Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bea1e448-9370-39b3-8635-80979d3bb286.roa
File:                     bea1e448-9370-39b3-8635-80979d3bb286.roa (raw, json)
Hash identifier:          yv1HCtQwwIIRNP4ovyLCCBNk3rUoEt6627eyj9q9a4s=
Subject key identifier:   11:A5:10:D7:21:65:F0:36:C1:9F:3F:82:90:A9:E7:25:8C:2A:AF:02
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584072E2AFDE739BEC910D2F0600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bea1e448-9370-39b3-8635-80979d3bb286.roa
Signing time:             Mon 02 Jan 2023 12:00:00 +0000
ROA not before:           Mon 02 Jan 2023 12:00:00 +0000
ROA not after:            Tue 07 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        16.190.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:72:e2:af:de:73:9b:ec:91:0d:2f:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  2 12:00:00 2023 GMT
            Not After : Feb  7 05:00:00 2023 GMT
        Subject: CN=644b15a6-e785-4b70-8edc-c3ea6c04e5c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:34:cc:43:07:23:e3:17:0b:20:05:2f:18:2d:
                    c6:b2:c0:2f:19:c3:50:dc:0d:73:15:1a:90:71:db:
                    3a:7f:c3:c3:76:ac:fc:06:e1:f7:ac:d8:a7:57:bc:
                    ea:7d:cf:08:14:72:b5:bc:fc:6d:13:3a:8e:f4:42:
                    2d:83:c3:04:a7:e3:79:75:68:62:3f:0a:80:46:8c:
                    0d:ac:59:4f:eb:78:bc:54:1e:ca:67:be:6e:e5:0b:
                    15:cf:e9:cb:a4:14:c9:8a:5e:f5:51:a5:f4:0f:03:
                    06:0f:09:fa:03:e6:bb:59:60:a5:88:98:4e:b2:2c:
                    78:9e:5f:97:28:a5:fa:d8:8a:60:bc:09:d5:45:92:
                    93:91:3c:54:7c:83:ee:4e:7d:32:56:22:af:3e:2d:
                    9b:84:d7:94:b3:d8:eb:f5:dc:6a:a1:e0:fc:84:a9:
                    e8:ba:93:e8:85:17:08:de:d3:1d:ae:93:a6:fe:18:
                    74:15:0b:08:ce:b3:fb:20:5a:a4:9d:e7:27:5f:a5:
                    89:60:2b:8c:13:6c:b9:57:95:69:46:a5:10:a2:6a:
                    e7:5a:49:dc:ad:43:8c:93:70:74:83:84:08:c9:31:
                    5d:99:3e:44:da:90:d0:46:9b:e5:88:57:44:f1:3e:
                    25:34:7d:b8:2c:b5:b7:62:e2:78:76:95:03:0d:2d:
                    51:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A5:10:D7:21:65:F0:36:C1:9F:3F:82:90:A9:E7:25:8C:2A:AF:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bea1e448-9370-39b3-8635-80979d3bb286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.190.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:02:27:c1:48:c0:35:0a:7e:0d:3c:b8:f4:b2:4d:b2:d9:69:
         2b:08:d4:80:89:54:f4:7b:93:61:db:cb:4d:6c:36:e4:50:a6:
         7a:75:96:98:74:5e:35:6a:cd:ae:3b:04:b4:fb:90:a2:80:c7:
         5f:1d:38:d0:fe:f1:e6:19:68:a2:ba:95:be:6a:47:82:77:ee:
         51:52:6b:10:5b:3d:4d:e6:ca:6d:35:dd:38:d2:41:91:77:50:
         76:fe:f8:b2:1e:38:a8:33:6b:1a:14:2b:43:9e:cd:11:1c:0b:
         e7:9b:cf:d4:6a:73:ac:2b:c7:52:9c:b2:65:30:16:3b:72:70:
         93:20:3e:c0:c0:1c:02:d7:50:30:c7:ec:81:6b:86:9f:77:20:
         65:8e:31:5a:30:06:20:e7:22:ff:07:5c:a8:ba:8d:e9:b1:d7:
         72:ab:8f:34:0d:a0:f7:76:0f:27:54:0b:1d:5c:87:3f:2a:6f:
         b2:04:07:59:72:6d:5c:72:3a:c2:15:1d:4d:e7:b8:f6:ec:93:
         10:e9:e1:cf:1f:21:9a:7a:b5:9b:7a:74:a7:52:eb:29:3b:9b:
         bc:01:31:41:59:e1:d7:67:26:93:41:c0:4a:4a:aa:44:fc:c2:
         a0:bd:3c:48:70:5e:07:47:7c:8c:5a:31:92:a8:8b:5f:4c:90:
         1f:61:8c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----