Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9e2f9e6f-16ff-307d-a939-6221d78859f9.roa
File:                     9e2f9e6f-16ff-307d-a939-6221d78859f9.roa (raw, json)
Hash identifier:          yyhAwaEtACVsvquBsVdYzVOFkWv/89hQnx2ctGlSvwU=
Subject key identifier:   3D:34:B9:F8:F2:63:73:82:39:52:99:F9:30:3F:DC:63:26:08:2F:4F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840998872277D5EE656874C4380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9e2f9e6f-16ff-307d-a939-6221d78859f9.roa
Signing time:             Mon 16 Jan 2023 12:00:00 +0000
ROA not before:           Mon 16 Jan 2023 12:00:00 +0000
ROA not after:            Tue 21 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        16.181.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:99:88:72:27:7d:5e:e6:56:87:4c:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 16 12:00:00 2023 GMT
            Not After : Feb 21 05:00:00 2023 GMT
        Subject: CN=1edbbe25-a553-4fea-a4c4-fb6ed2e2fe25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:42:af:86:be:13:be:bf:51:c5:df:0a:47:16:
                    17:b9:f3:df:6e:ca:52:20:f5:b3:6f:24:83:14:71:
                    09:c9:44:5d:f5:f2:91:99:52:05:36:e6:e4:27:0c:
                    f4:ea:fb:90:b0:97:bc:dd:bf:53:c0:72:94:7a:d5:
                    2f:f4:ca:75:e1:9c:b7:0a:bf:a9:e0:f5:47:85:88:
                    05:84:16:32:96:ce:69:d6:e5:d8:b5:6b:1c:2f:19:
                    df:b0:53:03:8d:99:49:f1:14:13:bc:8b:f4:40:32:
                    b9:dc:83:6d:5d:73:91:e1:f1:87:4c:d2:41:53:ed:
                    a7:cb:34:b0:3c:2d:c2:72:d3:66:ff:76:b9:17:81:
                    20:d9:93:79:7c:c4:b4:2d:01:97:42:1c:28:73:ae:
                    88:d1:16:4b:ed:f7:08:b2:8b:62:35:59:b5:ba:aa:
                    a2:87:80:1b:29:8a:cb:55:98:f5:5c:1f:33:3f:69:
                    88:16:cf:08:6f:5a:b0:0f:bc:ff:54:75:83:6a:51:
                    cc:8c:71:fd:d3:e3:11:34:61:a7:86:a9:57:58:16:
                    48:f7:09:60:76:42:05:fc:c7:6a:d9:c4:24:a1:57:
                    82:77:3d:41:47:7d:bd:f2:77:3a:11:07:34:ae:0f:
                    a7:54:e3:85:61:61:4f:48:ba:6f:82:91:0f:10:41:
                    85:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:34:B9:F8:F2:63:73:82:39:52:99:F9:30:3F:DC:63:26:08:2F:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9e2f9e6f-16ff-307d-a939-6221d78859f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.181.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:cb:4d:a8:d9:7c:d9:c4:f2:a1:29:91:58:1c:7f:40:4e:ef:
         90:c2:d7:69:39:8b:c3:a9:20:dc:88:57:f9:cb:21:c6:d8:a8:
         3e:ea:8a:8a:e2:37:88:71:40:1c:37:9d:12:6d:47:57:1e:ab:
         c2:4a:22:0d:ad:d6:0a:af:4d:09:0f:d2:c1:eb:39:46:b5:a1:
         ba:22:10:06:e5:59:6d:2f:37:db:2f:d4:cc:c7:e3:98:ec:d2:
         d4:19:cf:f1:16:5d:57:8b:af:b2:e3:59:c9:5e:9a:f7:e0:3b:
         e0:77:f4:0e:29:fa:18:c8:a8:cc:ef:94:53:2d:16:ac:37:d5:
         8a:28:e3:58:2d:7e:35:db:16:7f:f2:8b:39:6e:c6:cb:34:11:
         ce:49:bd:3e:60:16:8f:ee:fd:46:3b:41:a0:fe:13:8a:f5:3e:
         00:71:b9:0d:75:b9:c3:7e:92:e4:75:0e:44:90:21:85:49:d9:
         58:05:5b:29:4f:1b:a3:5d:71:88:d0:8e:84:10:7e:1a:7a:12:
         fc:95:dc:db:58:e4:22:9b:5f:88:c5:e5:4c:34:e6:fc:fb:fc:
         e7:2b:f7:38:39:a1:52:20:4e:23:13:ba:ed:eb:e2:be:da:19:
         09:f8:4b:72:5d:81:c2:23:82:bf:22:32:9c:f8:38:b3:cb:25:
         29:04:23:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----