Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c936f2dd-e9a7-3666-9618-e947e8b4c417.roa
File:                     c936f2dd-e9a7-3666-9618-e947e8b4c417.roa (raw, json)
Hash identifier:          E4oI+7eIhH5MM1pI6PxWF2y65FlNPt9avnE1WW7LD9k=
Subject key identifier:   E1:E9:97:AD:6F:03:D9:2D:1A:23:35:E9:CF:37:41:5C:E5:C9:9B:34
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E934251AF256F5680B6762400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c936f2dd-e9a7-3666-9618-e947e8b4c417.roa
Signing time:             Thu 14 Jul 2022 21:12:08 +0000
ROA not before:           Thu 14 Jul 2022 21:12:08 +0000
ROA not after:            Fri 19 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        99.151.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:93:42:51:af:25:6f:56:80:b6:76:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 14 21:12:08 2022 GMT
            Not After : Aug 19 04:00:00 2022 GMT
        Subject: CN=65cce057-f609-45b8-934b-c91c81ad1bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fa:80:14:1f:1f:3e:f5:5a:50:ea:aa:22:0b:
                    5e:1a:8a:13:7e:af:4c:7e:50:58:e7:d2:3e:d2:7f:
                    84:a3:2d:90:e5:58:6e:57:95:24:e5:12:f0:91:6a:
                    cb:4b:dc:17:29:dd:bf:7b:cd:50:4d:e9:43:fc:c3:
                    82:77:a2:13:a9:e1:24:cb:46:dd:d9:91:de:78:af:
                    09:78:58:01:b9:47:9c:d7:d8:6e:f4:3c:39:6b:42:
                    70:7e:46:1b:48:fc:2c:1c:5c:f0:05:af:e0:27:bd:
                    ef:d3:54:ed:27:e8:44:10:b1:5e:35:9c:8b:88:bb:
                    be:19:40:a8:3b:16:fd:bf:ff:21:ac:67:a8:13:82:
                    6f:01:cb:5c:47:70:20:4a:df:d9:cc:b6:f4:1b:25:
                    33:17:b5:41:7a:fc:1d:2f:c9:13:40:b0:d1:2b:c1:
                    c3:4c:c5:08:11:e7:1d:9b:0d:da:c1:2b:c1:fa:96:
                    58:91:7a:d7:9a:ba:90:68:7e:81:14:88:48:e1:24:
                    2c:2b:3b:44:51:2f:6d:b3:3a:f8:fa:3b:c1:03:2d:
                    d6:b2:aa:c8:47:10:57:42:03:50:45:1b:c1:ea:5b:
                    16:43:75:83:98:28:f5:10:74:8e:0c:f6:aa:5d:af:
                    0a:3e:d0:16:36:9c:f5:17:44:84:86:bd:65:4f:2a:
                    d3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E9:97:AD:6F:03:D9:2D:1A:23:35:E9:CF:37:41:5C:E5:C9:9B:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c936f2dd-e9a7-3666-9618-e947e8b4c417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:60:bd:16:06:d3:b8:7c:aa:44:97:8e:c0:d1:97:07:9b:00:
         92:51:28:64:ae:cf:54:c2:ec:44:e8:8e:6c:09:b8:23:db:24:
         b1:cb:86:da:97:32:84:15:a2:1c:fb:ac:d5:dc:0d:a7:02:46:
         58:91:6a:3d:3a:4c:1b:16:b5:08:a6:bc:33:3d:e9:cc:46:a2:
         df:4a:14:6e:74:df:80:a2:7c:73:5a:70:c8:0e:38:d5:3a:8e:
         f6:aa:11:f1:7a:5d:3e:4d:48:1c:f0:86:aa:73:b5:0d:a8:50:
         7d:83:e9:e3:e4:9d:d9:1e:74:72:3e:a8:8a:a7:15:37:99:25:
         6b:05:b8:20:57:f8:46:97:c8:54:3f:4e:9a:ee:7b:b3:25:21:
         b5:8a:1e:52:ba:ce:3c:7c:c7:ec:b6:02:ea:ea:24:f2:6a:a7:
         19:fc:fa:94:a5:34:c5:1a:96:3d:4a:72:0c:5a:82:fe:c6:c3:
         19:bb:9a:1a:55:67:eb:39:29:2b:a8:0d:ca:9a:30:26:ca:47:
         c5:5c:9e:1c:c0:80:39:5e:c8:74:25:89:8a:b2:dd:76:da:f0:
         1b:9b:08:66:70:74:e9:c7:b0:37:79:38:da:a9:e9:de:56:15:
         0a:27:7b:22:81:78:e1:b6:db:d8:a7:44:6f:7f:c4:b0:97:26:
         45:43:5a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----