Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7e9c6b12-75a7-3376-9864-05c95e06261e.roa
File:                     7e9c6b12-75a7-3376-9864-05c95e06261e.roa (raw, json)
Hash identifier:          3PemlM6Z8OqVkMsIOJE021PcFoZDCTGbKiaW+dfuPaA=
Subject key identifier:   EC:20:93:AE:09:76:9B:89:1B:24:42:2E:9C:8B:E0:3F:11:73:5B:B3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584035436E069942FBA55B8F2D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7e9c6b12-75a7-3376-9864-05c95e06261e.roa
Signing time:             Sun 11 Dec 2022 12:00:00 +0000
ROA not before:           Sun 11 Dec 2022 12:00:00 +0000
ROA not after:            Mon 16 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        63.134.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:35:43:6e:06:99:42:fb:a5:5b:8f:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 11 12:00:00 2022 GMT
            Not After : Jan 16 05:00:00 2023 GMT
        Subject: CN=9367f78c-fedb-4a7e-a7d3-910fc61d1ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a6:a2:bb:37:02:2e:2a:b1:f4:11:56:5d:04:
                    c3:19:7c:28:8c:9f:12:f1:87:9c:4a:11:02:39:82:
                    51:98:df:3e:68:4f:14:38:d4:0f:07:b7:41:21:62:
                    6b:7c:9a:70:9e:2b:54:13:c9:2d:b4:53:51:97:6d:
                    15:bf:a3:28:ea:af:9b:f1:22:0a:a6:b8:56:30:4f:
                    1d:dc:4e:58:8f:06:eb:91:54:69:88:1b:6b:f2:af:
                    87:a1:0e:56:b8:61:dc:5b:a7:3a:71:60:c5:65:27:
                    31:49:1f:ed:34:b5:e3:a0:bf:34:41:99:6c:eb:3e:
                    13:14:28:41:88:9f:71:d8:0f:0e:c6:63:3c:d5:30:
                    28:51:91:0e:12:51:26:75:66:b7:48:45:03:22:54:
                    ab:59:f3:f6:b6:ce:7b:08:5b:c5:1e:be:64:99:9c:
                    54:08:ae:b2:9a:b6:c4:fb:37:87:32:bc:a0:fd:b8:
                    d7:c8:a4:d9:d8:54:37:30:a8:bf:79:d3:1f:64:d7:
                    f0:24:8f:bc:ab:75:c5:20:59:01:d0:64:56:c0:e5:
                    73:b5:e4:11:8a:57:cd:86:de:bf:e8:c6:5e:4f:d2:
                    f4:8b:25:09:46:33:b6:31:db:55:31:99:ff:dc:7e:
                    95:80:a1:ea:0d:db:88:f0:21:1a:d5:a1:c4:ad:99:
                    11:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:20:93:AE:09:76:9B:89:1B:24:42:2E:9C:8B:E0:3F:11:73:5B:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7e9c6b12-75a7-3376-9864-05c95e06261e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.134.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:b4:ec:60:59:ae:4d:3c:97:e6:4d:26:85:c0:25:72:a3:15:
         fc:60:e1:4e:b1:6a:25:1c:3d:22:f0:0a:32:a7:26:d3:e0:53:
         d6:43:e3:b7:15:05:55:6a:74:fe:0b:43:24:cb:f9:78:e2:a4:
         c5:df:76:04:86:14:83:65:cb:66:e0:a2:fa:99:e3:fd:82:0a:
         29:e9:3e:ee:88:dc:a5:41:f3:94:03:9f:3d:b2:76:b0:49:b6:
         1b:ff:e1:11:4a:1d:26:f7:b9:62:97:30:2a:01:4f:33:f9:04:
         79:01:1b:f6:38:4e:5c:c7:57:9e:3f:52:6d:57:a5:6f:7d:74:
         db:f9:3e:2c:eb:79:7a:5b:f4:2d:5d:b3:87:37:0d:50:f7:c8:
         e0:bc:51:c1:55:fe:5d:32:10:7e:62:24:e5:b9:7a:a5:d8:42:
         0e:2f:eb:6a:3f:2d:9c:e8:fb:ab:39:28:fb:f4:aa:c9:e4:81:
         4a:7f:88:cf:0b:8b:0e:3d:e2:e4:16:e4:34:2b:9c:90:13:01:
         25:a6:85:61:fd:0a:09:c5:4e:e9:36:1f:15:50:5a:84:cd:64:
         f9:af:7a:d0:96:81:36:01:61:45:9e:1c:c0:ac:9f:81:b2:65:
         16:5c:a5:92:4e:96:92:91:d1:a4:a4:6a:f7:15:47:4a:a8:8d:
         ac:91:43:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----