Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/65bfe724-6ff9-3908-9bed-333a74206023.roa
File:                     65bfe724-6ff9-3908-9bed-333a74206023.roa (raw, json)
Hash identifier:          xHZ3Vde/vRQ7v1JhOLceUL4sH8n8MxiVQyKgRx/I+Tg=
Subject key identifier:   1F:B1:5E:33:B0:5F:84:F1:37:08:30:FE:48:47:5C:91:80:FF:AA:7E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA4E8373F292EA5B0EF5A51A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/65bfe724-6ff9-3908-9bed-333a74206023.roa
Signing time:             Thu 20 Oct 2022 12:00:00 +0000
ROA not before:           Thu 20 Oct 2022 12:00:00 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.189.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a4:e8:37:3f:29:2e:a5:b0:ef:5a:51:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 20 12:00:00 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=29231f35-7599-4105-bbed-de2a2e0eb6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:62:cc:07:e4:38:58:d2:aa:e2:d0:ff:be:7b:
                    05:66:3f:d1:81:d3:92:82:6d:28:ac:60:b2:61:51:
                    42:08:f6:a6:5b:6b:6f:40:69:93:ce:c3:db:db:19:
                    c4:2b:8d:8d:05:2a:88:71:5b:32:98:54:9b:18:11:
                    6e:b5:d6:e5:a1:6c:64:09:ec:02:fe:d5:a8:a6:57:
                    58:60:95:e6:7a:4e:11:68:79:c7:75:92:09:2a:e8:
                    eb:4f:9d:8b:19:e5:66:69:b3:f4:dd:51:97:24:07:
                    96:38:15:62:ee:81:65:c1:f7:54:88:9f:f7:55:22:
                    ce:82:dd:df:6f:01:73:27:d7:26:bd:64:25:96:92:
                    79:35:e9:67:af:c6:bc:11:93:99:4e:92:d7:ce:df:
                    cf:de:99:f6:2d:c7:f0:34:74:14:45:b7:e9:76:89:
                    1f:6e:38:87:31:1f:35:8c:3a:54:80:31:b1:3c:e1:
                    be:75:4a:7f:b1:bc:5c:df:96:d1:2d:93:4a:e5:7d:
                    82:96:42:fc:14:c4:2e:54:f4:58:ef:cc:95:b0:db:
                    d1:94:ad:5a:62:d7:54:dc:13:cf:07:81:36:97:0a:
                    8c:89:a2:59:18:d7:14:12:9d:08:f3:9d:60:6e:2f:
                    a7:a4:6d:f7:cf:f4:7d:06:76:c0:42:e0:4e:e6:c7:
                    8f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B1:5E:33:B0:5F:84:F1:37:08:30:FE:48:47:5C:91:80:FF:AA:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/65bfe724-6ff9-3908-9bed-333a74206023.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.189.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:06:f5:c2:93:40:37:3a:b4:1e:e0:ca:2d:19:6f:ac:48:09:
         10:f9:0b:5f:31:37:70:44:3f:dc:c3:b5:8f:13:ed:ee:84:69:
         25:85:a5:97:89:97:60:01:39:1c:6c:75:ce:41:a6:1c:29:09:
         81:05:e7:bd:55:08:0e:7f:6a:ed:e8:6d:b9:27:38:a6:03:6e:
         77:4e:bb:f4:a2:4b:ca:10:7d:92:0b:24:fc:08:42:d7:a8:fa:
         5d:6a:aa:8c:85:a6:04:1c:e5:bb:92:ba:ec:a9:e4:e3:67:71:
         2f:12:08:fc:a5:c4:0e:de:8a:59:97:d6:75:91:39:e3:fa:48:
         66:f1:aa:0d:6d:34:42:5c:7c:ac:df:69:8f:ee:cb:9d:6b:26:
         e8:9e:7d:1c:42:c3:4d:74:1d:1a:7b:8b:fc:83:3e:51:c6:3c:
         ce:16:fc:24:d5:2d:a8:15:95:ca:db:6e:ac:e8:24:f1:13:b2:
         58:8e:8c:8e:76:fa:47:14:29:68:73:fb:63:25:4c:fe:4e:42:
         87:31:d2:86:b7:c7:4e:5d:df:5e:bb:93:79:22:fe:13:3b:80:
         a5:a6:ed:02:39:c4:3d:f1:eb:6c:ff:a1:bc:0a:9b:da:0a:33:
         ef:6c:32:d4:64:1d:28:07:af:ec:dd:b8:9f:79:9e:45:93:d6:
         0c:10:ba:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----