Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af9a48e0-91a4-39a4-a83a-32240e583595.roa
File:                     af9a48e0-91a4-39a4-a83a-32240e583595.roa (raw, json)
Hash identifier:          aS6wHOtfBTd6IibDZBBxekvG7zpOC47F6nM7KLTOf60=
Subject key identifier:   7C:26:DF:31:38:DA:1C:EE:8E:55:A6:9F:E1:FC:44:3B:7D:02:2D:1C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F0987719927BED2262C0AFF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af9a48e0-91a4-39a4-a83a-32240e583595.roa
Signing time:             Fri 26 Aug 2022 17:36:07 +0000
ROA not before:           Fri 26 Aug 2022 17:36:07 +0000
ROA not after:            Fri 30 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        161.178.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:09:87:71:99:27:be:d2:26:2c:0a:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 26 17:36:07 2022 GMT
            Not After : Sep 30 04:00:00 2022 GMT
        Subject: CN=9db151b2-af15-4fdf-b9ce-9d206f9d16a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a2:5d:67:7e:aa:b3:fd:3f:e7:9d:91:1b:fc:
                    98:3c:0a:0d:35:43:53:7c:85:97:11:a5:34:55:cc:
                    ba:bf:3b:e0:d3:21:70:90:d5:82:a7:68:2e:f5:1f:
                    8e:a6:0d:5a:83:a0:a5:67:4c:0c:2d:ee:64:97:d0:
                    96:51:51:fd:5d:5f:ca:24:e0:43:7d:8c:b9:90:5c:
                    aa:ee:d5:95:29:9e:09:16:bb:58:0c:0c:1f:69:66:
                    01:df:3a:2c:40:81:bb:81:24:5b:62:5c:09:f1:af:
                    e7:1b:26:8e:80:fa:15:91:28:f6:a6:fa:76:1f:ef:
                    f7:46:ac:3c:64:30:fc:e3:d5:65:f6:29:f1:8e:a9:
                    87:0f:f8:1b:61:46:35:75:d5:84:3e:e8:9e:bf:cb:
                    ce:94:ba:d8:32:b5:6b:b1:53:ed:ae:d9:74:3e:b0:
                    e3:8c:8b:39:8e:14:ad:5b:73:92:96:45:4a:22:df:
                    6f:c9:4f:10:4b:49:d9:39:a6:3d:94:c1:e3:ec:b6:
                    c9:8b:65:7a:4b:56:b7:2a:67:2f:1f:a7:63:03:e6:
                    2a:6d:22:dd:16:c0:a0:64:a7:72:8f:d1:ed:b3:d2:
                    81:f7:4a:eb:76:b2:0d:a0:35:66:c7:d0:ab:9e:49:
                    bf:a5:6c:dd:69:fc:67:ce:8e:5c:77:64:cd:62:28:
                    7d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:26:DF:31:38:DA:1C:EE:8E:55:A6:9F:E1:FC:44:3B:7D:02:2D:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af9a48e0-91a4-39a4-a83a-32240e583595.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.178.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:cd:13:68:07:5a:4a:3e:a9:91:9c:1c:cb:67:78:d6:f5:cd:
         a2:4a:0d:49:5c:67:e9:e0:ec:c0:51:a9:24:dd:f2:3a:82:b3:
         a7:55:80:9f:27:34:08:83:c1:c1:8d:17:fd:0a:da:61:e9:02:
         b4:07:ab:b6:1a:cb:5f:9a:fa:fd:bf:02:c9:ab:65:02:f0:52:
         f7:c7:89:f7:1f:a1:d0:36:43:0c:62:03:ba:16:b9:d6:a3:be:
         c8:ab:8c:d9:c1:bd:d8:0f:11:13:0c:5f:66:1c:37:d5:6b:18:
         4a:07:79:f0:8c:77:6a:0c:72:cd:f1:b2:76:40:ec:56:70:c4:
         45:4d:be:fe:c1:0f:54:14:c4:fc:05:0d:c1:af:bc:22:8f:ad:
         5b:52:ca:46:65:50:26:5d:99:a4:c7:73:a9:f2:3d:12:ca:3f:
         d9:55:7f:90:25:cb:18:7c:a0:e6:d3:76:85:fa:16:1f:14:5d:
         3e:5e:05:01:7e:0f:6f:6e:2a:42:92:16:32:0a:1c:2e:d0:3c:
         db:c1:18:95:0a:bd:52:69:c4:9d:aa:c1:da:82:fb:e3:56:8d:
         47:97:b4:b6:69:36:77:5c:a9:b9:04:1f:24:08:3e:7f:c1:77:
         3b:be:6f:df:72:d1:fb:6b:98:c5:b9:19:dc:ec:c0:cd:e4:4e:
         51:84:ee:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----