Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/be13612c-6da1-391d-963f-67ed21830083.roa
File:                     be13612c-6da1-391d-963f-67ed21830083.roa (raw, json)
Hash identifier:          ZcaYmrAHU87paV+I4eNOgt63lUXSRgaAMv31Krb9bH8=
Subject key identifier:   C9:D9:B9:37:F5:E4:12:BA:F2:51:79:8C:0E:C7:CD:2A:10:FD:23:EA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E4489ADA8F16FE4B6EADB8A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/be13612c-6da1-391d-963f-67ed21830083.roa
Signing time:             Thu 16 Jun 2022 12:00:00 +0000
ROA not before:           Thu 16 Jun 2022 12:00:00 +0000
ROA not after:            Fri 22 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        45.33.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:44:89:ad:a8:f1:6f:e4:b6:ea:db:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 16 12:00:00 2022 GMT
            Not After : Jul 22 04:00:00 2022 GMT
        Subject: CN=1a07e799-518e-44ae-a372-c0c9b6e2c675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4d:05:89:b0:76:f9:2f:fb:93:3f:f1:ce:8c:
                    8d:75:0d:2d:3d:6c:c0:35:ab:4c:28:93:8b:49:b4:
                    b4:81:67:05:1d:5f:a5:b9:19:19:77:1c:76:6d:05:
                    f4:be:7a:26:0b:0d:96:43:92:ec:b7:b5:1f:d6:ce:
                    f7:bd:bf:41:ef:c5:99:73:a2:b3:34:a4:84:d6:bc:
                    bb:84:1e:7a:57:cd:9a:7b:70:76:40:f0:a5:ac:78:
                    fc:6b:92:f0:7c:f8:b1:4d:93:76:17:94:78:b9:d3:
                    01:a2:4e:e8:f8:90:22:a0:a0:8d:ea:bc:ad:4f:40:
                    2b:0b:97:20:10:26:2d:6a:23:45:c2:ab:5f:6c:5a:
                    9d:be:c5:b9:44:01:9d:e6:01:32:5a:13:2e:dd:29:
                    1c:9e:20:bc:af:98:ba:3c:63:34:25:1d:cb:dc:ab:
                    da:84:ef:e1:d5:e1:71:cc:7e:84:82:a2:fe:ef:b0:
                    44:dc:84:5a:58:37:72:f9:50:54:f2:f6:39:97:e9:
                    99:02:0b:44:f4:b4:cf:b3:2f:bf:1e:4d:7a:d2:34:
                    3d:e4:fd:68:d1:fd:ea:84:23:e0:1f:44:5b:9b:c3:
                    63:84:36:0b:80:f7:f4:a0:fb:91:e8:b1:88:12:4c:
                    9d:dc:eb:71:0d:1f:f1:a3:a7:cd:ec:79:17:15:38:
                    86:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D9:B9:37:F5:E4:12:BA:F2:51:79:8C:0E:C7:CD:2A:10:FD:23:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/be13612c-6da1-391d-963f-67ed21830083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.33.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:4e:8c:5e:83:fd:de:91:0d:63:ba:fe:c0:98:ee:47:42:38:
         a5:8c:51:e5:b8:31:70:01:ef:1c:ac:6a:c2:88:6f:0e:04:3f:
         23:a1:06:c6:cf:fc:bb:76:01:01:41:c7:e5:ec:2e:ff:ed:f0:
         10:fe:3d:c5:52:a9:12:44:fb:64:a6:03:0e:a1:70:ba:cf:7f:
         c8:2b:bb:30:ff:b8:9b:3e:45:d6:b3:28:fe:6e:55:f1:ce:f0:
         28:01:e0:cc:e2:7a:13:4c:72:71:e2:b5:d1:fc:0a:80:2e:04:
         97:79:a1:e9:3a:ff:c8:3d:77:8a:ff:e0:ef:7b:e8:a4:11:15:
         8d:0b:88:9e:40:53:56:a6:0b:08:9d:b0:f8:d2:93:81:f0:e8:
         53:87:9e:d3:45:64:47:91:af:07:06:aa:6e:ed:46:9f:0b:4e:
         81:c8:f7:36:8f:d0:00:a6:18:17:78:eb:d6:59:58:3b:42:65:
         13:79:ff:fd:b3:fe:ef:50:1a:76:96:b9:1d:11:c5:52:f1:55:
         cc:49:10:71:50:32:7b:15:61:42:73:6e:7b:37:ed:ea:61:98:
         e0:f0:5a:e8:87:f4:e6:9a:61:5b:71:80:93:76:47:c3:93:39:
         55:58:35:de:ea:8c:c0:65:66:6a:1c:a3:bf:e7:86:2b:ad:8f:
         85:c5:88:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----