Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9de07b57-7e23-3ce6-85c6-d55cc2b2e150.roa
File:                     9de07b57-7e23-3ce6-85c6-d55cc2b2e150.roa (raw, json)
Hash identifier:          FvK4qKPtFUWAbHlDGR0rOCzGlgvDFvKFiwqUQjLAcrw=
Subject key identifier:   1D:AE:46:6F:8A:31:0E:AB:32:E2:73:E6:DD:92:3C:70:0C:F2:70:91
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F89481A6AD3D7ED3C982BA800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9de07b57-7e23-3ce6-85c6-d55cc2b2e150.roa
Signing time:             Mon 10 Oct 2022 15:51:07 +0000
ROA not before:           Mon 10 Oct 2022 15:51:07 +0000
ROA not after:            Tue 15 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.175.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:89:48:1a:6a:d3:d7:ed:3c:98:2b:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 10 15:51:07 2022 GMT
            Not After : Nov 15 05:00:00 2022 GMT
        Subject: CN=265d8915-15af-43d1-a756-3ac1fa50d172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:01:53:4b:bd:da:22:f0:7f:d0:25:87:c4:1b:
                    8e:ae:41:60:a6:dd:d6:83:89:0a:7c:7e:e9:de:6d:
                    69:99:cb:ad:00:ee:32:ac:76:06:27:fc:b5:a9:ce:
                    20:b4:26:0c:f3:cc:c4:36:9c:4c:35:fa:ce:32:71:
                    0e:16:8c:a3:01:83:da:ef:90:22:ab:8d:8e:c9:5f:
                    89:58:e6:bb:ad:4e:e1:25:87:29:a5:ad:e3:9c:90:
                    d9:41:73:bd:02:b2:6c:09:63:43:0b:69:a9:69:55:
                    50:2f:9f:80:df:0f:e7:59:34:79:76:8c:b4:c3:80:
                    61:fa:53:b6:2a:da:b1:72:53:e3:8a:85:24:db:17:
                    91:cc:c7:9a:09:80:cf:10:83:e4:65:ec:bd:4a:49:
                    7c:2d:25:0b:17:44:f4:c0:d5:2e:ae:fe:70:22:1e:
                    f4:e8:f8:7a:2f:ab:a8:b5:76:16:20:d3:e9:9f:2e:
                    22:33:53:d4:eb:fa:b9:a7:10:3b:ba:bb:c3:54:37:
                    e5:8f:e9:3d:bf:f3:b8:5b:02:5f:04:15:d4:63:b1:
                    b2:ed:b5:76:57:30:d1:3b:58:d1:54:2e:07:92:94:
                    2b:f8:08:5e:e3:88:c1:3a:f3:c7:c4:39:60:c7:88:
                    74:3f:42:33:5a:10:35:87:b8:a7:f7:ab:70:91:40:
                    1f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AE:46:6F:8A:31:0E:AB:32:E2:73:E6:DD:92:3C:70:0C:F2:70:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9de07b57-7e23-3ce6-85c6-d55cc2b2e150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.175.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:1a:4f:21:fa:db:8a:bb:f2:23:20:d4:89:ce:0f:86:e4:17:
         f7:6d:f8:8b:9a:ca:a1:a8:72:70:6f:98:4c:ab:0d:78:01:24:
         9a:e2:d9:14:73:92:04:c8:dc:74:8e:ed:f1:dd:4a:35:ce:a1:
         bd:5f:80:95:da:58:8e:dc:5e:79:d9:3b:fa:b1:e5:b9:07:bb:
         1a:d2:44:6c:07:46:0f:0f:c0:14:f8:bd:55:b1:f2:dd:3b:ac:
         37:fd:04:eb:8a:8f:a7:51:0c:25:7a:81:3f:d0:fb:55:98:43:
         73:32:83:20:38:ff:09:77:66:ab:53:e3:1d:7a:01:9f:49:36:
         c0:83:c4:62:66:6b:82:0b:7c:d2:64:24:92:22:71:fb:c2:42:
         7a:33:bb:73:e5:5a:ad:17:6b:5c:69:81:0d:f1:20:4e:70:f1:
         15:d6:5a:11:64:49:6c:13:50:78:5a:43:ee:2e:7d:d0:73:18:
         73:b7:a1:37:18:48:57:8d:cc:5a:bc:dc:15:4e:14:3f:63:52:
         6a:43:b5:2c:d8:09:f5:84:4b:11:79:c9:54:0c:e5:d8:ad:f2:
         91:94:fe:73:53:38:93:fa:ef:64:aa:cb:c4:ee:dc:76:7c:7f:
         19:22:2e:b0:4d:89:29:e0:43:eb:ac:fe:c5:cc:20:04:e3:90:
         f4:34:08:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----