Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa150698-b25d-3cf2-af38-2cd97f730c2a.roa
File:                     aa150698-b25d-3cf2-af38-2cd97f730c2a.roa (raw, json)
Hash identifier:          NsGPi08D4etlQYzW90xzGH1sB+rU4USiy2C3OoXmLcg=
Subject key identifier:   BA:67:CE:88:50:3E:B2:B3:DA:90:52:AA:97:D2:E4:B7:FC:99:3E:FA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D5A2639C2E723493B9292DF80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa150698-b25d-3cf2-af38-2cd97f730c2a.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        76.223.128.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5a:26:39:c2:e7:23:49:3b:92:92:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=ffb0a0dc-5672-4ae6-969b-83ca51ed0f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:40:2f:f7:19:a8:19:47:09:4c:dc:dc:50:1f:
                    02:15:cd:c1:74:ce:c3:24:33:83:13:1d:7f:50:7c:
                    3b:56:61:21:6d:d5:29:c1:d6:17:36:dc:44:04:62:
                    26:ac:ae:4a:1a:f9:61:f4:6e:4f:f1:f2:0e:eb:ba:
                    20:25:21:83:05:81:96:21:7c:8b:8a:b8:1d:2e:c3:
                    f0:b3:8f:9e:03:56:a8:57:21:c1:f0:d7:6d:cc:f9:
                    05:ee:5a:f6:d4:7e:ee:69:9a:3b:fb:39:3e:27:6e:
                    1c:3c:15:67:5e:86:a1:eb:a7:b4:03:17:9a:78:50:
                    56:ab:a1:e6:25:0f:f2:fd:70:4e:bc:c3:c2:6c:55:
                    d9:df:28:fb:f0:3f:51:9d:09:9c:83:b4:a9:df:ff:
                    d2:cb:0c:78:9d:58:69:6f:92:0b:66:65:5f:d6:17:
                    9f:33:55:aa:61:4a:d1:84:94:aa:3c:1e:e3:1c:12:
                    28:7b:2d:31:b3:5c:8b:8e:5f:65:1d:b9:28:33:b7:
                    01:8c:e1:00:10:6c:68:95:eb:9c:26:8f:d4:11:80:
                    71:7c:f6:c9:97:01:aa:66:eb:ac:cc:1b:be:56:33:
                    ef:66:95:1a:3e:ab:c3:a3:db:1c:e8:26:62:a5:71:
                    be:f0:29:9a:c1:27:06:47:ac:9c:a0:f6:f8:3e:b8:
                    29:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:67:CE:88:50:3E:B2:B3:DA:90:52:AA:97:D2:E4:B7:FC:99:3E:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa150698-b25d-3cf2-af38-2cd97f730c2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:0b:5d:d5:8d:6d:78:a1:5f:70:c9:9f:35:ff:19:e6:ad:20:
         5a:9b:6b:58:04:91:41:53:84:31:81:45:69:12:d9:5b:cb:b9:
         66:45:0e:b8:fe:2a:5b:e0:d0:e5:7b:7b:a1:eb:b2:73:e5:e9:
         2f:c4:b4:57:f1:ca:36:1d:a2:37:a0:89:5e:3a:11:80:8d:75:
         5f:b5:10:34:4a:6c:7e:e3:15:8f:92:bb:1e:2b:32:34:a0:eb:
         29:6a:20:56:20:9f:f5:ef:43:2e:32:96:17:7c:fe:fe:70:91:
         46:ed:fb:0e:2c:65:ef:95:52:ba:b5:20:cd:15:1e:ec:75:8a:
         f5:c0:02:92:b7:c8:06:32:1e:c5:3c:29:02:f8:1c:8e:1a:61:
         60:67:e4:f5:c5:3e:29:f3:c2:cc:dc:c8:fb:4a:96:46:64:20:
         1a:01:aa:5f:cc:c0:fc:29:35:c1:50:81:65:8f:ef:2c:d0:66:
         91:4b:77:4c:7e:4d:74:d1:67:21:3a:00:aa:bc:c0:0f:59:ee:
         0c:2d:e4:95:96:3d:c9:1c:e9:66:41:20:4f:74:8b:90:06:79:
         fc:f1:d8:e5:59:01:c9:51:84:74:e6:e2:7a:b1:4d:98:b1:09:
         0e:13:06:ac:1a:ea:a7:e7:a7:c2:bc:19:99:4d:51:37:3c:4d:
         f4:88:48:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----