Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b606c08f-9e6f-3223-9deb-06a994a96417.roa
File:                     b606c08f-9e6f-3223-9deb-06a994a96417.roa (raw, json)
Hash identifier:          7C4mJzUn9GLvaHhCKYHBub4EPnrE6z50CGq8jRutpn4=
Subject key identifier:   66:5B:2F:D3:FD:14:D4:AA:0A:36:74:66:74:5A:F3:E2:F4:E5:75:AD
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584037F7D4BBB5173FFDA1E96BA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b606c08f-9e6f-3223-9deb-06a994a96417.roa
Signing time:             Mon 12 Dec 2022 12:00:00 +0000
ROA not before:           Mon 12 Dec 2022 12:00:00 +0000
ROA not after:            Tue 17 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        130.186.32.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:37:f7:d4:bb:b5:17:3f:fd:a1:e9:6b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 12 12:00:00 2022 GMT
            Not After : Jan 17 05:00:00 2023 GMT
        Subject: CN=32b69e29-7d6b-44d9-b6d4-ec945d94ea7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8d:b5:5c:a8:5d:3a:83:95:19:aa:0c:e4:24:
                    aa:af:ee:c7:c6:28:f5:aa:11:20:eb:98:0e:23:96:
                    20:40:59:24:42:fa:42:00:48:88:18:f6:5f:55:31:
                    a1:e1:e3:a4:0b:96:80:db:f1:b2:60:0a:dd:34:35:
                    0a:54:51:58:06:02:0b:57:51:36:e0:1c:02:3f:d9:
                    1b:7e:cb:67:67:3d:d2:ac:70:48:91:00:9f:30:47:
                    c2:63:52:3d:fc:91:e1:28:d7:ae:b6:2c:6e:25:ca:
                    5e:85:7a:b8:a0:24:8c:aa:e5:e8:45:17:94:d5:90:
                    d3:98:8f:4b:8f:de:7e:4f:03:cf:52:30:b2:3e:91:
                    26:c4:96:62:f0:18:05:78:ff:ac:2f:36:f3:68:e3:
                    e7:96:c4:ad:70:1e:d8:63:5e:dc:aa:85:8e:70:3b:
                    28:28:9f:18:fe:9e:b2:79:4b:0f:aa:c6:0e:42:94:
                    c2:cb:0c:4e:85:73:ac:c5:49:f9:b6:e8:5c:62:f3:
                    0e:1d:db:c4:cb:b7:0a:84:b3:0e:ea:cb:d5:42:9c:
                    49:c9:b1:b7:3b:64:ee:bd:ec:b7:54:24:20:52:65:
                    0b:f4:c8:91:18:f9:53:86:f0:91:11:d9:fe:b6:37:
                    f6:b3:29:b9:64:56:7c:61:79:80:c4:2c:74:9f:94:
                    2f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5B:2F:D3:FD:14:D4:AA:0A:36:74:66:74:5A:F3:E2:F4:E5:75:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b606c08f-9e6f-3223-9deb-06a994a96417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.186.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:4d:ea:ca:78:36:0b:80:ec:f5:85:46:37:64:e8:ce:66:81:
         bf:36:a2:bb:06:ae:fb:04:9e:c1:01:30:45:b1:c6:55:3e:bb:
         42:7f:28:d2:a6:af:df:2d:cf:9d:60:d9:69:e9:cb:4b:90:33:
         d6:22:f3:47:85:81:b8:68:ab:6b:b9:c6:f6:12:51:77:5e:07:
         fa:64:9b:e7:90:2d:d0:4c:bc:c8:1e:5e:a4:8f:8e:68:05:10:
         9e:04:2b:96:6f:07:c1:84:89:4e:3c:61:87:99:fe:29:ee:e4:
         cd:a1:fa:06:35:79:b8:43:a6:f0:3b:00:a1:06:fd:a7:c4:25:
         d5:43:e0:1b:1b:fb:72:a8:47:12:5d:53:a0:cd:6e:21:b3:33:
         6f:2c:02:2a:0f:9f:e9:ec:98:1e:71:6a:45:23:8f:cb:da:9a:
         0d:7c:3c:2b:43:f2:29:c0:9f:9e:d2:73:8c:b4:f3:3d:b1:e4:
         71:5e:40:c9:0d:28:80:f7:f6:58:49:b4:7f:fa:fd:e6:85:bb:
         7c:7b:79:05:8c:b7:e6:9f:eb:e5:4d:65:70:ba:a0:c5:4c:a2:
         b5:5a:5b:f0:6f:ee:d2:00:7f:67:e6:99:b8:dd:dc:b3:c7:f6:
         f8:44:10:02:b1:2e:b9:84:5e:f3:d9:91:ef:07:e3:db:e1:37:
         f9:ad:a7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----