Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a4c3ada-8c78-3c83-9dbf-c05261c5ad02.roa
File:                     8a4c3ada-8c78-3c83-9dbf-c05261c5ad02.roa (raw, json)
Hash identifier:          WC6R32pxrfoFVixh893bksdGHYaJmtjfGZXoeH8IMWw=
Subject key identifier:   BF:4B:24:DB:CE:E9:1A:85:6C:A8:7B:2C:68:CE:E5:DF:D9:8B:99:52
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EE2721262EA3DD671BE6D9C30
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a4c3ada-8c78-3c83-9dbf-c05261c5ad02.roa
Signing time:             Fri 12 Aug 2022 14:42:08 +0000
ROA not before:           Fri 12 Aug 2022 14:42:08 +0000
ROA not after:            Fri 16 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        54.7.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e2:72:12:62:ea:3d:d6:71:be:6d:9c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 12 14:42:08 2022 GMT
            Not After : Sep 16 04:00:00 2022 GMT
        Subject: CN=7b451bea-fa92-4a83-93de-5e5a5d81b4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:99:fc:40:36:07:8a:5b:e9:19:bf:3e:2d:11:
                    f3:46:73:c5:f7:bc:32:40:43:35:f7:59:f9:39:cf:
                    ca:d4:17:da:09:f1:50:6c:da:b5:0d:72:7f:5c:01:
                    c9:d0:08:97:0d:3f:bc:11:7e:93:0b:de:8f:7e:23:
                    1a:f9:f4:26:4c:d1:ba:0a:f8:e8:45:3a:1e:0c:93:
                    53:27:a5:50:df:46:b6:ee:c4:63:96:09:ea:75:5f:
                    90:1a:70:1b:c3:60:df:86:92:cc:ce:03:06:c8:65:
                    41:87:4d:15:67:e0:d5:e1:b6:96:a0:6c:a2:52:5a:
                    48:ca:cf:f5:d2:47:b8:53:e1:0b:e1:4d:a0:99:5b:
                    2f:72:56:70:99:01:4f:60:e0:ff:77:39:a9:c5:27:
                    b5:84:28:f3:37:5d:10:8e:d8:84:23:47:8d:e9:8d:
                    33:6e:73:08:d5:86:63:c5:44:99:88:15:ca:31:53:
                    f3:19:00:ed:21:cc:7c:db:7c:20:d3:8b:51:2d:42:
                    4f:a0:65:5e:7c:b9:4b:f3:99:5a:96:97:97:83:78:
                    ca:54:49:ee:fc:f9:61:e2:51:1b:da:e6:21:cc:6c:
                    8d:04:e8:3d:ec:a7:a0:f0:8c:f9:f9:39:ba:cb:61:
                    4d:f4:5a:9e:b2:36:dd:35:b9:58:c2:4d:70:c9:ac:
                    50:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4B:24:DB:CE:E9:1A:85:6C:A8:7B:2C:68:CE:E5:DF:D9:8B:99:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a4c3ada-8c78-3c83-9dbf-c05261c5ad02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.7.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:63:7d:62:5f:4c:ad:1e:a0:46:af:0e:cb:fb:3a:ad:dd:11:
         6c:0d:8a:b1:69:05:ae:fe:67:93:f7:ef:2d:ab:28:a3:d0:a0:
         9d:9f:50:87:e8:21:f3:bd:d5:d3:b0:0b:cb:b7:71:b5:46:71:
         bb:a2:8f:37:0c:56:4b:00:6e:54:59:f5:60:ae:7b:8c:9c:c9:
         51:e6:bc:20:c3:1a:99:4b:1c:0f:0f:37:f2:c9:99:b6:81:90:
         7f:03:c8:48:b6:13:51:f6:3b:71:6d:90:ee:a3:d1:40:80:1e:
         af:c5:e1:c8:9e:8d:ba:82:f2:04:34:42:7b:c3:02:b5:c2:a3:
         9d:38:08:6a:7f:0d:9f:7d:d1:7a:12:de:33:da:cf:15:9c:be:
         56:c8:0d:ea:be:72:67:46:43:a7:5d:8a:3a:1d:3a:fb:23:2b:
         49:2f:35:bf:aa:46:f7:79:36:6e:46:4a:2a:b0:a3:76:65:6d:
         95:75:2d:26:04:74:f6:c6:9c:4a:8a:29:1c:20:b6:49:3c:69:
         7f:75:53:c8:51:7a:57:09:f9:cd:39:26:10:66:23:41:66:8b:
         c2:d9:47:2b:18:20:4d:75:b2:c6:e9:14:2b:e6:14:53:81:9a:
         64:d3:d2:8c:dd:a1:7f:8f:dd:a2:c6:13:49:bb:1d:ca:05:79:
         b5:ad:b2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----