Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89f6f81a-2250-3ab4-acf7-1a05661f30f9.roa
File:                     89f6f81a-2250-3ab4-acf7-1a05661f30f9.roa (raw, json)
Hash identifier:          5tZpOMAjS/VAZKJv1VnPaLjZ6PxECo9m0D80E5QHxjc=
Subject key identifier:   39:23:5D:F3:6B:72:AA:9B:DD:2F:43:16:F9:E6:5F:16:A9:CA:2A:81
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CEF2954FE7FF2D47919583400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89f6f81a-2250-3ab4-acf7-1a05661f30f9.roa
Signing time:             Tue 15 Feb 2022 05:00:00 +0000
ROA not before:           Tue 15 Feb 2022 05:00:00 +0000
ROA not after:            Tue 22 Mar 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.115.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:ef:29:54:fe:7f:f2:d4:79:19:58:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 15 05:00:00 2022 GMT
            Not After : Mar 22 04:00:00 2022 GMT
        Subject: CN=dba2a3fb-bb2d-4cd5-8a71-cca1832d1d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b5:f8:65:43:8e:17:dc:cb:27:3b:16:7a:88:
                    b9:fa:b3:b1:b0:0d:ab:f9:02:2a:4b:00:e5:e3:43:
                    ac:96:4a:3b:8f:39:e6:19:d1:d2:f4:12:42:d0:44:
                    7d:ff:75:eb:b2:d3:e5:72:f0:f2:c9:65:32:89:a7:
                    de:7d:be:3b:2d:b7:6a:d3:20:c1:5d:cf:86:7a:a4:
                    88:33:9c:2b:b3:9a:e8:e1:fb:1e:60:22:05:15:45:
                    e7:bf:c3:fd:62:2f:c0:5e:bd:6f:25:2b:e2:27:b2:
                    45:dc:89:4c:51:a5:cc:c3:ad:06:08:da:50:17:38:
                    44:a9:09:36:4e:df:bc:95:68:f4:27:76:02:de:2c:
                    dd:4e:99:d2:f7:06:af:56:38:5f:ea:c2:0b:98:c8:
                    0d:69:cd:49:80:b7:9e:61:be:31:5a:7e:80:18:15:
                    3b:dc:47:59:2a:6e:98:7e:52:03:28:85:09:e7:c9:
                    b9:79:5f:14:11:b9:fa:25:e1:23:d4:94:48:d1:33:
                    f3:db:26:cb:33:b9:18:a6:15:1b:86:39:ca:d4:9b:
                    c6:b2:87:df:60:2f:5d:1e:b8:9d:f1:41:23:67:fe:
                    04:ea:8a:48:8c:f2:01:87:43:02:41:12:b1:64:1c:
                    f8:bd:e7:95:9b:91:74:e5:65:72:b3:d6:cc:d5:36:
                    a7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:23:5D:F3:6B:72:AA:9B:DD:2F:43:16:F9:E6:5F:16:A9:CA:2A:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89f6f81a-2250-3ab4-acf7-1a05661f30f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.115.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:95:a6:d2:d6:43:da:fa:8c:0f:95:da:72:8e:da:e6:2c:c9:
         8f:b8:45:6b:10:9c:91:e7:a8:63:06:f4:62:8e:70:91:3b:78:
         c4:c2:54:70:3d:7b:4a:73:bb:a1:40:ad:ec:5e:3a:04:ae:ce:
         89:68:fb:b2:ef:4d:50:72:ec:66:68:11:9c:7e:8e:ed:d5:e2:
         77:ff:ac:27:f3:88:2c:c4:da:73:9e:82:2f:ec:f3:32:69:da:
         ca:4f:5e:44:ec:63:50:b5:e1:98:ec:bc:3e:2f:40:fc:c4:92:
         0d:72:90:af:66:48:dc:48:47:0c:0a:81:99:5d:9f:b9:d1:e2:
         98:23:b6:e6:dc:2c:d5:ab:8c:80:c2:b2:f4:3e:00:a2:12:18:
         58:d9:1c:c9:7a:f8:9f:50:63:b0:b5:58:2e:76:dc:54:21:e9:
         c2:93:a3:7d:24:14:52:2c:10:9e:e3:a8:5f:01:f9:6e:97:dc:
         4f:95:a6:5f:8a:fd:a9:f6:49:a3:74:4c:99:66:2d:e3:c8:20:
         63:e3:b1:79:92:3b:03:87:35:28:8c:72:ff:d8:2e:fa:5c:d5:
         bc:c2:02:94:fe:9d:bd:bc:fe:bd:63:72:21:61:cd:6c:30:65:
         28:96:3b:9a:19:03:40:a0:01:66:73:e2:34:a4:a4:a7:49:b3:
         97:a9:39:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----