Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bcd55ce2-5908-3fc1-8a6e-979dacda226c.roa
File:                     bcd55ce2-5908-3fc1-8a6e-979dacda226c.roa (raw, json)
Hash identifier:          T0QMlrcbYt+5shZJcGb0F/PYtlcMW0XCbC+CvazA0to=
Subject key identifier:   5D:A1:81:02:DC:03:E9:B9:45:31:5B:C9:31:37:D2:2D:98:81:A8:79
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D55E78D57F5FAE00C867F9100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bcd55ce2-5908-3fc1-8a6e-979dacda226c.roa
Signing time:             Wed 23 Mar 2022 04:00:00 +0000
ROA not before:           Wed 23 Mar 2022 04:00:00 +0000
ROA not after:            Wed 27 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.92.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:55:e7:8d:57:f5:fa:e0:0c:86:7f:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 23 04:00:00 2022 GMT
            Not After : Apr 27 04:00:00 2022 GMT
        Subject: CN=62cec5b5-bb3f-45b8-b20f-8a2ec9972cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6d:20:ff:f0:d8:69:ba:ed:f2:5f:14:74:00:
                    1e:fe:71:5a:f4:29:6b:69:2e:93:51:7f:bd:14:ce:
                    6c:a5:34:24:92:27:48:38:e0:99:82:15:e6:c3:f8:
                    4d:80:05:d2:d7:39:8a:af:40:4e:7c:96:6f:08:04:
                    55:04:7b:58:cc:6e:ec:ec:26:c0:42:d3:f2:b5:3b:
                    c9:be:76:bb:b2:52:93:3e:f1:0c:13:b3:fe:c4:92:
                    d8:d3:93:bb:5a:43:9b:27:84:22:f1:5f:23:10:5b:
                    fc:c4:e6:e6:11:38:a8:ec:43:59:c2:51:b2:2b:bd:
                    f1:f1:ea:dd:aa:83:6f:63:97:13:ce:e9:23:0a:1e:
                    7c:48:89:37:56:c7:4b:d8:3a:96:76:a3:20:8d:1a:
                    af:df:b9:d0:63:aa:54:ac:06:ef:5b:0e:d7:b8:65:
                    1d:62:80:5b:27:c2:6a:7c:ca:85:01:3d:fd:22:8a:
                    e1:0b:47:17:20:7f:b2:c2:8d:3e:62:ca:52:2d:cc:
                    fb:59:91:d3:22:3c:79:f5:c9:77:4a:24:d7:7c:18:
                    2b:bf:3c:f7:11:b4:ff:95:64:f9:8e:b8:ca:af:fc:
                    9a:f0:de:96:ea:64:51:9d:a1:30:69:b5:4d:32:75:
                    5c:d0:68:43:2c:d9:b4:82:a0:dc:a3:1a:fe:c1:28:
                    ae:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A1:81:02:DC:03:E9:B9:45:31:5B:C9:31:37:D2:2D:98:81:A8:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bcd55ce2-5908-3fc1-8a6e-979dacda226c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.92.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:8c:ef:82:6c:78:f8:67:9a:52:0a:73:91:a8:74:aa:cd:a0:
         96:37:21:a6:2d:a3:6c:83:5a:5b:4e:dd:e4:53:1e:0e:ee:bf:
         32:ec:1f:a5:c1:24:41:f9:46:fa:c1:d2:a4:bf:c8:1f:42:4e:
         3d:34:0a:4c:0f:7b:cb:a8:11:b8:5a:81:32:cb:2a:54:c5:ef:
         49:8b:4e:39:1a:16:c0:8d:0d:61:0b:9b:75:d8:27:b9:08:c1:
         81:56:00:0f:d6:85:f6:01:c9:bc:75:1b:c3:33:e2:2b:84:cc:
         44:8f:d5:01:f1:28:d0:c7:8d:32:e9:4b:2f:c2:ee:72:e8:90:
         12:76:cc:dd:d0:c2:22:dd:a8:89:85:0f:93:9a:f1:af:92:d3:
         31:27:a5:6c:6a:47:80:ca:a4:2b:89:47:72:18:66:e0:64:b6:
         d7:6c:49:43:c0:76:d3:fb:56:14:b5:51:fd:95:33:31:77:c0:
         87:d0:85:a3:4d:ab:90:db:3a:40:65:40:5f:75:77:3e:f1:2f:
         8d:0a:b9:32:3a:50:b6:98:36:22:da:73:d2:31:79:d9:1d:25:
         f1:70:6c:e7:28:eb:ed:21:2a:d3:a6:9e:99:d4:bd:37:cd:52:
         b6:01:73:02:4d:2b:56:0f:ff:bd:d3:d4:b9:c2:9e:93:4f:f4:
         35:28:55:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----