Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c12126b5-b447-3ccc-b491-5fc9ad7ad0ea.roa
File:                     c12126b5-b447-3ccc-b491-5fc9ad7ad0ea.roa (raw, json)
Hash identifier:          vhSvLbrNJdjlkR6rhU+M1YgvaoQSF6wQ4F6H6uPOmuE=
Subject key identifier:   7C:CC:A2:4F:71:D9:96:40:D9:0B:A9:05:62:30:B5:C4:41:DB:2E:4F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858403B3214C505E7E2F7D4C9A600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c12126b5-b447-3ccc-b491-5fc9ad7ad0ea.roa
Signing time:             Tue 13 Dec 2022 12:00:00 +0000
ROA not before:           Tue 13 Dec 2022 12:00:00 +0000
ROA not after:            Wed 18 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        137.16.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3b:32:14:c5:05:e7:e2:f7:d4:c9:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 13 12:00:00 2022 GMT
            Not After : Jan 18 05:00:00 2023 GMT
        Subject: CN=b0a38099-fe73-4d01-a677-1bb9f9ec892b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0b:66:8c:e2:a3:1d:6e:b9:00:d8:62:85:d1:
                    2a:8a:3f:e6:24:05:7c:fb:67:10:74:96:b1:23:3c:
                    5a:d5:9b:80:cd:b0:eb:69:1e:b5:67:9a:6f:d8:f8:
                    ec:33:9d:60:12:21:71:43:69:8c:fa:e3:09:ce:78:
                    6b:b7:74:1e:e3:00:93:1f:8a:97:46:9e:96:c7:30:
                    14:25:84:a4:56:48:55:b7:69:40:de:48:af:e8:2d:
                    43:2f:d6:43:27:24:c0:90:9a:9c:0e:ec:75:76:67:
                    2f:55:b1:e3:43:c7:8c:2a:77:27:c2:b1:5e:fb:ae:
                    51:1e:d1:18:cc:eb:09:f2:cc:7f:e8:ab:b7:29:c3:
                    78:66:41:f8:32:6a:a5:98:f4:88:2d:89:64:88:e1:
                    e5:33:79:cc:37:84:c9:7c:4f:0e:cb:91:d0:84:99:
                    76:79:aa:c3:c0:24:70:c4:3b:13:2a:d2:a5:3a:a7:
                    74:e4:38:38:b2:fe:fa:42:07:21:51:05:73:2a:a9:
                    d6:b5:b7:b2:32:58:9b:28:cd:17:6d:3b:28:f8:b6:
                    6f:fb:8d:66:eb:6c:7d:8c:97:42:7c:40:92:20:2c:
                    89:37:2b:b0:a7:b8:9c:5f:10:7e:07:40:34:4e:ea:
                    9d:f9:48:40:9b:c2:e8:75:a1:89:64:32:42:54:d8:
                    53:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CC:A2:4F:71:D9:96:40:D9:0B:A9:05:62:30:B5:C4:41:DB:2E:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c12126b5-b447-3ccc-b491-5fc9ad7ad0ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.16.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:16:f7:24:41:15:c8:12:5e:60:6e:80:02:da:36:93:3a:08:
         ae:fb:d5:50:4c:e5:a9:3e:49:65:3f:57:b0:b4:ab:92:b5:fa:
         3c:59:cd:91:12:ad:77:bf:9e:73:35:73:33:01:a3:ae:13:d5:
         d4:7a:9c:5e:cc:66:b6:aa:33:6f:34:96:fb:2b:e2:4c:d3:47:
         08:86:6b:44:3b:f3:75:75:5b:e2:f8:dd:e8:9c:76:fa:a7:1d:
         a5:9a:08:00:54:5e:97:54:fe:d0:c1:06:b3:e3:10:cd:45:c6:
         9a:a1:ef:8a:1f:04:3c:31:c8:7e:85:30:d2:93:e8:49:8f:b8:
         f7:45:64:04:c1:25:d2:de:cf:12:9c:05:53:04:27:5a:f1:2c:
         b8:8b:c7:18:9f:b3:58:ed:76:5a:a9:6d:7f:b1:e4:57:0a:66:
         31:09:e0:62:13:15:22:b5:d9:47:91:b5:ac:71:bd:6e:67:fb:
         5d:5a:32:7d:a5:32:32:16:0d:58:08:e2:00:64:b6:ba:4c:8a:
         da:67:8b:a6:a5:10:9e:85:d0:6b:62:99:12:d9:74:37:0e:08:
         26:e8:81:08:c2:56:d0:b9:14:06:65:25:77:f8:77:a7:5b:e4:
         6a:28:89:68:90:63:5a:a7:2c:8d:d7:dd:a0:ec:46:70:45:88:
         0a:31:8a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----