:00:00 +0000
ROA not before:           Wed 14 Dec 2022 12:00:00 +0000
ROA not after:            Thu 19 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        16.178.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3d:de:ff:bc:80:26:a3:17:7e:2b:c6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 14 12:00:00 2022 GMT
            Not After : Jan 19 05:00:00 2023 GMT
        Subject: CN=7cea1f6a-0aa8-4625-91e7-0737d16fdf69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:22:0a:79:ea:64:46:89:0c:fe:a4:81:72:12:
                    67:72:e5:a4:58:4d:b7:98:73:a4:0e:d0:47:67:ee:
                    49:2a:ed:8d:b8:6e:42:5f:19:4f:fd:b9:88:92:61:
                    9f:5c:1f:e3:e9:2b:c3:37:89:bd:03:84:56:43:2b:
                    9d:10:51:8c:09:cd:c3:2a:23:91:a2:01:33:bd:9d:
                    ac:9b:d0:c2:6b:52:ed:cf:9c:a4:8c:d4:53:31:cd:
                    f1:ae:0d:16:10:3b:68:33:d1:1b:47:ac:79:9c:af:
                    f1:0b:c8:80:f4:4f:7e:fd:bf:11:92:82:cf:1a:dc:
                    f4:fe:17:93:0c:18:29:dd:54:3b:2b:78:a9:b0:5a:
                    1c:65:d7:f0:aa:d4:c9:00:de:b6:f0:ba:af:38:f4:
                    77:80:e7:73:37:86:b2:c2:b3:f0:a6:33:aa:fb:3c:
                    f3:e7:e5:ca:7b:20:95:3f:db:44:44:aa:a3:99:f7:
                    0c:04:ff:88:e5:5a:d5:2d:d0:3a:25:e9:af:29:27:
                    51:5e:9d:ed:a8:e9:b0:41:d7:44:df:c2:84:15:ad:
                    64:1f:de:ec:2a:1f:60:19:ca:ce:3d:cd:11:60:79:
                    67:a1:f2:b6:30:ca:86:44:4f:48:67:61:69:aa:ae:
                    85:4e:5b:f8:2b:1e:ab:a3:7b:d8:ac:97:3c:a1:7c:
                    8c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:93:1F:DC:89:4C:20:C4:0E:75:B1:E6:60:F2:F2:C2:66:5F:12:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ec74a6c-3126-38b6-b6c3-6c341336b29e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.178.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:9c:02:fb:e7:80:3f:39:d2:4c:20:c9:b4:80:2a:88:d5:57:
         74:13:15:93:6a:13:74:65:b1:6a:a9:19:b2:51:17:67:9d:64:
         12:da:87:d3:58:8a:94:31:8b:76:f1:f0:93:12:79:b5:5a:ae:
         4b:13:ae:73:74:9a:69:21:d4:d7:fa:f9:15:5d:04:09:a9:fc:
         16:e4:0c:89:12:a0:5d:89:79:0a:d8:38:d3:2b:b6:71:b7:d3:
         f9:e6:4f:75:64:52:df:2e:94:8c:f7:e4:69:e8:da:6a:ef:8a:
         0c:fa:ee:7f:e1:cd:71:d9:5e:41:fb:45:46:01:bc:fc:2b:f8:
         58:e7:90:a0:f5:5c:49:c6:68:44:24:28:0a:f7:f5:7b:26:fa:
         57:f2:60:ff:00:3a:12:b0:f5:83:d2:81:2e:a0:b1:0b:87:72:
         a0:f3:0e:85:bb:9b:3d:4b:14:fb:27:7c:6d:c6:e5:e1:9c:4a:
         42:bf:3d:a0:2a:4a:0c:b6:0f:ad:94:c3:c7:db:48:e3:c5:40:
         5f:26:65:26:fa:9a:6e:7b:40:a8:ec:4d:ca:1a:57:e3:2b:02:
         a4:c9:c2:11:be:29:00:0e:b3:d2:fd:7a:48:61:57:6f:ed:6f:
         4f:b2:6d:72:42:dc:1b:cd:5d:ec:bc:d1:54:47:5b:62:bc:43:
         ad:be:90:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----