Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c9713f6-abe5-32b7-a91a-bb300083b544.roa
File:                     4c9713f6-abe5-32b7-a91a-bb300083b544.roa (raw, json)
Hash identifier:          0DWFrYzbkyN0SUMIy1TD5rrwflAgxZ/+BWjEBX10xkg=
Subject key identifier:   0D:EB:66:7C:98:14:21:48:14:85:FB:E2:FE:69:C4:D8:0C:EC:F3:EF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D339682CDAA8E45CAF5A2D700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c9713f6-abe5-32b7-a91a-bb300083b544.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        142.54.128.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:96:82:cd:aa:8e:45:ca:f5:a2:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=3781e5d6-b530-4f6d-b46a-400ec00fdc8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:50:15:68:4f:ad:56:a6:7d:f6:ce:3e:d3:29:
                    03:dd:af:22:5d:ca:66:58:5d:74:c7:08:dc:30:31:
                    f4:e3:f4:d9:78:ca:5e:26:d3:60:6a:b0:b9:18:08:
                    3f:20:4e:21:af:d3:c3:ae:2e:12:be:af:b3:09:bd:
                    78:d4:06:9d:44:48:08:a1:98:3f:68:c6:1d:2c:ba:
                    c7:11:3e:8e:9f:90:c1:df:ff:3d:10:72:7e:d7:f9:
                    e2:0f:00:d7:84:47:ad:ec:20:6f:38:5d:0c:d0:42:
                    67:69:f4:22:49:b7:4d:39:24:aa:3d:a7:08:66:32:
                    3d:92:9e:dd:dc:6f:ab:e9:8a:a2:ba:d5:13:e9:f6:
                    ae:6e:b7:42:63:ac:34:ba:4b:e2:22:fc:fe:e3:f7:
                    64:72:ad:f4:6e:47:2f:df:c2:ea:68:53:a8:36:8f:
                    5f:1c:c6:d9:bf:32:c1:da:fc:91:15:8b:51:b4:c3:
                    ad:37:3d:a4:0b:73:9a:23:aa:c1:8c:00:00:a0:a9:
                    0a:43:1e:5d:7f:8c:ab:a5:7c:e6:e8:80:4d:73:1a:
                    04:f7:b1:24:a8:14:97:f5:fd:78:73:1d:ba:e2:55:
                    4e:37:b5:35:a1:1d:de:aa:60:ec:5a:45:4d:1e:01:
                    f4:e0:ab:c5:97:65:85:63:b3:c2:4d:0d:65:2b:4f:
                    aa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EB:66:7C:98:14:21:48:14:85:FB:E2:FE:69:C4:D8:0C:EC:F3:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c9713f6-abe5-32b7-a91a-bb300083b544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:68:5f:0e:36:ca:98:22:7d:f2:3e:17:03:3b:69:0c:7c:3d:
         d2:64:ee:0c:f6:da:5c:c0:c1:eb:d0:25:da:6a:95:6c:3a:bc:
         4b:62:e3:74:ee:dd:9a:49:f0:d1:1a:97:d5:5a:7f:75:25:b1:
         66:56:fa:e0:19:a1:90:ba:86:21:7e:42:79:25:47:19:e9:a1:
         e2:c2:31:44:ef:8d:d0:5d:c0:28:d0:10:45:e5:45:d2:9b:58:
         d6:1f:7a:fa:0b:0c:91:26:cc:7e:2e:6e:df:0b:09:c2:e9:1f:
         e7:76:bc:73:5a:8c:d8:a0:4a:b9:97:f0:75:36:04:43:ff:8b:
         15:30:89:c8:ac:e2:b2:f3:00:6b:82:02:f0:ab:d6:d7:21:2f:
         98:ac:45:e7:d4:8c:36:70:e5:f9:ec:e0:0f:09:81:ce:ab:fd:
         3f:c9:8e:a2:48:1e:94:8f:05:e4:ec:84:36:67:a0:83:78:4a:
         03:05:3a:01:1c:53:37:01:10:d6:8a:07:f8:4d:55:7a:5f:52:
         2b:4f:e4:a6:03:94:3b:bd:0b:ae:af:d1:c8:e5:5d:71:61:27:
         a8:91:5e:6e:f4:50:c8:b8:73:30:4b:f2:15:2a:e9:53:ed:bd:
         db:f6:52:2d:7d:9a:d9:2b:07:69:73:7d:92:a4:71:21:b0:30:
         3a:66:5b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----