Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b13ab8d-3fc8-38d1-bca1-f17e109c014e.roa
File:                     3b13ab8d-3fc8-38d1-bca1-f17e109c014e.roa (raw, json)
Hash identifier:          Ey3KonRLVmgt8ZF4+kK2BbJMZ6HSKw3ufPVue8yi45Y=
Subject key identifier:   6D:87:66:00:33:7F:A5:F7:A7:80:95:1B:43:FF:09:81:55:32:AE:DE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F8AFEE92E2C8E2354DFE98C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b13ab8d-3fc8-38d1-bca1-f17e109c014e.roa
Signing time:             Tue 11 Oct 2022 18:48:07 +0000
ROA not before:           Tue 11 Oct 2022 18:48:07 +0000
ROA not after:            Wed 16 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        56.104.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8a:fe:e9:2e:2c:8e:23:54:df:e9:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 11 18:48:07 2022 GMT
            Not After : Nov 16 05:00:00 2022 GMT
        Subject: CN=4b798c99-f557-45d9-96d6-ff83467c5185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:be:54:e2:93:7f:ec:40:f9:7a:88:0b:4b:88:
                    fd:1d:f3:3b:3d:03:5f:d7:99:f5:d3:b0:a7:12:fd:
                    f6:eb:1c:c0:5f:7b:7c:d6:47:94:f8:69:92:42:08:
                    73:8b:17:db:b2:1d:11:95:fd:42:e0:c5:80:c4:3b:
                    58:58:d0:fd:e2:b7:3b:a3:88:c4:b9:29:29:16:d7:
                    ad:37:0a:72:50:69:c6:d1:45:0b:d0:07:5e:af:2f:
                    62:ee:ff:82:a4:18:87:de:9d:c6:25:b6:37:02:46:
                    15:79:84:83:45:7e:1e:b5:86:fc:d0:2d:7c:0c:53:
                    91:b4:9a:53:02:be:7e:b2:ce:b0:dd:81:fa:b3:78:
                    3b:3d:43:b9:45:44:91:59:2c:3f:5a:86:7f:d3:18:
                    27:6f:2f:e9:3e:2c:36:74:a3:02:a9:f3:0a:1a:ea:
                    a4:5c:64:15:df:9e:b4:01:f0:27:4d:0a:6a:18:06:
                    6c:bf:5d:7e:10:9f:88:34:46:54:76:73:53:f9:6a:
                    69:c2:70:70:90:c5:a9:30:40:f3:e9:e8:4d:5e:d9:
                    87:71:52:f9:44:0b:b0:62:d9:8e:ce:bb:6c:4a:76:
                    d4:96:74:36:1b:b8:a2:04:51:78:9f:36:9d:0e:2e:
                    84:c3:68:39:66:49:16:ad:1d:54:87:9f:64:4b:1e:
                    a5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:87:66:00:33:7F:A5:F7:A7:80:95:1B:43:FF:09:81:55:32:AE:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b13ab8d-3fc8-38d1-bca1-f17e109c014e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.104.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:93:d1:e7:3a:90:0d:61:44:d4:a0:7d:8e:1a:3b:ca:25:26:
         49:be:39:c4:a6:5d:6b:a7:10:e4:cf:c2:7e:bf:41:c3:bc:0f:
         ce:5b:ad:1a:02:53:3b:8c:50:91:9e:b5:49:a9:fb:65:a4:a1:
         1e:ed:73:4d:1f:d1:31:eb:69:9d:3b:39:93:e2:89:4f:eb:12:
         47:da:47:2b:bc:62:61:6e:ae:e5:58:1f:5c:77:a4:cb:de:12:
         5e:28:5c:1e:a0:b6:34:54:f2:21:d1:81:d9:33:b0:fb:9a:23:
         0e:f7:99:b3:54:5c:64:18:73:63:74:c7:ea:a7:df:43:01:5b:
         6e:07:f6:f4:15:d5:1f:e7:44:a5:82:4e:fb:ce:27:fd:1b:fa:
         5f:70:0d:8c:64:97:c1:3e:84:a4:95:0f:2f:20:52:ef:98:a1:
         18:11:83:e5:e0:9d:85:7a:48:89:f5:03:ca:06:aa:e2:61:c2:
         d5:3f:1d:be:eb:34:0e:53:2b:6d:f4:2b:e6:3f:e4:ac:62:31:
         91:37:bc:f3:16:ac:12:e3:a8:f3:5f:5a:be:04:4c:df:57:8c:
         8d:ee:9b:a0:8e:ba:c0:b6:59:97:fa:36:49:99:74:fe:2c:f7:
         52:b5:87:04:a2:43:d2:88:95:4f:8a:ce:54:67:86:95:b4:45:
         8a:e7:2a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----