Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3888b0c0-ba64-34fb-9457-1cf7ce015689.roa
File:                     3888b0c0-ba64-34fb-9457-1cf7ce015689.roa (raw, json)
Hash identifier:          pxm0BmIwU5FbtdLHUWO22jnNvfyUn5OXG/Ymn7KGVhc=
Subject key identifier:   EE:0D:A5:20:76:51:68:E6:CE:7F:1D:1C:F9:2B:13:23:60:37:35:B1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840998FF50D68C4AE039DE28340
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3888b0c0-ba64-34fb-9457-1cf7ce015689.roa
Signing time:             Mon 16 Jan 2023 12:00:00 +0000
ROA not before:           Mon 16 Jan 2023 12:00:00 +0000
ROA not after:            Tue 21 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        16.50.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:99:8f:f5:0d:68:c4:ae:03:9d:e2:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 16 12:00:00 2023 GMT
            Not After : Feb 21 05:00:00 2023 GMT
        Subject: CN=92331150-5770-45a1-8ea1-61ea17c20ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:de:5b:0b:d5:11:76:03:f5:b3:04:7f:45:49:
                    c6:44:c5:93:64:a2:d2:3f:69:c0:25:d3:fe:8b:88:
                    d6:53:5c:2e:f1:b3:cf:d7:d5:13:8e:09:ad:0e:fa:
                    e4:c6:67:fd:a0:63:07:a5:b0:d7:94:00:00:62:ea:
                    ea:9b:21:1f:ae:8b:c6:53:da:d2:98:1c:56:5d:2c:
                    43:36:19:08:e9:ab:c7:b8:72:11:08:cd:3e:8b:20:
                    c7:e5:d8:c4:ab:4f:de:24:7e:f0:2f:85:b7:57:b1:
                    ff:41:ef:22:86:7a:a3:2f:db:cc:8b:2a:bd:71:e8:
                    6d:45:66:53:fc:b9:8b:b7:c0:0c:00:d5:a0:a0:60:
                    cc:c6:74:d5:81:7d:80:d6:29:4d:79:de:32:3d:81:
                    2b:9f:21:df:b7:d7:fd:ba:ff:6b:78:5c:4c:91:29:
                    91:05:f5:62:8c:87:18:3b:05:8d:72:24:3b:2a:70:
                    77:85:f7:ad:28:cc:f2:4d:5c:cb:0b:05:65:49:dc:
                    9f:42:1d:fa:59:28:a7:d9:14:9d:b3:42:cd:9b:48:
                    a0:0f:b3:34:9c:99:51:d8:2a:f5:94:e7:e4:d7:65:
                    65:1d:65:ab:f0:15:70:05:77:d1:43:e8:61:c0:e3:
                    32:5d:c0:d4:b0:d2:34:b7:3d:c4:4d:0b:28:63:7d:
                    f9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0D:A5:20:76:51:68:E6:CE:7F:1D:1C:F9:2B:13:23:60:37:35:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3888b0c0-ba64-34fb-9457-1cf7ce015689.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.50.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:f6:d0:07:69:0e:a7:ad:1b:9d:3e:e6:47:6c:3a:dc:2f:f6:
         85:53:ba:e3:5a:18:bc:e3:81:0c:60:05:35:65:4c:12:f5:ac:
         80:fa:c8:90:59:b2:0f:28:d5:51:ec:a2:8d:0a:e9:03:be:7e:
         2a:4c:c7:e4:e1:8f:82:c8:ac:a7:7e:37:92:65:2e:49:a0:16:
         14:2f:74:20:c6:94:be:d1:eb:37:c0:ed:df:9c:74:8c:1c:8e:
         69:01:d7:b9:49:2b:fe:80:4b:50:0b:cc:a1:19:11:fe:0b:0b:
         b8:82:67:51:22:f6:bf:80:a3:bb:0f:92:95:c3:ac:55:b3:a5:
         18:39:44:4f:99:3f:a8:d4:98:a9:64:70:85:9d:ce:f8:b3:88:
         66:44:6f:ab:35:7d:83:dd:77:a4:45:ec:6f:f3:54:3e:e7:0d:
         eb:f6:c1:7c:a6:33:fb:44:44:26:4c:a2:b5:a4:d0:8b:7f:b9:
         6f:8a:48:aa:0f:fe:4c:2c:0d:55:44:07:bc:6a:ba:cd:48:b8:
         18:a1:4e:73:2c:c9:e9:76:03:6f:fa:7a:0c:cc:1f:b5:85:02:
         4c:6e:07:fd:b0:35:10:d7:d4:1d:7b:78:31:e9:46:ef:9a:69:
         82:72:7a:47:9c:4f:68:fc:53:68:c1:17:1b:b4:fd:e4:c9:41:
         8d:a1:71:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----