Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/932afdc7-acdc-32b3-ad92-f68732ade84e.roa
File:                     932afdc7-acdc-32b3-ad92-f68732ade84e.roa (raw, json)
Hash identifier:          GI0oYm4pxUvp7yBEPd2OF+/5Igqfr+eUJFt+3+UH690=
Subject key identifier:   0C:83:E9:15:37:8D:73:5B:58:DC:3A:8C:26:4C:E3:6C:E7:5D:A0:5A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840947177D7BE1CC3CB2E9ED400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/932afdc7-acdc-32b3-ad92-f68732ade84e.roa
Signing time:             Sat 14 Jan 2023 12:00:00 +0000
ROA not before:           Sat 14 Jan 2023 12:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        16.138.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:94:71:77:d7:be:1c:c3:cb:2e:9e:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 12:00:00 2023 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=505f56d4-552f-44c8-a290-0f74c239bb79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3a:00:bc:e2:42:eb:21:0d:86:75:26:64:17:
                    86:9d:53:3d:fd:57:35:ef:39:99:2a:95:95:ad:2f:
                    ba:a4:c2:a4:ce:8c:32:09:d8:05:66:ab:c6:cd:0c:
                    d2:a5:66:65:b9:41:ef:b1:30:a7:d4:42:07:7c:83:
                    ec:61:29:9f:31:fc:99:df:ad:69:5c:bd:e7:82:33:
                    42:f0:b0:93:98:04:65:bc:fe:ec:bf:48:5c:7c:97:
                    6a:63:e6:be:e9:22:8e:5e:54:a6:27:aa:ff:00:bd:
                    8d:e3:6d:31:f1:b5:df:88:e6:c0:a0:88:d1:27:82:
                    26:90:c5:1c:a4:cc:d9:d6:99:c3:ff:3d:fc:14:21:
                    cf:c8:84:55:c3:91:3f:13:90:8f:b8:b1:fd:74:2e:
                    e9:2e:d5:cd:3c:1b:aa:70:79:a4:ca:27:ea:03:be:
                    b4:12:b9:19:c1:1c:55:e0:a8:e7:56:58:ff:8c:5f:
                    e4:69:4e:9b:42:62:e2:d9:23:c4:03:a6:6c:c2:8c:
                    10:bf:61:e8:5a:b9:d6:32:84:8c:66:8c:0c:de:13:
                    d4:83:e9:37:00:8d:69:0a:fa:db:12:eb:d6:7b:48:
                    6a:a2:39:51:0d:ff:f1:28:9c:06:f2:46:ba:3d:b4:
                    02:49:f1:71:b4:25:09:fe:fd:a5:90:45:54:38:72:
                    61:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:83:E9:15:37:8D:73:5B:58:DC:3A:8C:26:4C:E3:6C:E7:5D:A0:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/932afdc7-acdc-32b3-ad92-f68732ade84e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.138.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:d8:78:62:66:ff:aa:1d:3b:ad:ec:15:eb:21:58:bd:bc:97:
         0d:c2:5f:ac:34:c7:05:ac:ea:e4:05:a2:30:ef:a9:0c:3c:2e:
         97:63:48:f7:8f:bf:f3:50:dd:f7:1d:35:e0:b0:f3:98:c2:38:
         21:c4:18:b5:b7:ca:11:d1:32:92:41:f7:75:c0:8a:a9:f8:82:
         8d:73:a2:d0:0d:07:9b:01:ff:88:a1:e3:53:8b:b0:21:1c:2b:
         d5:2a:52:9c:0d:d5:37:71:50:fa:0f:2f:cb:19:81:77:3b:cf:
         8f:ab:dd:b7:e2:f9:d5:15:79:a8:ae:bb:16:41:ce:76:11:25:
         54:e1:c8:17:d4:8b:88:38:43:5a:41:a2:20:4a:04:92:2c:f2:
         1e:33:9d:e9:b7:6a:b0:72:70:13:5d:dc:c0:7a:06:39:91:96:
         75:f5:a2:0f:c0:bc:5a:a5:0a:d8:39:82:b0:1a:55:f9:7b:cb:
         8e:68:e1:f7:73:a4:9a:a9:2e:25:7d:3b:07:26:75:41:e6:6c:
         5f:d9:79:e2:fb:43:e8:26:ee:23:e2:b6:d4:4c:fe:98:9e:db:
         7e:21:47:9a:05:9d:42:c5:ef:11:b9:40:71:76:1f:37:58:37:
         96:2a:1d:d1:1a:aa:e2:63:1b:2e:21:e9:aa:cd:b1:d1:db:c9:
         cd:07:93:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----