Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/961ff326-05d3-3e71-b687-81fe3cbc0738.roa
File:                     961ff326-05d3-3e71-b687-81fe3cbc0738.roa (raw, json)
Hash identifier:          CVOxmvzcofK+h4wCfwetVOReT0yMocj5xwbQeMSsuZY=
Subject key identifier:   DB:57:37:94:61:60:86:4A:B4:80:BD:A6:A3:2F:88:C0:DA:A3:93:CD
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D0849AAC8872F2E0B9FBAB040
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/961ff326-05d3-3e71-b687-81fe3cbc0738.roa
Signing time:             Thu 24 Feb 2022 05:00:00 +0000
ROA not before:           Thu 24 Feb 2022 05:00:00 +0000
ROA not after:            Thu 31 Mar 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.70.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:08:49:aa:c8:87:2f:2e:0b:9f:ba:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 24 05:00:00 2022 GMT
            Not After : Mar 31 04:00:00 2022 GMT
        Subject: CN=9769c0c8-826d-4b4f-ac7d-4c5af076f4bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9a:fe:5a:57:e4:71:e0:d2:d1:d9:31:5a:d3:
                    b0:b0:42:40:d3:44:b4:c5:a9:68:ad:69:7d:9d:fb:
                    ec:0e:e0:5c:ab:7e:c4:47:96:b8:1b:a0:ba:8d:1b:
                    16:ac:38:ce:b7:e7:25:3f:43:5d:1a:55:bb:02:c6:
                    02:57:dd:64:3d:3f:b7:67:a3:b2:47:cd:74:7c:0e:
                    47:3d:3d:b9:a0:14:5e:11:c7:92:75:42:ed:fe:5c:
                    5b:7b:c7:41:9a:6d:de:11:d9:69:d4:f5:09:ca:e7:
                    58:26:e6:de:f8:12:4d:bf:0a:9a:c2:54:97:c9:86:
                    15:cf:0a:0d:28:20:62:4b:15:16:57:c3:c7:a4:75:
                    8b:7c:37:32:1f:7f:67:88:32:d6:40:3e:30:ed:d7:
                    ea:98:d2:08:a5:d5:c8:74:e7:2d:36:67:91:dc:e8:
                    40:32:9e:0f:40:9d:ad:2b:96:13:76:30:db:ac:52:
                    74:84:97:8f:00:a4:38:39:c8:d2:07:13:3e:e0:e6:
                    d0:d4:4c:29:1f:c5:19:2a:b3:c2:fe:36:67:3b:a2:
                    62:76:29:60:c4:1e:5c:4a:72:db:e3:c3:d8:78:5b:
                    94:aa:05:1f:e4:6f:06:e2:9d:6d:a8:b8:ca:0c:b2:
                    bf:f3:fc:f8:1c:71:e8:8f:a9:08:57:e7:1b:a1:9c:
                    0e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:57:37:94:61:60:86:4A:B4:80:BD:A6:A3:2F:88:C0:DA:A3:93:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/961ff326-05d3-3e71-b687-81fe3cbc0738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.70.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:b8:73:65:ee:c0:e3:e4:48:67:1f:eb:67:81:33:15:e4:29:
         a1:20:3b:71:aa:b5:10:90:4c:39:a4:54:1b:48:7c:bb:e2:d5:
         f3:1b:26:60:eb:2a:0c:eb:f6:8d:88:1c:21:39:56:63:6e:d7:
         a6:23:93:2b:77:2d:ae:03:b3:42:a9:55:51:1e:d3:ed:3d:47:
         5e:c5:60:b7:a5:ea:03:3e:71:00:39:5a:76:1c:53:57:41:55:
         5f:dd:e3:6a:fc:52:ff:fb:82:5f:a2:ab:d2:4a:0c:3c:99:18:
         4a:f2:17:20:d5:5d:bb:6c:0a:34:e4:27:f3:11:bf:09:d0:73:
         e3:58:06:42:12:9d:74:ad:3f:63:18:74:cc:49:b3:0d:c4:31:
         a1:e8:e6:45:4b:0d:da:84:8b:8d:3f:2d:08:cc:2f:86:02:ce:
         e6:07:51:a8:58:32:18:a0:f1:4b:ba:5f:93:12:99:c8:04:19:
         ab:0c:de:8d:73:65:de:e1:af:69:b1:fa:b0:82:5a:e6:46:88:
         7c:00:cc:11:75:50:61:ba:57:b6:53:ed:a3:0e:58:19:ae:f5:
         ff:f5:78:c2:23:ea:f2:62:22:5b:a2:ca:48:e2:c6:1c:be:bf:
         7c:ec:57:66:65:08:82:b4:13:10:49:ea:59:8a:8c:2f:9f:28:
         f0:af:b1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----