Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/60263548-d617-399e-9ddb-8414fbe6203f.roa
File:                     60263548-d617-399e-9ddb-8414fbe6203f.roa (raw, json)
Hash identifier:          l3haLjYs6VGJHUXjyjgaNQR2j4/G6LRhKfr920ZtFRI=
Subject key identifier:   98:70:BF:83:23:74:59:AE:0B:2B:D9:ED:72:63:99:5B:72:D8:D6:1A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DD46E985D6129E05860F2E340
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/60263548-d617-399e-9ddb-8414fbe6203f.roa
Signing time:             Sat 07 May 2022 12:00:00 +0000
ROA not before:           Sat 07 May 2022 12:00:00 +0000
ROA not after:            Sun 12 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.130.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d4:6e:98:5d:61:29:e0:58:60:f2:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  7 12:00:00 2022 GMT
            Not After : Jun 12 04:00:00 2022 GMT
        Subject: CN=2e36b024-4652-478d-bfe8-1e99426d1a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a4:da:c1:97:93:c9:7e:48:fd:dc:26:53:59:
                    f6:d3:34:d8:16:d6:c7:f2:9d:df:40:27:4f:e0:30:
                    1e:5e:8f:30:7b:cb:f5:28:01:5a:e9:65:5c:96:90:
                    99:6d:d5:57:2f:58:11:ee:5b:e5:de:d9:98:dd:5e:
                    e4:58:94:6e:f9:ba:4f:62:29:95:72:4f:7f:30:31:
                    9a:a4:ed:f3:3b:23:7c:8c:56:56:d0:31:8f:13:3e:
                    95:8f:38:c1:f6:a1:9a:10:bd:c4:9d:a3:64:d9:2e:
                    21:bb:cc:f5:9a:d2:ed:21:de:21:ac:4c:d2:28:2d:
                    76:58:82:f8:16:a1:29:a8:f3:b5:89:23:54:55:f2:
                    87:f7:55:97:2d:bb:3d:7e:bb:23:d5:e5:cb:6a:4f:
                    b0:e4:f6:1c:36:d4:69:4d:8b:6b:16:61:f1:73:1e:
                    66:d2:0f:56:93:73:96:fe:72:e5:3f:14:19:14:0d:
                    a4:02:de:56:ff:79:08:3f:22:ea:1c:25:f7:3d:a6:
                    42:1f:64:ba:15:d0:84:8e:4e:d1:cf:60:0e:6d:03:
                    f0:d7:63:5e:74:a2:4f:c5:ac:56:32:7a:7d:3b:63:
                    05:3f:ae:ec:7f:ff:31:25:43:2f:af:df:5c:fb:b6:
                    0c:4b:2d:e8:aa:e5:83:2b:47:e6:6c:7e:d9:1c:46:
                    97:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:70:BF:83:23:74:59:AE:0B:2B:D9:ED:72:63:99:5B:72:D8:D6:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/60263548-d617-399e-9ddb-8414fbe6203f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.130.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:08:42:d1:fb:f3:61:8f:f6:e8:bf:ff:af:a3:e6:d1:66:df:
         84:4f:4d:b9:a9:b6:3c:6f:46:be:85:a0:d6:12:a8:b5:79:4f:
         ae:61:db:a1:11:bb:ff:c1:7a:94:fd:87:fa:3e:f9:f2:83:8e:
         ff:a8:08:3c:3e:d7:45:46:36:1e:98:49:9c:4e:3c:c8:e4:66:
         5a:43:2f:a0:1e:d5:1c:c4:31:97:70:ed:04:ee:92:6f:5f:6d:
         5b:55:c3:2c:78:67:7c:9a:c1:36:0a:11:de:14:76:7c:56:b5:
         1a:ab:02:82:2d:85:93:4f:00:df:b5:2f:50:8f:49:f6:f5:01:
         7d:fe:09:b0:3e:21:fc:08:a4:44:c3:07:b1:2d:08:b6:b9:a1:
         f4:80:b5:46:9d:4c:ce:ab:e9:8f:5f:67:a8:02:cb:42:95:50:
         03:bf:3b:b1:bb:54:97:ea:d1:80:f4:bb:01:33:61:e7:6c:b8:
         0f:fb:ce:b0:93:ed:cb:48:ba:34:0a:59:ba:af:e1:7e:01:7d:
         52:7d:65:f6:0e:56:bc:36:83:97:fa:9c:1f:4b:c2:5f:45:ac:
         91:c2:eb:35:30:60:1b:4d:f7:c0:67:60:0d:33:10:67:57:ce:
         62:14:de:c6:1e:3e:85:d1:51:e8:6d:b7:3a:d8:fb:aa:70:cd:
         db:40:e5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----