Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b4f2f12b-7002-3450-843d-d089429b4495.roa
File:                     b4f2f12b-7002-3450-843d-d089429b4495.roa (raw, json)
Hash identifier:          5DcQmZjFmeNT7eWuoMXt9L/XNh44u76/jOvQjxFY7lg=
Subject key identifier:   80:64:7C:8E:D5:3C:1D:24:29:64:6C:D6:18:A7:E7:6E:A1:87:CD:41
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840957640282B043E7AA600DC80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b4f2f12b-7002-3450-843d-d089429b4495.roa
Signing time:             Sat 14 Jan 2023 12:00:00 +0000
ROA not before:           Sat 14 Jan 2023 12:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        16.162.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:95:76:40:28:2b:04:3e:7a:a6:00:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 12:00:00 2023 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=5094ee3e-b797-4f35-97db-c1829ac4bc8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0c:f8:33:aa:63:5f:a1:84:4c:53:dc:93:d2:
                    30:64:f5:51:a0:43:a6:6f:23:07:2d:f8:79:9b:b7:
                    4e:c4:52:6f:29:41:cc:ab:9a:e5:1f:cf:c4:e7:57:
                    e0:08:2a:61:69:b0:3b:73:ab:d4:1a:8c:c7:5e:8d:
                    61:b8:e0:e7:5e:d7:fb:54:81:41:60:6a:a5:b6:9c:
                    d3:bb:6a:a4:9e:2e:9e:d7:7e:e6:dd:f7:5c:ef:c8:
                    94:96:78:db:b7:77:ce:18:3a:33:a7:f7:bc:0c:e4:
                    7e:af:ca:f0:83:66:14:49:47:8c:f2:19:02:99:35:
                    b3:95:3f:da:52:bc:75:de:ba:7e:48:18:ad:87:78:
                    c9:74:8a:74:bc:f0:fc:4f:4e:66:32:7a:56:4e:49:
                    df:9b:5e:86:d6:c9:22:21:b7:3c:c5:ce:6f:89:02:
                    6f:bb:9c:9b:b4:30:f6:9f:e4:cb:86:da:67:5d:b4:
                    17:a4:5d:89:b2:57:3a:fe:00:f4:b8:0d:28:f2:1d:
                    0c:8f:f4:79:ff:89:ed:e2:f0:ee:9b:c6:2b:f4:fc:
                    da:36:00:22:23:f1:1a:70:a4:98:40:6f:a1:50:1e:
                    b0:0c:fb:d3:96:d3:8a:a8:30:75:54:5f:ab:07:40:
                    55:04:bc:ba:65:9c:ef:1b:51:75:67:1e:94:65:83:
                    57:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:64:7C:8E:D5:3C:1D:24:29:64:6C:D6:18:A7:E7:6E:A1:87:CD:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b4f2f12b-7002-3450-843d-d089429b4495.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.162.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:97:27:93:a7:7f:50:be:23:c3:a9:dd:23:21:b4:f9:5f:3f:
         d9:0a:a3:e1:73:81:00:6c:d6:db:f2:49:de:fe:50:b8:2d:48:
         38:77:db:db:d8:f1:1d:cf:d1:26:25:de:4f:92:30:09:3b:ba:
         40:15:15:86:35:fc:72:ca:95:0b:6a:fc:2f:bb:2d:11:11:49:
         52:c5:c9:0c:ae:63:8a:1a:b7:06:1e:cf:b1:93:f0:a3:e0:35:
         72:1b:ff:46:5c:ec:ff:6e:de:7a:11:d0:3f:76:b5:90:44:eb:
         ef:05:fa:3d:00:4b:df:93:ab:6b:77:24:c5:6b:65:40:01:5c:
         c9:2c:3d:19:9c:10:a3:6a:04:3a:c9:bf:26:ed:fb:5b:74:6b:
         53:0a:4c:5d:20:b3:24:cc:51:cf:c0:5c:c3:72:16:91:e0:30:
         32:88:b0:0f:8d:2b:74:c2:bd:1b:a0:cc:48:39:13:1e:65:84:
         fd:a3:7d:47:53:a5:6d:75:ce:33:7f:e7:72:e6:cb:cf:d0:02:
         b5:5f:b2:aa:c1:6d:6c:9b:58:22:f6:0e:f8:3a:30:ad:c9:52:
         91:c6:9f:0f:3b:db:80:e7:21:fe:70:ca:6a:25:ed:38:af:60:
         98:6b:9d:e7:9c:cc:af:37:62:a2:17:b6:15:88:e8:88:4f:9c:
         91:07:97:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----