Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/68458ccb-08e2-3ce2-be1b-b43e9b517da4.roa
File:                     68458ccb-08e2-3ce2-be1b-b43e9b517da4.roa (raw, json)
Hash identifier:          8DotA06HkYkCI423xKPIwoJX9ri6HxPXbwG28ZRRlBg=
Subject key identifier:   47:7D:0E:C7:41:AC:16:52:D1:29:92:BD:34:6C:90:C8:03:D6:EB:04
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EE2F818DF6375D56A7D79EC80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/68458ccb-08e2-3ce2-be1b-b43e9b517da4.roa
Signing time:             Fri 12 Aug 2022 14:42:08 +0000
ROA not before:           Fri 12 Aug 2022 14:42:08 +0000
ROA not after:            Sat 17 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        162.85.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e2:f8:18:df:63:75:d5:6a:7d:79:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 12 14:42:08 2022 GMT
            Not After : Sep 17 04:00:00 2022 GMT
        Subject: CN=d61a2d21-b80c-4f86-b788-fc137257251a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c3:cd:c3:d0:42:44:c2:33:d0:a8:66:36:da:
                    cb:a5:37:39:57:2f:e3:71:75:27:7d:16:a9:f7:a8:
                    9a:c4:23:25:5e:89:ab:c1:15:c5:3d:d4:45:49:18:
                    94:19:7f:b1:1c:53:46:0d:aa:d2:f9:8f:33:ee:e5:
                    d6:1d:47:13:cd:12:d6:80:94:81:7b:a4:98:9e:ec:
                    33:3d:aa:7f:46:58:8c:ae:f7:94:e5:d4:3b:b3:a2:
                    33:39:8f:06:74:5c:9d:96:f9:26:7b:23:86:80:87:
                    51:f4:ed:a4:3a:cc:a1:e3:41:ed:90:71:92:c4:6c:
                    24:82:4a:62:79:dc:1b:17:93:e5:49:44:31:33:1b:
                    49:88:b6:3f:43:7b:b9:42:d4:7a:3b:0d:a4:6d:16:
                    09:9d:36:74:ce:e5:24:3d:8e:f5:4b:a9:0b:ef:f9:
                    0c:45:99:74:89:ab:f0:42:0a:98:06:63:b4:f0:c9:
                    c4:52:65:4e:29:05:47:82:3b:9c:60:f7:24:a9:aa:
                    62:73:ca:6b:e3:1a:53:dd:ae:af:5b:e0:80:2d:f6:
                    d1:a1:cb:d3:21:ed:79:87:48:aa:31:de:09:95:ce:
                    f6:36:52:69:c7:6d:79:bb:dd:92:f6:0f:28:05:c1:
                    05:40:e4:68:90:4e:b1:ef:6b:72:0b:91:e3:64:41:
                    d6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7D:0E:C7:41:AC:16:52:D1:29:92:BD:34:6C:90:C8:03:D6:EB:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/68458ccb-08e2-3ce2-be1b-b43e9b517da4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.85.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:d3:c8:17:76:8f:6b:26:64:dc:31:3f:75:2d:30:7f:55:e5:
         7b:1c:f3:9f:b7:e0:8e:48:69:34:df:9f:1f:58:1e:be:ab:af:
         6e:f6:d9:93:fb:33:3d:47:c6:53:72:c5:b8:54:af:c3:40:24:
         0c:1f:ad:08:ae:f3:90:55:5b:91:a6:e2:58:bc:0f:1d:5c:a5:
         d2:e7:ec:a8:4d:81:4b:70:0e:34:d4:f6:14:fa:0f:a3:1e:83:
         b0:b4:f3:6d:8b:cb:f3:d9:f4:7c:87:56:53:a6:6f:e1:e1:b1:
         fc:ca:aa:4b:f1:20:71:0c:11:36:87:fc:8a:8d:80:ec:87:a8:
         f6:44:10:ae:d6:d2:28:37:1c:e1:5e:a1:45:ac:c8:08:b4:e5:
         6d:1c:85:46:36:2d:da:2d:84:8f:31:ab:a9:78:c6:00:0b:dc:
         f0:1f:56:3c:41:33:e2:03:34:d3:52:a8:8a:2d:c1:f8:a3:c9:
         b7:6d:cb:4f:59:02:e4:c3:ea:f4:db:e9:83:ea:d4:bf:e3:09:
         84:e8:b2:0d:49:6b:24:fe:8e:05:ff:aa:61:c6:31:82:a9:c4:
         56:a7:c7:47:60:60:ee:2f:a4:90:5a:9b:7e:25:fb:c5:10:9c:
         bd:9a:4e:c6:7a:9f:8f:ed:1a:f6:77:0a:d1:07:dc:0f:bf:4a:
         ed:9f:ca:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----