Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8cfc713b-2a7b-350f-bdd1-3b661156ec1d.roa
File:                     8cfc713b-2a7b-350f-bdd1-3b661156ec1d.roa (raw, json)
Hash identifier:          cLPX46B+YsjqVVX7bJlivabc3+fGupyO4hKHilISb+4=
Subject key identifier:   B6:E4:86:05:04:FA:E1:D6:D9:A4:13:7E:72:46:A9:11:76:6F:EF:D1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F8AE15419A869604975F7A180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8cfc713b-2a7b-350f-bdd1-3b661156ec1d.roa
Signing time:             Tue 11 Oct 2022 18:48:07 +0000
ROA not before:           Tue 11 Oct 2022 18:48:07 +0000
ROA not after:            Wed 16 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        56.188.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8a:e1:54:19:a8:69:60:49:75:f7:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 11 18:48:07 2022 GMT
            Not After : Nov 16 05:00:00 2022 GMT
        Subject: CN=45b21efc-f632-4b94-be1b-faaf60ef833a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:07:04:01:6d:4c:f8:57:c4:eb:02:08:ad:33:
                    a7:b1:9f:b1:ad:88:bb:dd:e5:13:62:c0:98:61:4d:
                    1d:ee:75:68:88:2b:89:be:7f:3e:79:47:21:9d:e2:
                    e8:da:db:a4:20:18:48:e6:c7:01:fb:76:72:df:fa:
                    9d:9a:97:83:83:00:4e:49:6f:01:86:67:fc:f3:ec:
                    00:2a:ac:6f:ae:fc:ef:af:44:31:07:1b:4e:2e:a6:
                    95:6f:b4:cd:10:ce:c5:c5:c6:6c:4f:aa:05:04:87:
                    77:a8:18:52:a8:8e:65:09:69:bc:94:6c:13:13:f7:
                    b1:46:b5:72:7c:a9:14:f4:43:95:9e:77:38:16:95:
                    cf:75:ea:83:91:42:99:8f:28:d6:e0:44:fa:76:01:
                    e4:bc:aa:52:73:62:d9:17:06:1d:0c:8a:3a:55:d7:
                    cd:ed:bc:f0:d4:1d:c5:20:33:cd:e8:9d:2d:5e:cc:
                    0a:24:2f:67:f8:b7:c1:c2:de:87:a4:fe:ae:17:cd:
                    ef:0b:e8:77:77:a7:b4:c2:94:64:f9:d9:b5:b1:bb:
                    ec:26:69:22:56:d1:6b:8d:63:c4:c9:31:50:53:47:
                    df:7c:f5:59:12:81:a9:b9:8b:ed:8b:df:16:a2:5e:
                    e2:f4:f8:5c:16:08:7f:96:15:e1:ce:43:a9:46:6a:
                    53:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E4:86:05:04:FA:E1:D6:D9:A4:13:7E:72:46:A9:11:76:6F:EF:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8cfc713b-2a7b-350f-bdd1-3b661156ec1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.188.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:62:94:6e:37:31:09:30:d5:b6:cd:6b:1e:e2:54:ce:d7:59:
         8e:15:f3:a8:49:b9:1c:06:43:84:24:b7:b9:f4:f3:b4:96:b2:
         7a:d5:34:94:f4:fb:67:fe:ac:6b:f4:1e:ac:8e:1f:4b:fe:2f:
         2d:a6:5b:6d:8b:04:05:64:18:60:50:0e:80:0c:e7:ef:97:d5:
         5a:a9:f1:f6:c5:b1:d0:9b:b4:de:a6:a7:f7:50:64:b5:78:60:
         e6:81:af:a6:2c:fb:c8:5f:55:e4:d7:33:fa:7c:da:1d:92:b5:
         54:dc:72:13:72:1c:03:73:a4:f5:1f:91:28:03:f3:18:de:a8:
         c2:9c:f1:68:24:38:9f:8e:41:da:a5:7a:5d:92:c2:fb:78:6b:
         18:f9:61:a8:2f:20:d4:fb:29:68:e1:d8:a8:56:25:6d:ff:8b:
         f9:5b:34:43:31:ec:65:12:b7:9e:b5:a5:c4:64:14:52:93:4b:
         5f:96:3d:6a:0b:f5:6e:c6:ed:e4:91:d5:8a:c2:0e:3f:4b:03:
         75:62:47:d4:5c:3e:06:7a:8e:90:9c:60:fc:ff:d3:7e:b5:4d:
         f9:00:75:dd:13:49:45:35:e4:eb:c0:4e:16:fd:5c:95:2f:5b:
         1a:dd:55:26:44:6b:98:60:dc:51:45:b7:a1:0d:e3:0d:33:34:
         9e:47:02:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----