Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cc53456d-3a79-38ea-b69c-ca547269c50c.roa
File:                     cc53456d-3a79-38ea-b69c-ca547269c50c.roa (raw, json)
Hash identifier:          sOFlXQgPAV1+3yQP1fQ32JPHnUbY+xmSw0l821kcmXE=
Subject key identifier:   B4:F2:44:EB:BD:0A:A4:EC:74:8A:32:95:6D:D2:6F:81:B2:77:96:61
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CEF29E733532EF6513B875000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cc53456d-3a79-38ea-b69c-ca547269c50c.roa
Signing time:             Tue 15 Feb 2022 05:00:00 +0000
ROA not before:           Tue 15 Feb 2022 05:00:00 +0000
ROA not after:            Tue 22 Mar 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.88.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:ef:29:e7:33:53:2e:f6:51:3b:87:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 15 05:00:00 2022 GMT
            Not After : Mar 22 04:00:00 2022 GMT
        Subject: CN=ae2e27a0-c05b-440a-96d5-9bbf935a3113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ef:82:84:fc:26:df:03:32:6b:c2:02:7c:6b:
                    03:43:00:48:77:bd:e1:53:58:64:fe:8f:23:ab:c7:
                    29:09:9a:13:b1:3d:31:32:6e:26:76:72:3a:e0:6c:
                    b1:0f:3e:f6:0b:a0:2a:78:8e:41:35:84:2e:88:34:
                    d1:6c:ba:92:c8:76:8c:3a:35:a8:2d:c7:ed:93:af:
                    f3:b7:8f:e6:ee:f9:f0:bc:36:91:ca:e1:ba:e1:3e:
                    fd:86:03:f8:cb:7f:3e:59:85:51:44:6b:cc:cf:ec:
                    5e:a9:be:01:70:84:cb:6b:88:24:e0:f3:b0:01:42:
                    50:7a:73:ea:92:57:4b:ed:05:55:c0:7a:5a:a0:f1:
                    b8:91:16:0e:e5:25:b1:18:db:c4:51:89:92:ee:db:
                    9a:ca:3c:46:4b:2d:23:33:03:0b:ef:c1:38:e2:4d:
                    fc:a5:88:d0:01:4d:d2:89:9e:62:6f:3c:64:98:ed:
                    cb:96:27:57:04:62:51:31:0a:c1:13:88:e0:3a:df:
                    8d:2a:66:86:5a:82:b7:12:82:2f:3d:3c:4e:71:e7:
                    ae:f8:95:af:49:a9:54:54:de:b0:1d:7d:e1:80:16:
                    81:25:48:09:88:54:fd:6c:a0:bb:e4:2a:50:82:53:
                    87:ec:9e:ca:9c:11:3f:98:da:d8:6c:36:17:41:ed:
                    ea:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F2:44:EB:BD:0A:A4:EC:74:8A:32:95:6D:D2:6F:81:B2:77:96:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cc53456d-3a79-38ea-b69c-ca547269c50c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.88.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:74:15:94:00:8c:37:a0:c7:ba:11:46:df:30:92:5b:ba:fa:
         10:ca:ac:d3:2a:a1:fe:20:7a:e8:ef:b8:2b:0d:0b:78:f7:7e:
         f2:4a:dd:05:e2:07:c7:c2:cd:d0:6d:32:67:a6:10:5d:27:fc:
         e5:2b:6c:b9:05:74:0a:6c:6b:87:c8:31:16:e2:80:6a:3b:a7:
         fc:9e:1b:0f:bd:a2:c1:c4:9f:7f:e1:4e:74:ba:f9:62:28:05:
         e9:cc:e1:71:a4:fc:8d:1f:d6:92:a9:79:8f:1e:ea:34:c2:86:
         b1:0c:fc:c0:3d:ce:6f:3d:41:2b:a6:2f:41:35:71:1e:fe:05:
         6b:84:36:ea:8a:f9:bc:c2:b6:b4:d3:53:ce:ab:d7:bf:24:b0:
         b7:f7:c0:12:bd:e2:a0:07:63:7b:95:49:f4:7a:3c:97:3e:9d:
         5c:87:f8:ec:fd:f5:00:69:bd:4c:f3:63:bf:bf:81:0b:bd:2a:
         ad:b2:10:f9:d6:cc:b6:64:b0:35:a1:29:ad:53:5e:9e:60:10:
         f5:f9:27:77:12:33:0d:6b:b1:8f:83:f0:e4:d3:10:09:eb:9b:
         b2:14:c1:2e:f0:df:15:be:0a:10:0d:d9:7d:ed:31:0c:14:a8:
         37:0e:c0:1a:ce:ec:1c:ac:1c:1e:11:27:65:c7:85:41:25:ca:
         b8:39:b3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----