Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3fcfbb71-4fb2-3176-8889-1d479a52e512.roa
File:                     3fcfbb71-4fb2-3176-8889-1d479a52e512.roa (raw, json)
Hash identifier:          LOHY9kgdBYPjhOEfc2UVXCZw2MCBCk5YPvo2zLlBDSw=
Subject key identifier:   D2:A2:35:82:F8:37:B8:11:20:21:F3:4A:5B:83:20:04:66:44:0A:D5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EDD9E17C9FFEBCC34A0809740
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3fcfbb71-4fb2-3176-8889-1d479a52e512.roa
Signing time:             Wed 10 Aug 2022 12:00:00 +0000
ROA not before:           Wed 10 Aug 2022 12:00:00 +0000
ROA not after:            Thu 15 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.27.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:dd:9e:17:c9:ff:eb:cc:34:a0:80:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 10 12:00:00 2022 GMT
            Not After : Sep 15 04:00:00 2022 GMT
        Subject: CN=0881792f-8f3e-4d46-804c-7000a6dc68e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8a:1e:ed:b6:31:7b:8c:2d:22:89:50:5b:fd:
                    3f:6a:28:d9:81:8b:29:64:a3:28:53:dd:8b:8c:1e:
                    b6:f2:97:b9:b7:b9:ff:dc:b3:ab:fc:25:a6:ab:17:
                    10:dc:6c:31:fa:ac:70:97:1b:14:59:4f:94:4a:78:
                    b3:53:cd:e9:d3:e1:2c:47:d3:ef:09:26:02:a4:c9:
                    e1:bf:d6:02:27:cb:59:e3:45:26:4c:f2:06:5b:ad:
                    50:8f:2a:80:1b:c6:b9:43:93:b8:02:72:64:64:c2:
                    a7:db:2e:3d:ae:ac:22:02:3f:16:97:2b:8a:e1:e0:
                    47:6d:72:3f:47:b2:7a:5d:a7:94:78:77:f5:9d:71:
                    c6:55:da:b4:8a:bc:5d:c6:a8:d1:8e:57:c6:86:4a:
                    fc:64:1d:37:b7:78:43:0b:e7:b8:05:d7:25:90:6d:
                    7a:c9:9f:ff:ac:73:30:2f:61:f4:b5:25:bf:53:a9:
                    fe:54:85:35:55:a9:34:cc:d6:a2:cf:88:c1:22:9d:
                    83:3d:84:e6:fb:c9:c7:66:eb:d2:d1:89:1b:ff:96:
                    92:4d:10:e8:c9:b0:cb:38:2b:e6:56:75:88:d8:a4:
                    da:02:b1:87:9d:e7:19:0c:97:f5:01:11:80:97:9b:
                    ad:5f:de:03:2d:c6:e7:ea:67:84:5e:bc:70:86:f3:
                    be:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A2:35:82:F8:37:B8:11:20:21:F3:4A:5B:83:20:04:66:44:0A:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3fcfbb71-4fb2-3176-8889-1d479a52e512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.27.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:42:75:7e:6b:8c:1f:a0:de:3e:2d:36:6b:fb:2e:39:c0:da:
         46:01:80:ac:de:47:c7:6a:8a:04:98:7b:87:9b:4a:97:c5:51:
         08:c6:18:be:8e:43:5a:9f:56:5f:d6:a5:af:7e:70:6e:c4:c3:
         a4:ad:4c:7c:d3:bd:b5:0f:df:fa:63:f5:7e:3d:54:e8:96:53:
         84:2f:bc:57:6f:e3:c1:0b:e9:49:1f:82:0a:3d:89:6c:93:d5:
         89:a0:9f:7b:6b:76:a1:29:f2:23:11:11:22:c7:32:0f:1e:9d:
         47:f1:88:41:3f:95:6e:51:cf:1c:ed:11:88:2c:56:48:be:ae:
         83:16:d9:4c:ea:2b:fa:bc:e6:93:ce:df:ab:e9:6a:d1:18:70:
         eb:ac:a8:20:92:71:96:2b:ae:c3:d6:8f:94:8e:cd:43:b8:61:
         b4:88:78:ce:a9:71:0e:68:84:51:39:31:b5:83:99:13:07:f8:
         e5:32:dc:f5:df:10:10:64:93:85:62:60:50:d7:9f:9b:d1:2d:
         86:4e:b9:cb:f1:19:4f:cb:60:ed:ba:c9:b8:79:be:9e:bb:6d:
         02:0d:4a:2f:5a:76:d5:07:21:da:4d:1c:4b:7a:09:ed:c4:bd:
         c9:2a:10:09:49:6d:ad:25:2a:80:b9:6a:8a:27:b4:ad:97:55:
         fa:69:e5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----