Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3a31ca96-c4bc-3507-be94-a74d40713c99.roa
File:                     3a31ca96-c4bc-3507-be94-a74d40713c99.roa (raw, json)
Hash identifier:          lbtL3LXUOU0+calmYN2VO8uWzQ0j9uT8ASvYlRg9Nks=
Subject key identifier:   F8:E8:A8:F5:AB:0C:33:42:87:D3:A5:06:80:FA:F6:68:BA:50:9E:8F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EDDC376A2F8235FBC77733500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3a31ca96-c4bc-3507-be94-a74d40713c99.roa
Signing time:             Wed 10 Aug 2022 12:00:00 +0000
ROA not before:           Wed 10 Aug 2022 12:00:00 +0000
ROA not after:            Thu 15 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.56.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:dd:c3:76:a2:f8:23:5f:bc:77:73:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 10 12:00:00 2022 GMT
            Not After : Sep 15 04:00:00 2022 GMT
        Subject: CN=74d1ccb0-2e0e-40c8-96a7-b7599cf0583b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:96:2b:fd:08:29:a7:38:ca:99:bb:fb:2a:71:
                    30:50:e0:93:68:d1:6b:39:5e:95:0c:41:0a:a3:d3:
                    ac:0d:df:7c:76:79:87:6b:14:80:b1:54:e7:ae:01:
                    37:e0:bd:26:94:0a:e7:18:00:e1:34:a7:a6:9e:d0:
                    32:82:09:f9:ab:49:93:b7:4a:e1:ce:23:46:eb:78:
                    98:fc:6c:2f:af:5c:9b:ef:b1:c2:e2:c5:44:a7:2d:
                    bf:a9:db:27:f3:01:23:d3:8d:64:f2:91:23:92:39:
                    15:4b:64:89:16:e5:43:a2:60:c5:a5:cb:78:4e:05:
                    6f:fb:35:3a:f8:74:a6:ed:39:34:8f:ca:d7:58:62:
                    c7:25:71:f0:fb:95:db:27:77:9b:4e:6b:3d:81:62:
                    a2:38:3f:42:3b:ef:77:f8:b7:3e:96:58:6d:bc:b1:
                    a7:aa:74:bc:ba:03:6e:0d:d8:eb:74:14:9a:b1:32:
                    da:a3:e0:66:41:a1:f0:b6:3f:03:af:a2:de:1b:a5:
                    d0:eb:7a:59:21:e5:5f:c1:0e:df:06:71:e2:47:3f:
                    e3:df:c7:c8:a7:a0:84:9b:78:43:47:be:56:59:66:
                    bb:8b:2b:b5:04:e3:24:e2:17:c0:82:e2:7d:15:ec:
                    ac:b5:d6:86:94:89:d4:5b:2d:8a:90:8b:72:6f:41:
                    e3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E8:A8:F5:AB:0C:33:42:87:D3:A5:06:80:FA:F6:68:BA:50:9E:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3a31ca96-c4bc-3507-be94-a74d40713c99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.56.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:6d:9e:80:09:38:79:d2:48:0c:87:bd:d0:90:5a:8e:6a:be:
         b0:bd:54:89:ae:f6:d5:81:2a:d9:03:0e:43:ec:c6:47:ab:1c:
         58:a6:3f:94:5d:f0:95:dc:de:4d:cd:15:f6:bd:1d:7b:89:24:
         e1:2a:f3:5a:74:da:61:11:c2:73:15:f7:74:f7:70:9b:67:08:
         77:de:27:c5:df:6b:2b:48:ab:44:87:ec:d2:a4:49:e5:52:8e:
         00:0b:f7:6c:7a:8d:51:27:e5:e1:e2:d2:df:2d:da:d4:87:aa:
         b5:d4:4b:51:9a:60:e2:8b:0f:ad:00:de:c1:4d:98:46:9e:ca:
         c3:0e:92:bb:60:b8:b8:73:3c:76:28:24:8f:93:ea:07:cb:68:
         ca:04:39:42:f3:8c:a8:bf:a4:0c:6f:6d:e6:e3:f4:13:48:f0:
         d7:40:3f:a7:42:0b:34:03:9e:ae:74:81:bc:8e:1e:b5:33:e9:
         4a:45:c9:e8:c3:69:18:d4:fb:08:49:9e:cf:ec:74:8c:96:ad:
         99:43:37:83:8b:38:46:42:b5:b3:eb:dc:db:d8:7f:6d:6b:12:
         08:0e:62:18:a2:4b:d6:ae:e4:f6:37:95:c2:b6:70:81:8f:2a:
         8d:62:9f:a1:9d:98:1e:87:e6:3a:0b:1c:fb:28:63:8d:57:48:
         14:ee:16:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----