Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/50db9e90-f469-31c0-b889-d3626a59da2b.roa
File:                     50db9e90-f469-31c0-b889-d3626a59da2b.roa (raw, json)
Hash identifier:          xmli+LqARGpXZ/ck13uDb+8ODt/inl+/a9XggeaLGzM=
Subject key identifier:   A3:EE:71:FC:42:DC:09:7C:B3:86:9D:6E:42:DA:8E:17:50:52:60:E7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EE36018C4085CEB95E5674200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/50db9e90-f469-31c0-b889-d3626a59da2b.roa
Signing time:             Fri 12 Aug 2022 14:42:08 +0000
ROA not before:           Fri 12 Aug 2022 14:42:08 +0000
ROA not after:            Sat 17 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        108.136.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e3:60:18:c4:08:5c:eb:95:e5:67:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 12 14:42:08 2022 GMT
            Not After : Sep 17 04:00:00 2022 GMT
        Subject: CN=9996977e-7d22-49a1-8aeb-fdec65c0e933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d6:50:82:80:ae:dd:b7:06:63:2f:4b:fd:cb:
                    ec:41:81:c3:65:c6:28:e3:f1:1f:c7:dd:ba:b4:aa:
                    30:49:5e:94:91:01:af:2b:06:06:13:47:44:99:35:
                    64:ad:62:d8:a3:a0:25:fd:7a:4a:dc:1a:ac:85:55:
                    e2:5a:45:41:dd:e0:a8:d0:c1:2e:6e:4f:62:e4:eb:
                    5d:a1:92:4a:28:46:06:42:46:c8:4d:d6:b6:7f:b9:
                    2e:0e:69:e7:64:b4:4e:95:d5:a8:02:45:43:66:66:
                    92:f7:b6:ed:73:87:37:4c:da:da:dc:9e:f7:ea:c2:
                    3d:7e:e7:7d:7d:17:01:01:c1:ea:59:ae:cb:e9:63:
                    c5:32:a5:c9:73:5e:1c:98:e6:a0:e0:ef:e9:e1:52:
                    b7:fc:b1:2e:17:01:4d:9a:9a:66:67:54:1b:d7:9c:
                    1e:07:46:76:e2:0b:7c:cd:54:ad:eb:59:c4:39:aa:
                    eb:37:0e:d4:ec:cc:6d:2d:55:83:02:6c:d7:38:85:
                    be:a2:64:cb:5c:d2:0b:94:7d:9b:7c:10:5b:45:e5:
                    16:19:2e:ab:88:7c:10:2d:84:82:c4:6f:97:b8:44:
                    6b:c6:77:a7:0d:27:7b:13:4f:3d:1f:04:b3:72:23:
                    b4:2b:79:39:3a:17:0d:8d:7a:30:63:1d:db:94:53:
                    52:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EE:71:FC:42:DC:09:7C:B3:86:9D:6E:42:DA:8E:17:50:52:60:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/50db9e90-f469-31c0-b889-d3626a59da2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.136.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:61:d0:d1:32:10:33:41:72:53:89:38:80:50:90:49:2f:39:
         a8:96:27:c4:6d:8c:76:65:2e:ab:9a:cc:c4:1d:ce:ff:31:57:
         74:09:0f:64:37:e2:04:b6:b9:55:a3:31:95:c2:5f:41:e6:53:
         b1:7d:8e:03:88:eb:2d:57:89:8a:c0:51:0f:11:12:ff:7b:f6:
         ec:8c:ec:db:fc:84:11:ff:6a:94:41:74:2d:13:4e:44:c8:9c:
         09:8f:9b:dc:23:2d:ad:4b:92:38:8f:9e:ff:aa:6d:ce:a9:fa:
         4a:71:a9:8e:e9:ee:34:2c:97:ef:e1:30:47:a2:7f:44:a8:66:
         88:d8:62:cd:3e:4d:46:c0:34:c4:57:7c:c6:91:88:71:c3:c0:
         0d:dc:b7:9e:7b:97:c6:8e:52:57:0f:e8:10:ec:18:93:fb:95:
         90:e3:42:18:e8:08:6d:4a:eb:7b:92:d6:25:77:56:5e:b0:b5:
         6f:ff:b0:21:c3:e8:e3:bb:b0:a7:79:6d:59:0c:1c:73:55:b2:
         b9:d9:2f:cf:08:c7:84:72:d1:c3:83:41:b6:e9:fb:69:4c:d2:
         a2:1b:73:c8:a9:ba:53:cb:cf:77:bb:cd:8a:7a:9f:51:da:aa:
         17:5b:14:12:64:de:f5:62:f7:49:b0:a1:98:34:97:55:35:0b:
         f4:f8:ed:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----