Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bb1adcd1-ed19-331e-997f-1ae37e43f3f8.roa
File:                     bb1adcd1-ed19-331e-997f-1ae37e43f3f8.roa (raw, json)
Hash identifier:          yFfctrOIg/um43IiL3oJdxVWhjRoKqDy/LT/r5ktbEE=
Subject key identifier:   45:97:B4:BD:4E:77:12:1C:D0:EC:E5:20:A4:C1:2C:C0:7A:24:0D:A4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C92FA10D87208E3CA77F52380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bb1adcd1-ed19-331e-997f-1ae37e43f3f8.roa
Signing time:             Thu 13 Jan 2022 05:00:00 +0000
ROA not before:           Thu 13 Jan 2022 05:00:00 +0000
ROA not after:            Thu 17 Feb 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.121.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:92:fa:10:d8:72:08:e3:ca:77:f5:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 13 05:00:00 2022 GMT
            Not After : Feb 17 05:00:00 2022 GMT
        Subject: CN=49d2d417-7e48-4fea-8fa0-1925ccfe39ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:50:51:e4:6e:79:76:5e:cd:14:56:74:d9:dd:
                    db:07:2a:f8:81:e8:2f:3c:f1:98:79:97:bc:c7:ac:
                    0e:01:5c:15:84:de:6a:25:41:43:74:64:77:57:0f:
                    a6:9b:5b:18:d9:9a:0c:70:79:e2:d5:a0:2c:20:cc:
                    b9:ae:9f:da:59:4e:63:77:0c:1b:17:7e:3a:02:75:
                    77:9f:7b:eb:54:d2:18:b3:19:24:b4:5f:6b:4e:19:
                    f1:45:e5:a7:66:8b:a5:55:36:97:f9:b8:34:d7:01:
                    42:69:d3:f4:87:d0:55:9b:fc:b9:26:32:80:85:8f:
                    d9:53:8f:d7:68:e9:db:42:d1:bd:01:67:60:41:a1:
                    14:db:06:b8:15:ea:e0:68:df:c1:a7:5a:f4:6b:6d:
                    79:f9:ac:07:4d:9d:ea:17:f4:36:83:c7:bf:3f:1c:
                    11:27:1f:88:29:df:43:cd:cc:5a:c7:3b:f1:4c:be:
                    b1:82:55:98:f4:00:dd:a5:06:41:03:c3:65:8d:c9:
                    c8:39:52:5b:f8:10:2a:bb:0f:d4:46:82:b6:6e:96:
                    2e:de:bf:97:bd:9c:27:75:04:f4:8a:d4:ab:6e:49:
                    51:81:2c:64:f1:47:71:a6:5a:24:5a:4b:d3:4e:83:
                    93:f6:5d:bf:00:74:8d:77:c9:a4:33:91:e6:b6:d4:
                    74:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:97:B4:BD:4E:77:12:1C:D0:EC:E5:20:A4:C1:2C:C0:7A:24:0D:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bb1adcd1-ed19-331e-997f-1ae37e43f3f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.121.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:29:7a:48:77:e3:b1:62:fe:af:7c:ae:d9:07:e1:dd:fa:0d:
         43:cc:9c:7c:7b:94:2c:8d:e4:11:91:72:43:3e:e0:75:e9:06:
         41:3c:17:d8:83:38:0e:03:5f:95:b4:d1:79:97:b5:dc:48:49:
         1f:61:a1:49:ac:61:5a:ee:f4:fd:7f:3d:3a:54:96:1a:5c:2d:
         0f:1b:2f:97:30:83:01:54:e7:40:44:0b:80:5a:1d:15:5e:74:
         70:cf:5e:ab:84:33:df:ae:14:f7:12:5e:d9:be:ea:2b:b9:ec:
         c1:21:9f:44:80:c0:87:3a:92:46:fb:bf:dc:f3:e1:a1:a1:14:
         56:a5:48:b0:e0:97:8a:15:7c:f5:23:1b:2a:97:45:98:18:3d:
         7d:2a:60:39:fb:56:c7:1d:47:39:dc:ed:e6:92:9d:b6:54:b8:
         18:f8:0a:58:3d:9b:de:63:04:52:58:28:17:07:a5:d9:09:92:
         4f:e9:37:c9:54:4b:1d:de:aa:ab:1c:16:c8:fb:45:6d:68:58:
         2c:9a:87:25:9b:7a:b9:0e:ff:14:c6:9e:29:93:9e:f5:cf:27:
         45:c6:77:c4:ca:86:0d:72:5f:a8:60:8b:7a:e7:8d:13:e0:3b:
         0a:94:9d:eb:8e:35:a7:ef:2a:58:99:56:28:92:66:90:eb:f6:
         ef:8b:50:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----