Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6021bbd6-2990-3965-af93-1a76e51c009a.roa
File:                     6021bbd6-2990-3965-af93-1a76e51c009a.roa (raw, json)
Hash identifier:          s5cAgX7bEvRZBfRgnLOedicoU9lzzgxa5Q9SSnMjtdQ=
Subject key identifier:   E4:73:E2:7A:7F:A0:68:B0:96:31:8B:37:A8:C3:D0:BD:DA:D4:2D:55
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D42AE513A1E6733ABD8BABA80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6021bbd6-2990-3965-af93-1a76e51c009a.roa
Signing time:             Thu 17 Mar 2022 04:00:00 +0000
ROA not before:           Thu 17 Mar 2022 04:00:00 +0000
ROA not after:            Thu 21 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        13.192.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:42:ae:51:3a:1e:67:33:ab:d8:ba:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 17 04:00:00 2022 GMT
            Not After : Apr 21 04:00:00 2022 GMT
        Subject: CN=b9fb1745-3134-498e-beff-1ad2f1b577d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:07:cd:9b:fc:99:81:1e:a4:a4:05:70:c4:4d:
                    af:f7:b2:cb:b6:d2:0b:f0:0d:ce:91:57:3f:50:e2:
                    77:56:b5:cf:9a:1b:0f:37:f6:01:a0:7c:12:a5:98:
                    54:72:01:7e:80:4e:2f:aa:de:dc:fc:e9:7b:78:f7:
                    fa:9a:74:e0:9f:b8:fe:3b:a4:bc:be:1b:01:a2:a9:
                    f4:ee:1b:8e:53:f3:44:ed:19:0f:af:14:ec:39:94:
                    07:ea:d0:a9:67:b8:b5:d7:05:2f:a9:54:5e:86:42:
                    27:ac:ca:04:b4:07:4f:c7:73:72:c0:89:59:67:3b:
                    55:b5:c4:25:85:53:7b:04:8e:20:0e:03:20:4a:bd:
                    e3:8a:1f:70:a6:c0:af:1e:d4:9b:e1:24:b1:25:d5:
                    a7:0c:3c:3e:30:a1:6b:15:c1:7d:cc:cc:92:c4:81:
                    cd:09:4e:74:1e:4c:96:28:bd:40:a8:3a:49:83:0d:
                    f8:4a:ee:3d:79:de:2b:47:32:e6:e8:ce:07:86:3f:
                    d8:88:4f:ae:e3:a5:d7:9a:a9:d8:f5:13:a1:c7:17:
                    14:bd:43:50:83:49:a7:07:8c:2a:0b:95:a3:db:7e:
                    e7:77:fd:69:39:1e:d3:67:e1:e9:ea:4d:b7:a9:5f:
                    4a:c9:7e:22:54:e6:13:13:f6:49:4e:eb:67:a6:bd:
                    94:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:73:E2:7A:7F:A0:68:B0:96:31:8B:37:A8:C3:D0:BD:DA:D4:2D:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6021bbd6-2990-3965-af93-1a76e51c009a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.192.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:03:70:fe:d6:59:33:7b:46:6f:c9:28:07:7a:1c:6f:ae:c9:
         8b:75:c5:cb:bd:b3:c7:65:6e:ce:d1:73:4f:49:31:c2:0e:57:
         96:5a:96:fa:c1:63:5e:67:e7:8f:fa:de:22:19:2d:22:f6:cd:
         ba:51:6d:ec:30:a1:ab:08:27:90:d7:9e:f4:e6:d6:88:00:dc:
         82:72:03:54:97:34:24:c7:6d:9c:95:d8:3e:e3:87:1c:97:78:
         69:ec:99:44:ac:78:52:d4:58:39:cb:6b:ae:a7:83:53:a9:2a:
         29:99:88:0c:96:87:79:ef:2b:eb:8f:0e:19:fc:98:35:78:07:
         75:87:dc:87:11:ea:a3:e3:21:4d:87:48:14:7a:2c:86:45:b5:
         94:15:1b:ef:28:b2:9f:0a:e5:c3:2d:cc:82:4f:d8:f6:d2:bf:
         2e:63:25:ee:21:8a:8f:6f:2d:ae:3c:9b:4b:fe:d0:f2:6b:71:
         dd:9e:c2:a5:c6:ae:5d:9e:ca:5e:54:9d:2a:6e:60:6d:d0:9a:
         42:b2:b4:8d:5c:cd:bc:05:9e:63:bb:63:f9:27:47:dd:77:1a:
         74:ca:04:28:d1:7f:67:e1:b4:ff:fc:4b:a8:95:6d:b6:19:8d:
         7b:c5:ca:b4:60:e1:3d:a3:54:99:4f:cc:a4:c5:05:2a:b0:0e:
         b1:cc:25:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----