Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3a8e5cb3-c0b1-35a5-9d36-f29cb120b946.roa
File:                     3a8e5cb3-c0b1-35a5-9d36-f29cb120b946.roa (raw, json)
Hash identifier:          xNK9QX9aYuk2ZFIx49VhImNmE0zNDoSDKLh61FwIOpw=
Subject key identifier:   72:F1:E9:DA:A1:45:18:F5:32:79:61:7B:42:E8:76:CD:26:F0:4D:2D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E97F0C81137A08A684E8B76C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3a8e5cb3-c0b1-35a5-9d36-f29cb120b946.roa
Signing time:             Sat 16 Jul 2022 12:00:00 +0000
ROA not before:           Sat 16 Jul 2022 12:00:00 +0000
ROA not after:            Sun 21 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.159.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:97:f0:c8:11:37:a0:8a:68:4e:8b:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 16 12:00:00 2022 GMT
            Not After : Aug 21 04:00:00 2022 GMT
        Subject: CN=4c8fc426-3321-4d09-9864-5345a0986750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d4:d2:ac:0e:b8:68:b6:ee:91:8d:7f:9c:a7:
                    39:a9:b8:49:37:d8:08:0b:bc:90:19:87:49:56:fe:
                    c0:26:50:e9:09:63:55:b6:48:b3:07:db:24:02:ba:
                    a8:86:6b:a9:f3:2f:ad:e5:ce:1e:08:72:d1:a6:b2:
                    cb:ce:c8:0e:cf:90:b6:99:db:3d:02:2c:08:a1:67:
                    bb:2f:42:d9:cd:7c:0a:a0:b2:fd:65:4f:93:fe:38:
                    4a:93:9c:07:38:47:2b:3e:5b:25:c9:2b:52:e5:57:
                    3f:1c:d5:99:59:d3:57:c2:b6:42:e1:7f:dc:28:32:
                    63:dc:60:37:39:a2:f4:3a:34:76:b6:5b:7e:11:4d:
                    8d:c3:59:71:65:4e:8e:cf:7f:3f:73:b2:f0:88:98:
                    82:75:56:94:04:c5:de:95:35:0c:57:32:91:bb:99:
                    7f:76:57:90:80:04:d4:f7:01:d3:2f:86:e4:3c:3a:
                    96:ed:e0:4d:87:ae:43:44:4b:08:b4:73:94:33:94:
                    6a:ae:20:02:74:6c:50:eb:fa:be:76:0d:90:f3:cc:
                    df:8c:f9:cf:64:0e:5b:eb:43:fe:8e:b1:65:37:3d:
                    9a:c5:44:7f:52:44:c9:4c:ca:75:d6:46:ad:85:b3:
                    43:41:86:31:2a:d1:b4:f8:24:c9:30:16:40:21:ec:
                    ff:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F1:E9:DA:A1:45:18:F5:32:79:61:7B:42:E8:76:CD:26:F0:4D:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3a8e5cb3-c0b1-35a5-9d36-f29cb120b946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.159.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:3d:c3:13:4a:c0:c3:8f:94:d4:2a:f5:03:a8:8f:ef:33:3a:
         80:51:ac:93:61:9f:da:ac:cc:41:99:b7:79:04:7d:2d:9c:15:
         44:05:cc:44:b4:0a:51:ba:22:b7:c4:6b:c5:5a:e5:5e:ae:9f:
         06:7d:0d:c2:4a:01:96:db:6a:20:7e:ee:b3:76:f0:79:99:7a:
         a9:8f:8d:e6:57:a9:29:07:ad:46:2f:cf:36:6f:e6:b2:a0:0a:
         68:d8:80:56:6d:c6:9b:86:48:8c:77:f6:f3:96:a4:8f:ea:fb:
         c5:f5:f8:79:ee:e1:ab:e2:1c:d7:ce:71:4d:be:fc:4d:cb:6d:
         86:2a:98:4f:3b:5b:c1:d9:0e:63:0d:21:5e:5c:97:99:57:44:
         25:1b:b9:f3:92:e3:5c:e7:96:16:6a:6b:29:71:ff:54:02:7d:
         78:58:7b:1b:7d:90:85:75:82:de:dc:50:75:6a:18:be:a4:61:
         d0:c4:28:75:e1:a2:ef:51:da:f7:cc:cd:82:cb:f2:d2:b2:74:
         a3:8d:9b:51:b0:2b:2a:f8:61:cf:4c:7f:69:47:47:a4:a1:14:
         e2:e5:18:7d:19:7a:48:16:65:29:71:11:6c:be:fc:16:66:0f:
         42:1d:05:b0:eb:a9:ea:fb:04:5b:da:31:9b:ad:e6:46:a0:cd:
         c2:71:49:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----