Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d021d0e0-a657-33a6-9852-2cef9c1590d1.roa
File:                     d021d0e0-a657-33a6-9852-2cef9c1590d1.roa (raw, json)
Hash identifier:          /uaGwNWZiSFzN4ip1H3obFASvhfe4rwiHqAD0NNKVQk=
Subject key identifier:   B8:B0:D9:0E:89:6A:77:1B:E0:28:18:C9:72:71:D3:7D:06:10:D6:5A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F9C273FD7A35361683BE9B7B0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d021d0e0-a657-33a6-9852-2cef9c1590d1.roa
Signing time:             Mon 17 Oct 2022 12:00:00 +0000
ROA not before:           Mon 17 Oct 2022 12:00:00 +0000
ROA not after:            Tue 22 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        151.160.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:9c:27:3f:d7:a3:53:61:68:3b:e9:b7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 17 12:00:00 2022 GMT
            Not After : Nov 22 05:00:00 2022 GMT
        Subject: CN=beb7e897-e684-4580-a337-649db4d07d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:02:23:14:fb:0f:17:bc:a0:7f:8d:de:5e:1c:
                    a3:1a:3d:87:76:1d:4e:b8:dd:e2:99:dc:6c:df:05:
                    8b:4f:74:85:50:cd:a7:bb:2b:a8:67:aa:4b:87:cd:
                    55:26:09:c2:14:f5:37:cd:88:e1:5d:58:6c:4b:a8:
                    6f:f4:48:50:49:d1:09:5a:06:6a:94:34:a2:80:a8:
                    33:65:97:f4:7c:d5:0e:6d:b6:a9:a8:cb:f1:16:ea:
                    4b:46:21:19:21:1d:15:63:f9:fe:b3:60:fe:ec:60:
                    30:d9:15:ad:1f:c3:9b:e5:3b:d1:2f:c5:4f:97:cd:
                    ad:89:f0:3d:07:1f:b6:0e:48:2b:56:0c:6a:2d:07:
                    6b:b1:b9:92:5a:44:83:a9:55:48:8b:87:9c:c5:de:
                    61:60:05:8e:b6:34:a7:06:62:38:b7:f2:5f:25:4a:
                    4a:cd:37:3d:27:1d:59:3c:a0:6e:51:88:41:00:ec:
                    c9:b8:f8:35:ac:92:d5:6c:a7:9f:d8:f8:b6:17:41:
                    d2:04:44:a5:1a:52:ce:fe:e3:31:7d:db:0b:f0:52:
                    7e:8a:2b:b4:e0:66:11:6f:9e:82:3f:05:32:9a:67:
                    03:80:fa:b4:7c:90:43:82:cf:98:70:97:6a:74:18:
                    d3:8f:60:53:c8:2c:ae:3b:93:02:eb:b9:dc:3b:8b:
                    a4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B0:D9:0E:89:6A:77:1B:E0:28:18:C9:72:71:D3:7D:06:10:D6:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d021d0e0-a657-33a6-9852-2cef9c1590d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.160.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:73:b4:54:8f:78:3e:54:67:7a:b7:99:37:51:b7:82:e9:83:
         ad:85:5f:7f:05:77:ec:27:73:2b:84:f4:3e:0c:d9:52:2e:f3:
         25:32:14:ef:6a:f0:73:fe:43:ee:23:42:89:3f:c5:92:a5:10:
         54:e4:78:ab:aa:fb:c2:69:b0:88:85:d2:0f:c8:34:1f:f7:45:
         db:1b:9f:80:db:a5:03:17:ab:8c:33:bf:70:40:a4:6a:1e:e1:
         18:ff:62:67:3b:12:87:34:d1:b9:3c:fa:27:51:b6:02:d2:6d:
         33:93:9e:25:71:d7:f2:df:23:c5:d0:74:2f:e7:5d:fb:18:e9:
         b3:c8:f1:71:a0:c2:b2:5b:4b:dc:f4:e5:dc:f1:a3:b6:fc:52:
         aa:b1:0f:b5:1e:9e:26:cb:64:b4:d3:c7:2e:52:d2:5a:95:2e:
         2c:85:0a:c4:48:b2:c8:73:bb:a9:49:99:be:62:7c:d7:b8:dc:
         3f:22:a9:53:75:5c:0e:bd:f3:68:41:d1:40:35:33:6b:bf:7b:
         23:4e:60:5a:af:46:dc:91:25:67:e9:67:db:e5:6c:0e:01:76:
         59:43:5e:f7:40:55:27:25:e5:4c:bf:87:fe:5e:e9:01:89:de:
         76:08:70:27:03:04:3c:b7:b4:cb:4c:12:5e:8d:68:86:1a:2f:
         06:6d:db:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----