Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7ec76f36-2b0f-38c1-a94c-62386d7828a3.roa
File:                     7ec76f36-2b0f-38c1-a94c-62386d7828a3.roa (raw, json)
Hash identifier:          52XWRcxc9r/nBTODRx4yOg0blR51oX+8/rPtZum6GHc=
Subject key identifier:   6A:66:6A:8B:E4:1F:0C:FA:46:B8:9F:DD:10:6B:1D:86:39:FB:83:03
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F5B821B0C9306DACAD5FFCE20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7ec76f36-2b0f-38c1-a94c-62386d7828a3.roa
Signing time:             Sat 24 Sep 2022 12:00:00 +0000
ROA not before:           Sat 24 Sep 2022 12:00:00 +0000
ROA not after:            Sun 30 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.182.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5b:82:1b:0c:93:06:da:ca:d5:ff:ce:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 24 12:00:00 2022 GMT
            Not After : Oct 30 04:00:00 2022 GMT
        Subject: CN=7555ee07-3e44-49c4-8ab7-a7001ed68cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bd:91:c9:dc:c8:6a:06:06:fa:0f:9a:4b:e3:
                    22:1f:7f:7c:7d:30:bc:45:d9:d3:70:e3:3b:d5:7d:
                    de:bc:ca:43:64:d1:f4:a5:71:8b:1e:56:05:46:6c:
                    3f:0e:f1:fa:08:c9:18:01:06:9e:5f:45:64:b0:d0:
                    e0:e9:ae:09:a2:73:13:2e:24:81:e0:e6:d3:f6:11:
                    e9:94:b8:81:f0:04:ae:f3:76:8d:d1:23:4f:96:67:
                    af:0c:fe:3c:54:0e:66:87:5e:5a:fa:06:a8:e5:e9:
                    ba:9c:79:fe:bc:d1:0b:79:9e:5f:70:0c:74:07:a0:
                    f8:4f:51:14:4a:09:d0:51:eb:97:7b:65:92:e3:17:
                    dd:a1:a5:83:cb:43:cd:89:76:e8:d7:ca:b5:69:39:
                    c8:bb:98:38:92:66:c2:5b:25:9d:34:52:dc:73:dc:
                    2e:34:5f:44:42:9c:6c:8b:51:a3:76:e6:3a:6f:36:
                    36:c2:61:61:b7:50:81:04:e2:11:1d:53:30:2c:4a:
                    76:82:d8:f8:d5:f4:ad:a6:8c:dd:95:f2:ec:68:77:
                    41:b7:62:bd:1d:23:72:b9:48:62:d5:f3:fb:d9:36:
                    b5:6d:ee:bf:23:b0:fe:3a:cb:c8:d9:c3:aa:f9:91:
                    49:bd:93:b9:b3:1e:de:81:a7:35:98:71:17:57:e6:
                    5a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:66:6A:8B:E4:1F:0C:FA:46:B8:9F:DD:10:6B:1D:86:39:FB:83:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7ec76f36-2b0f-38c1-a94c-62386d7828a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.182.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:75:4a:25:da:87:8c:94:da:6f:c8:db:d6:c8:85:20:bc:6c:
         e1:18:1e:33:19:67:00:e8:66:f7:12:c6:72:73:46:5c:cf:7d:
         c9:a9:a7:b9:8e:bb:81:21:79:ca:d6:1e:e9:47:eb:f4:07:72:
         d7:2c:ab:38:fc:e3:52:79:27:8e:0b:85:9e:9c:28:1f:6f:b5:
         70:39:0e:0a:e6:93:51:90:86:6e:af:c9:56:04:6d:4a:4b:1b:
         13:29:c0:22:3c:a3:d3:eb:e0:ce:40:af:ff:75:a5:12:e0:37:
         52:1a:cf:57:9c:95:b5:e6:cf:f6:6f:4a:72:e8:a4:c4:ea:47:
         00:f8:34:58:8f:8b:6e:64:1e:7e:36:6d:67:70:f0:b6:87:a2:
         05:b4:6a:d1:a9:bc:68:b7:aa:c2:f9:b4:da:7d:d1:79:5a:e1:
         be:e5:18:f9:0b:59:7f:fb:70:87:ee:55:01:12:83:50:86:30:
         e7:77:f8:da:76:5b:58:e1:8b:8a:bd:07:e6:ae:b6:9e:fa:4c:
         94:67:bc:de:77:60:42:91:98:30:b4:4d:7c:79:9f:1f:af:d0:
         2a:37:80:b1:b9:a8:31:83:52:ee:95:b9:2f:7b:37:70:c2:ea:
         da:38:6a:56:4f:12:76:95:13:0c:0b:a8:30:9b:c4:ce:15:45:
         fb:1e:53:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----