Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/949a2db9-2ce4-36ee-9b71-4cf287783696.roa
File:                     949a2db9-2ce4-36ee-9b71-4cf287783696.roa (raw, json)
Hash identifier:          X+UPljJ+x81DIvHJCCooGpxkAcLHbTP/AT5kW1AjSZw=
Subject key identifier:   E2:5F:CA:32:40:03:B1:C5:9C:74:F6:33:B2:27:40:5F:49:FF:21:FA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F8E0CA65624E6A35D88327740
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/949a2db9-2ce4-36ee-9b71-4cf287783696.roa
Signing time:             Wed 12 Oct 2022 12:00:00 +0000
ROA not before:           Wed 12 Oct 2022 12:00:00 +0000
ROA not after:            Thu 17 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        56.59.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8e:0c:a6:56:24:e6:a3:5d:88:32:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 12 12:00:00 2022 GMT
            Not After : Nov 17 05:00:00 2022 GMT
        Subject: CN=c0fde606-c6f0-49e7-b868-27e279917516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:90:6c:ba:a2:5a:4c:d0:0a:76:0e:5d:e5:9d:
                    a6:5a:7a:02:11:68:ba:32:73:38:67:7f:fd:3a:f1:
                    4d:db:bd:6c:28:2f:ae:41:be:a0:c7:24:20:50:66:
                    95:8e:ae:4f:26:9c:6d:33:f8:d8:bf:24:35:77:2c:
                    f9:a4:73:21:c1:b4:18:c6:6b:8a:ee:a7:a2:9b:9d:
                    3a:a0:ff:0f:f5:ba:35:9b:48:ca:05:89:46:30:3b:
                    6b:d2:db:14:8b:70:f5:c5:df:fb:08:8b:a7:43:7c:
                    1a:18:12:54:3c:75:1f:67:26:55:8e:a1:32:5a:6a:
                    80:69:d9:96:94:5b:29:15:8d:38:76:44:ad:c6:61:
                    05:59:09:f3:6e:37:97:a1:50:42:f5:00:e0:a0:fa:
                    77:2d:7f:67:9d:c1:1e:37:a3:8a:91:8b:d4:b7:d8:
                    5f:8b:16:31:2a:61:65:37:c1:75:e8:59:26:cc:fb:
                    39:65:33:f0:a5:09:17:3d:51:e6:1a:53:95:f0:30:
                    19:48:fd:b0:d4:c6:82:a4:a6:dd:d8:86:3f:00:53:
                    e0:a2:e3:50:44:a7:06:ca:f3:9d:46:5c:77:3f:b1:
                    4b:53:1e:a3:ae:45:ec:20:b7:1c:50:4c:84:d1:d8:
                    7a:1c:0f:f9:f6:76:31:4d:c5:f8:2c:eb:ec:c6:1d:
                    56:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5F:CA:32:40:03:B1:C5:9C:74:F6:33:B2:27:40:5F:49:FF:21:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/949a2db9-2ce4-36ee-9b71-4cf287783696.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.59.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:8c:82:9a:64:45:55:c0:b0:d9:e7:49:2f:d6:37:a5:a3:b9:
         80:e8:85:f5:3d:8b:cf:51:ae:cc:48:f5:94:1e:a5:50:b0:44:
         1b:e9:4c:71:b9:aa:47:ff:c2:55:e7:8c:25:01:d2:c6:ce:d4:
         69:5a:a1:14:3b:18:dd:b0:f2:38:86:13:73:df:3f:68:9e:f6:
         30:d3:aa:d5:aa:a5:4f:5e:03:b6:90:f1:66:04:cd:e7:44:6c:
         46:42:83:dd:37:61:22:1b:2f:fe:d5:50:13:45:ab:18:8b:c2:
         15:e7:4b:12:8d:b4:b3:ba:cb:ca:da:e1:d8:66:ce:3b:61:c3:
         8e:a8:d0:a1:cf:16:7d:75:b2:35:02:b9:53:04:15:73:a0:c7:
         71:59:88:3b:0c:e8:d0:2a:e5:42:31:58:8f:ea:e4:1c:08:d3:
         a4:87:c6:2c:7b:25:75:da:4f:ab:0d:6e:42:b2:10:91:8a:39:
         d1:1f:02:43:60:fc:7d:c0:c5:22:7a:68:59:94:44:e3:48:fc:
         49:cd:85:77:d4:51:e0:3a:cf:6d:17:9b:6d:bd:dc:85:88:73:
         f8:ba:e8:e1:b7:8c:bb:f4:af:f1:0d:19:37:a1:f2:10:d1:89:
         d4:1b:a8:c7:10:22:85:21:9c:e0:13:70:e5:19:d3:e2:bf:71:
         3f:d0:89:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----