Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ce1404e-1261-3c5f-a35d-3a4c1a7a7457.roa
File:                     8ce1404e-1261-3c5f-a35d-3a4c1a7a7457.roa (raw, json)
Hash identifier:          Wg4bFnXLPM/Gx+Dt/KwQGGJlde9a2n9o/aEd2FtnNl0=
Subject key identifier:   4B:81:85:7F:B2:64:3E:8E:79:22:0A:25:26:F9:5F:48:D3:CD:BF:94
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840083EE7F3367D3C007B332A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ce1404e-1261-3c5f-a35d-3a4c1a7a7457.roa
Signing time:             Fri 25 Nov 2022 12:00:00 +0000
ROA not before:           Fri 25 Nov 2022 12:00:00 +0000
ROA not after:            Sat 31 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.54.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:08:3e:e7:f3:36:7d:3c:00:7b:33:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 25 12:00:00 2022 GMT
            Not After : Dec 31 05:00:00 2022 GMT
        Subject: CN=fac7c507-a7c6-42ce-8585-3b1af3112b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:42:d3:2b:98:bb:a0:18:02:19:88:dd:81:20:
                    37:72:77:96:1a:2a:78:fc:d3:27:1b:c3:e6:ce:96:
                    b3:8d:e2:ae:43:79:fe:d1:7e:97:eb:f7:ba:3f:98:
                    a3:8b:5d:41:ba:62:f3:ea:1e:14:e3:ca:9b:f1:2a:
                    30:5b:21:ea:1f:f2:bd:65:d0:98:40:17:13:01:ac:
                    f8:fc:19:02:47:7a:86:5e:5b:11:26:33:59:df:2a:
                    c6:a5:91:96:32:db:c8:29:fe:cb:9c:f4:07:be:59:
                    49:9c:f5:62:f9:09:28:b1:b6:ca:a7:84:29:89:c1:
                    c6:12:10:3f:40:4a:6a:ad:43:0a:12:9b:62:67:3f:
                    58:f0:f6:f0:81:ef:12:bd:11:d0:c8:3d:46:46:83:
                    fa:6d:01:e5:6c:a6:6a:73:36:a1:b7:e2:b5:9d:0e:
                    52:9d:a9:27:58:d9:a6:32:ec:66:11:7b:be:39:9b:
                    6f:71:b8:04:af:8e:65:17:f8:ef:9a:d8:23:7d:35:
                    e3:70:22:67:cc:4d:1e:b0:9f:71:f1:96:5f:fc:e2:
                    35:12:de:bd:63:83:30:aa:51:31:17:7b:88:41:20:
                    2d:94:0b:fe:63:b8:d6:da:50:1e:fe:ad:3f:8d:4b:
                    00:92:fa:89:9b:3c:73:3e:ac:72:41:5d:18:06:c5:
                    3a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:81:85:7F:B2:64:3E:8E:79:22:0A:25:26:F9:5F:48:D3:CD:BF:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ce1404e-1261-3c5f-a35d-3a4c1a7a7457.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.54.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:1c:58:bf:4b:be:22:3b:8c:be:98:e0:02:31:83:10:34:39:
         59:84:f8:43:19:f9:60:3e:e3:3a:7b:ad:41:04:1a:50:e0:0c:
         87:c3:fa:b0:4d:a3:c1:02:c6:b3:78:05:81:d9:a7:cd:b1:5e:
         91:dc:43:9c:aa:7c:5d:17:ef:ce:bb:a3:24:3b:4f:67:8a:83:
         9b:3f:60:d7:68:93:55:ce:04:41:ad:dc:d0:df:19:11:35:2e:
         05:0e:b5:dc:7a:7f:2f:81:46:f0:99:27:82:78:1d:6b:3b:a2:
         72:88:95:99:64:82:14:81:5f:a5:23:e6:b7:0c:12:ab:b3:dd:
         c2:b8:83:95:de:ff:bb:57:bb:98:16:51:15:8b:66:3c:e7:e9:
         a4:7d:f2:98:a0:29:e9:24:b7:d9:dd:15:d4:87:7d:9f:39:4d:
         88:08:7e:96:17:03:00:80:f8:74:81:eb:25:bd:7e:b6:46:d5:
         27:ed:b3:8c:5b:06:c0:45:89:e2:62:28:10:32:d0:ec:30:d1:
         23:3e:2d:db:10:74:f3:6d:f6:1a:de:c8:60:ec:7c:90:92:5a:
         d9:b1:b9:3f:61:dc:fa:c0:5a:fc:64:74:ef:a7:47:c5:64:ad:
         6c:42:2f:21:21:22:54:fe:72:87:b4:a8:51:23:09:86:ac:f3:
         94:47:6c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----