Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8e31aa14-5e33-33df-97aa-426c3a5641db.roa
File:                     8e31aa14-5e33-33df-97aa-426c3a5641db.roa (raw, json)
Hash identifier:          rDsvRgU2LcrOLpG8fnNhlktqntWYVAjbLj9wlQkCsGo=
Subject key identifier:   F4:AE:81:72:19:64:9B:E4:BA:5B:71:10:F8:1C:76:07:9D:AF:F7:FD
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F543CF739E537E84A74403380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8e31aa14-5e33-33df-97aa-426c3a5641db.roa
Signing time:             Wed 21 Sep 2022 12:00:00 +0000
ROA not before:           Wed 21 Sep 2022 12:00:00 +0000
ROA not after:            Thu 27 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.18.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:54:3c:f7:39:e5:37:e8:4a:74:40:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 21 12:00:00 2022 GMT
            Not After : Oct 27 04:00:00 2022 GMT
        Subject: CN=1e2bf90a-faed-4481-9f7a-eaafc430e9b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:75:4b:1e:39:b8:97:c8:d3:f0:db:81:5d:f0:
                    54:9b:d9:20:50:ce:4f:ae:96:f6:66:93:2a:92:64:
                    4c:56:f7:80:3b:cb:fa:d0:a7:92:e4:96:d1:cc:3e:
                    b5:01:14:94:e5:8c:71:d2:f4:c3:7e:64:77:7c:31:
                    bc:c6:c8:70:bb:6e:af:91:6b:d2:5f:e9:b2:4f:42:
                    ee:d1:cd:e2:8f:c2:f3:86:23:0a:5f:60:ee:ed:96:
                    01:99:b6:2e:db:7b:92:92:af:83:57:ff:ca:50:77:
                    13:d6:0a:03:95:8d:b0:02:02:01:64:60:a8:16:f4:
                    a1:8f:ae:8f:33:87:ca:37:87:55:04:5b:32:2e:00:
                    a9:26:96:fd:cd:22:9d:8e:c3:f8:3f:5e:e8:57:76:
                    e0:6d:27:73:6a:62:36:53:eb:56:f0:57:40:a4:df:
                    2a:8a:9e:99:b9:4d:45:3a:a5:5c:39:a0:e3:1a:bf:
                    bb:15:d1:6e:20:8a:43:57:e9:02:31:6c:36:5b:59:
                    aa:91:51:64:c4:3a:f2:6e:8d:e0:64:fe:48:f6:d4:
                    63:36:2f:ea:b7:b5:97:d5:74:77:dc:ec:6d:39:db:
                    62:92:f1:41:86:e3:98:dd:b7:1d:3e:5f:e8:c9:4c:
                    f1:8d:ea:42:5e:47:df:79:62:60:24:ae:70:f2:ea:
                    85:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AE:81:72:19:64:9B:E4:BA:5B:71:10:F8:1C:76:07:9D:AF:F7:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8e31aa14-5e33-33df-97aa-426c3a5641db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.18.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:a9:a4:98:08:ce:bc:bf:ab:ca:1e:a1:4f:12:b6:27:51:21:
         62:4b:52:2d:79:a0:12:c6:d6:81:1e:c7:0f:f5:b6:c9:be:c8:
         12:97:ce:ef:db:b6:38:8c:82:77:c9:38:43:5a:ff:41:f2:72:
         b5:70:6d:3f:93:9f:b8:da:0d:e8:ed:20:ac:2f:c8:de:0f:f5:
         1f:e0:c0:3f:dd:aa:d6:f3:67:79:49:9d:58:c5:83:22:25:f9:
         68:8d:82:9b:10:75:6e:ce:26:8d:fc:3e:7c:d6:0a:12:e6:1f:
         2e:68:f7:a7:bf:f0:8f:ee:86:06:c8:bf:dd:f3:19:54:ed:b1:
         2a:87:11:2a:ec:57:9c:2b:a4:90:ca:37:99:89:ff:1a:40:62:
         97:60:5e:3d:29:b9:14:85:e1:c7:34:47:9d:43:9f:ad:ef:cb:
         e2:fd:16:0a:98:7b:37:e5:94:66:91:cf:28:15:f3:63:e5:dc:
         25:a5:f6:68:65:45:5f:e5:b1:85:22:5c:9a:34:b0:f3:51:af:
         54:3b:b5:b6:2b:fa:c3:a4:3e:8e:68:74:6c:fa:92:4c:a1:53:
         ff:9b:dd:84:93:74:87:05:cd:39:04:8d:a6:da:de:9d:0f:b2:
         1e:28:a4:1b:98:dc:56:1a:1f:aa:f3:60:82:e9:61:06:22:54:
         21:be:e6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----