Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b2479a7-6e50-31d3-89ef-282e299dfe2f.roa
File:                     3b2479a7-6e50-31d3-89ef-282e299dfe2f.roa (raw, json)
Hash identifier:          SLbr/5XdxrYmTAAS6ZLKk0WJVpOzKqxNTRDeDgjuhUM=
Subject key identifier:   18:14:52:AE:F8:DF:71:60:8B:79:FB:31:3D:72:30:A8:10:0E:E6:7E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FE6FA5B05406CFCBC7244F830
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b2479a7-6e50-31d3-89ef-282e299dfe2f.roa
Signing time:             Sun 13 Nov 2022 12:00:00 +0000
ROA not before:           Sun 13 Nov 2022 12:00:00 +0000
ROA not after:            Mon 19 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        141.231.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:e6:fa:5b:05:40:6c:fc:bc:72:44:f8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 13 12:00:00 2022 GMT
            Not After : Dec 19 05:00:00 2022 GMT
        Subject: CN=a63addcf-5366-4dd6-8764-dac4ba904ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f6:7c:21:a8:ea:03:28:17:9e:32:78:95:f4:
                    8b:71:69:91:da:6c:5f:19:fa:6b:70:37:58:a4:ff:
                    ea:2f:02:83:39:59:6a:a7:69:fe:a3:04:53:dc:22:
                    c3:0c:44:64:95:7c:f7:83:ac:c9:b6:18:5f:4a:ab:
                    d1:e4:cf:69:3a:27:1b:fe:4e:f4:34:39:72:53:fb:
                    8c:07:13:ea:f0:d8:ac:22:da:bf:72:23:02:77:73:
                    6b:57:af:00:b8:b7:9a:fe:fa:cc:d2:6e:8d:d7:4e:
                    38:62:f4:94:36:ce:bd:ce:66:46:d4:d0:c7:51:f6:
                    5d:e1:54:c2:b6:6a:7b:3c:e0:4a:1a:7c:68:1f:c8:
                    21:33:de:c9:4f:a1:d1:40:69:22:83:18:53:c5:8e:
                    1c:89:7b:44:c9:f0:1a:89:71:d9:ec:a7:23:06:16:
                    aa:c6:75:b4:3c:10:42:18:82:65:24:14:7a:b6:69:
                    47:9e:44:26:13:4c:0c:6b:96:65:0f:5f:65:dd:12:
                    f7:1d:40:c2:76:75:17:ad:ab:e9:44:5c:49:8b:7a:
                    24:7e:7c:f5:a8:50:7d:b3:3e:9b:15:79:10:3d:8f:
                    66:60:e2:b5:63:42:b7:68:ea:01:29:d7:da:b3:e8:
                    f5:98:48:7b:02:e2:bf:b7:43:a2:5a:8e:26:8a:c4:
                    b9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:14:52:AE:F8:DF:71:60:8B:79:FB:31:3D:72:30:A8:10:0E:E6:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b2479a7-6e50-31d3-89ef-282e299dfe2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.231.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:9b:a8:bc:77:91:b1:0d:ee:b7:6c:91:36:2b:79:2d:fe:4b:
         42:56:b9:39:73:58:bf:c5:c3:a1:78:b0:5f:5d:50:31:c8:bc:
         cd:b3:c3:d3:65:5b:1f:e7:54:70:e5:8b:33:a3:b7:c3:8b:15:
         02:94:32:59:0a:fd:13:f4:e4:61:45:5e:39:91:d9:7e:46:a1:
         fd:c2:cd:d5:91:39:52:47:1d:0d:98:93:ab:0f:ed:a2:fb:4f:
         82:02:34:db:04:67:7f:65:36:d7:d5:2d:b6:10:3d:e9:a0:cc:
         32:51:20:2f:7e:4c:f8:ea:d4:c6:60:d8:2e:9f:f4:44:a1:33:
         1d:c2:ec:b1:b3:87:54:56:fe:0c:cc:6a:7a:92:3d:48:cc:7e:
         1e:f6:39:88:15:02:c7:60:3b:9c:93:7e:12:f8:fb:29:d6:61:
         d3:84:aa:fb:e1:6b:c3:32:61:e4:ea:4a:6d:e0:79:61:52:87:
         e7:2c:53:fd:5b:a2:c9:a8:bc:fe:f6:3c:e6:28:8f:fe:80:fc:
         bd:84:0a:0c:2e:e3:ee:e9:24:6e:5b:34:27:0f:64:2a:32:c7:
         e7:be:d6:2c:ae:31:9c:5c:5b:92:00:e6:bc:f7:18:c7:50:9c:
         28:3c:50:ee:85:d5:c7:4c:60:a3:80:57:5b:f8:df:65:c1:7f:
         03:11:c0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----