Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ce830190-0a89-3717-83c3-87f1dcebdfbc.roa
File:                     ce830190-0a89-3717-83c3-87f1dcebdfbc.roa (raw, json)
Hash identifier:          wLk+fxPc5OYpbHkswaV8/KXMedvXyf30vPpAUdcWbBQ=
Subject key identifier:   35:F8:EC:00:D6:66:88:DF:5B:52:C8:1F:63:64:54:C9:0E:43:E4:D1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DAB75111B5B9AD7C6E6FCFD00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ce830190-0a89-3717-83c3-87f1dcebdfbc.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        63.32.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ab:75:11:1b:5b:9a:d7:c6:e6:fc:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=d04aeb12-6895-4591-a09b-213ee9994915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:80:a1:df:61:fc:35:19:14:ff:d8:45:c7:8c:
                    d8:10:26:f1:15:7b:ac:96:19:8a:f6:97:17:40:ae:
                    48:27:5b:10:a4:a9:2e:06:1b:00:1c:f4:ce:44:20:
                    95:de:d2:7b:65:64:18:16:49:01:8f:2f:91:42:86:
                    a5:b4:46:3b:5f:62:2d:88:e6:8b:ca:9f:87:40:0c:
                    9b:bf:c4:49:74:aa:aa:80:1f:6a:f4:f0:79:53:a2:
                    ab:71:5d:02:0a:50:26:54:39:e2:f1:72:35:11:a4:
                    84:f6:b5:5e:93:ae:1c:2e:65:ca:3e:e5:b6:47:6d:
                    24:47:75:05:4f:8a:f4:62:c5:a2:07:d6:34:9d:02:
                    7c:2f:43:d1:f7:e5:7c:81:ae:fa:39:f8:b5:85:a5:
                    42:f5:e7:24:6d:65:44:86:81:fe:ee:46:0c:d3:07:
                    29:25:cb:d5:8d:a3:f5:ea:40:57:33:b6:8c:4c:ca:
                    99:97:67:2e:ea:07:a3:fb:9f:cb:be:31:8b:94:35:
                    5a:3d:69:9b:47:7e:7a:3c:7e:58:dc:4d:3a:4c:19:
                    71:b5:0f:e3:fa:3a:0a:eb:97:8f:e9:ba:de:61:56:
                    68:a0:b1:ff:e0:45:26:02:e2:b2:53:62:36:e2:5c:
                    1f:ce:20:91:12:94:15:7f:e3:6d:bb:a6:e6:5b:22:
                    1a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F8:EC:00:D6:66:88:DF:5B:52:C8:1F:63:64:54:C9:0E:43:E4:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ce830190-0a89-3717-83c3-87f1dcebdfbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.32.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:5e:c8:ae:e2:8f:4b:97:e1:0d:28:ba:0f:bb:ef:62:e7:0d:
         e9:f1:0d:a9:35:0c:17:87:a9:98:fd:a8:fd:e4:e7:90:49:1f:
         6e:1d:a4:ce:8a:a3:4b:2e:28:31:1b:df:f2:92:54:28:1f:47:
         c5:9e:dd:c2:f9:34:25:b4:1f:8c:30:7c:3b:32:87:a3:8b:6b:
         d8:a0:8f:7b:c0:2d:33:c4:14:db:f6:c2:41:5c:d7:6d:2a:a6:
         08:fd:1e:31:56:90:c9:03:2a:a7:5b:5d:a8:7e:fb:17:61:71:
         b2:6a:8d:b7:ff:18:06:86:4b:d6:94:a2:1f:ed:bd:0d:09:4a:
         15:68:0e:a3:97:d3:93:f7:14:28:d9:56:59:07:7d:7a:4f:04:
         b0:ce:24:59:90:a5:cd:b9:54:c7:5d:4a:59:96:c6:d4:a5:6f:
         7e:c9:43:ea:96:1f:91:4d:20:99:c0:e2:3c:f6:2f:84:79:2b:
         91:75:54:51:47:8f:6a:7c:84:57:a1:ac:b4:04:e7:c9:da:a3:
         da:6b:e6:80:ae:56:94:2b:61:bf:aa:79:b1:b5:37:c9:29:cc:
         4c:dd:cc:eb:89:5e:da:9f:46:a2:75:98:10:e3:8a:ac:4c:97:
         80:53:64:fe:23:8c:fb:71:fe:99:f8:47:5f:0b:c3:d3:f1:5b:
         15:d1:d7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----