Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6add3427-d5cb-38f4-a8f3-6c3b3377203f.roa
File:                     6add3427-d5cb-38f4-a8f3-6c3b3377203f.roa (raw, json)
Hash identifier:          +6fQ2ewFreKWHtULPJYUcc7r5hB/bCBFUrn5PqpCZ7U=
Subject key identifier:   05:F4:96:B8:C1:4C:2C:71:AB:78:9D:07:81:F0:BC:65:DA:17:1B:0A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F57AB3426B4C33A044C218600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6add3427-d5cb-38f4-a8f3-6c3b3377203f.roa
Signing time:             Thu 22 Sep 2022 12:00:00 +0000
ROA not before:           Thu 22 Sep 2022 12:00:00 +0000
ROA not after:            Fri 28 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.78.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:57:ab:34:26:b4:c3:3a:04:4c:21:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 22 12:00:00 2022 GMT
            Not After : Oct 28 04:00:00 2022 GMT
        Subject: CN=e1b0e413-d29a-4f17-9e57-35e148a84cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:67:62:82:d1:42:69:71:47:cf:a2:cc:3c:61:
                    d5:74:09:b2:51:88:d4:41:69:47:3f:3d:db:b1:66:
                    33:7d:99:23:a1:af:e5:38:b7:54:01:fd:d7:7d:fb:
                    8e:b1:f9:f6:f5:7a:20:51:49:62:82:df:b3:14:cd:
                    60:bd:a1:a0:0c:c2:4b:f0:5a:57:dd:b7:f2:67:8a:
                    5a:d1:e4:99:18:9a:e3:aa:69:8b:80:08:a9:4f:d3:
                    d8:f6:46:25:ec:8a:ad:40:9f:04:56:ca:78:37:4e:
                    01:81:f6:5b:c1:db:d2:b9:11:23:fd:88:1b:fa:91:
                    09:b3:0c:b0:00:60:d9:73:70:f9:3b:eb:d9:c6:d4:
                    97:ba:e0:da:ce:5b:0d:26:a1:79:41:96:ad:43:07:
                    ae:2a:5f:bf:ee:da:0e:0e:49:08:9b:c5:01:e9:a4:
                    f5:cb:90:b3:2c:01:76:7e:57:0d:64:47:8d:69:6e:
                    fd:70:93:26:a7:f0:f5:cf:41:c6:46:a1:a8:ce:f1:
                    98:62:e2:4f:93:12:19:eb:09:ef:02:c3:26:9e:0a:
                    87:69:b1:3d:4f:16:b8:de:ac:7f:54:16:7a:dd:3e:
                    d7:dd:0d:6e:2f:4f:3f:fb:ef:0f:dd:ed:d6:44:da:
                    93:9e:d3:28:60:bf:af:52:82:22:8f:22:9a:09:59:
                    eb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F4:96:B8:C1:4C:2C:71:AB:78:9D:07:81:F0:BC:65:DA:17:1B:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6add3427-d5cb-38f4-a8f3-6c3b3377203f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.78.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:5b:fc:af:54:f1:a2:97:13:ba:3c:86:4c:c4:73:80:9d:b1:
         47:c9:ec:8b:af:1a:60:6e:e5:6e:c8:c6:3b:67:49:e5:50:6e:
         20:d9:a5:95:06:b9:03:ea:36:13:b6:e9:5f:f9:50:50:50:b9:
         5c:57:9b:3b:af:fc:9d:00:71:b0:80:db:50:09:c5:17:39:7e:
         32:a4:ac:51:ec:3e:2b:e9:cb:6f:b6:5c:eb:93:bc:dd:95:8d:
         19:4e:bb:e5:e9:aa:5e:69:41:55:2c:0a:3c:a6:72:00:2a:a5:
         95:87:ae:e8:d6:41:3c:38:a7:ab:b4:3a:98:ee:74:e5:f6:cc:
         3e:cd:62:d2:60:71:c7:5e:86:f7:4f:b0:8f:a3:d4:5a:c9:05:
         b4:07:81:fb:0a:ad:9d:50:3d:ae:45:20:5e:d5:27:b3:46:0c:
         52:0b:dd:cc:17:3a:ec:d0:2f:c9:7a:96:16:0f:8d:2a:e4:e8:
         1d:02:d2:09:39:a5:0d:68:c4:1c:7b:01:51:9e:81:a4:a7:7f:
         84:de:4b:c3:0c:a8:04:fe:00:ad:f7:03:8a:71:68:55:74:35:
         bf:72:af:70:4d:81:f7:3c:f4:98:f2:30:81:46:b1:6b:1a:84:
         f5:fd:5f:1e:e0:a8:0b:63:cd:c0:da:5c:98:ae:5b:c7:3e:00:
         8c:33:3e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----