Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9bc5e7b-b730-3d71-9b7e-9d44842410fb.roa
File:                     d9bc5e7b-b730-3d71-9b7e-9d44842410fb.roa (raw, json)
Hash identifier:          LOvdFe148QxO/dt6wrktSVoP1O4yjpU0vXghI9Uz5dc=
Subject key identifier:   B4:26:9E:58:0E:C1:76:B4:04:BC:4E:2B:26:23:75:BE:3A:64:DA:35
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DF7DA2F84C55DEB4FE27212C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9bc5e7b-b730-3d71-9b7e-9d44842410fb.roa
Signing time:             Thu 19 May 2022 12:00:00 +0000
ROA not before:           Thu 19 May 2022 12:00:00 +0000
ROA not after:            Fri 24 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        54.43.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f7:da:2f:84:c5:5d:eb:4f:e2:72:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 19 12:00:00 2022 GMT
            Not After : Jun 24 04:00:00 2022 GMT
        Subject: CN=8d554722-07e1-4ded-9760-8b75ba40ea45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:24:bb:6a:ef:cd:0f:05:38:09:f8:b5:cb:2a:
                    81:72:c3:d3:c0:16:48:4b:b8:b8:ca:7b:11:69:76:
                    90:eb:99:fa:b1:3e:05:1f:df:69:84:b0:25:45:4d:
                    1e:d6:a9:b2:bc:01:75:b0:4b:69:48:f6:f3:f6:7f:
                    d5:68:af:c0:95:0c:8a:02:86:34:72:9e:87:cd:d9:
                    f8:6b:4e:09:1e:02:b2:24:ca:13:3b:bc:c3:bc:f4:
                    4c:8c:6a:d3:44:3c:5f:e2:3f:0e:3e:ff:ad:ca:53:
                    0f:88:ff:43:6a:30:40:ba:37:bd:1c:39:bd:e4:73:
                    53:b4:df:7c:3a:bc:98:a9:3a:54:6f:a1:84:34:73:
                    c5:72:4c:db:2a:c8:67:c4:79:8a:4a:e5:c8:8b:f3:
                    6d:4b:2e:06:be:6d:8e:4e:21:b7:b5:81:ae:2e:4a:
                    a2:2c:5f:e9:01:9d:75:39:ca:b4:98:34:d7:27:1e:
                    d6:37:df:bc:8e:37:be:1f:7e:ca:3c:37:8d:60:0a:
                    b3:a6:bc:a0:5f:dd:43:52:55:2f:24:9b:5e:09:55:
                    c2:89:cf:59:d2:23:17:c9:50:85:e8:b4:36:38:5d:
                    fd:c7:c3:7c:b2:d4:e8:f6:b8:d6:1a:a5:5b:85:60:
                    5c:c6:66:b5:e6:d1:9d:7a:12:4c:9d:75:f7:08:75:
                    e2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:26:9E:58:0E:C1:76:B4:04:BC:4E:2B:26:23:75:BE:3A:64:DA:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9bc5e7b-b730-3d71-9b7e-9d44842410fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.43.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:43:62:4a:8e:b8:fe:10:18:a9:82:73:a8:b9:5e:82:8a:79:
         75:53:bf:17:41:b5:79:b5:98:75:b1:7d:5c:0b:d2:d7:5e:36:
         c3:fb:38:fb:be:31:2d:c2:73:17:de:94:b2:cf:52:27:41:7a:
         4d:60:2f:1f:7d:8b:d8:f3:72:00:1a:42:05:dc:0e:f8:21:73:
         a1:b5:5a:1a:0e:3e:c8:47:25:16:19:4b:00:5c:cf:8b:a4:b5:
         d9:26:3c:81:d4:92:e7:09:ae:04:2f:60:1b:bb:bd:65:28:5c:
         8e:ac:86:fc:77:6c:bf:25:cd:d7:46:d9:d8:83:ae:1b:b0:bb:
         55:44:1b:55:b5:c8:c6:c1:d0:f1:79:85:ab:67:8c:cb:32:0b:
         08:9f:47:a9:89:79:57:bc:a6:f8:06:b6:26:08:34:2d:af:0d:
         36:3f:df:52:4c:71:f5:25:13:ad:af:e5:f1:f3:d6:0f:98:2b:
         b9:d4:5f:22:26:56:9b:d5:02:1b:9d:2f:fc:fd:f3:b3:09:b6:
         e1:d4:0d:a9:00:a1:69:bc:3c:31:18:d3:d0:48:f0:79:e4:0f:
         31:09:87:3d:d6:3b:84:b3:04:1f:ff:36:f1:9a:ab:11:d3:e2:
         06:8b:49:02:65:77:7e:5b:6d:26:0d:cb:65:58:83:72:53:d3:
         a7:01:45:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----