Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de70e60a-9a6c-3208-9199-16a9065f984b.roa
File:                     de70e60a-9a6c-3208-9199-16a9065f984b.roa (raw, json)
Hash identifier:          XmoSCvncI8j/1GpwMGYRgG3vUlPgsq4cR/UNU5DIFHA=
Subject key identifier:   B3:36:15:11:9D:D6:F0:0D:6E:8B:73:49:1A:BB:EE:AA:B0:92:3C:7B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF2A3D531B8BCE2C3D26BC580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de70e60a-9a6c-3208-9199-16a9065f984b.roa
Signing time:             Thu 17 Nov 2022 12:00:00 +0000
ROA not before:           Thu 17 Nov 2022 12:00:00 +0000
ROA not after:            Fri 23 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        16.93.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f2:a3:d5:31:b8:bc:e2:c3:d2:6b:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 17 12:00:00 2022 GMT
            Not After : Dec 23 05:00:00 2022 GMT
        Subject: CN=54949cc8-e542-4934-868e-ca32bcd9b78f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d7:88:f7:4f:95:b6:de:b4:ee:d1:e7:5c:90:
                    e8:66:81:ef:ea:fb:60:62:71:74:5c:dc:5e:6b:ca:
                    55:1b:57:36:fa:27:d1:cb:d9:f1:06:20:fd:6b:86:
                    83:d0:26:fe:5d:9f:f6:f5:e6:7c:87:42:92:26:57:
                    c6:c7:ef:c8:b7:b0:f9:e6:fe:2b:4e:b8:5c:95:2c:
                    ad:fd:ab:71:4a:eb:25:59:92:cd:7a:fc:e2:2a:7a:
                    b3:7e:05:99:e7:a1:9e:33:2c:97:01:99:bc:ad:35:
                    08:5a:db:e2:dd:00:54:14:3e:95:46:7d:f6:4b:e3:
                    61:ba:7d:af:70:7e:93:68:7a:06:eb:df:bd:a8:a6:
                    df:67:f6:51:e2:88:8a:d4:ac:d0:e5:5d:63:c8:72:
                    de:5f:66:84:fc:2d:dd:4a:56:24:77:7c:6a:f3:ff:
                    27:f5:20:92:79:58:49:28:18:97:a0:b0:6d:99:cc:
                    d9:20:57:5a:ec:9b:28:29:87:49:1c:71:07:61:de:
                    20:9a:fe:fe:b3:22:26:e4:81:5b:5a:c3:0d:65:ca:
                    6e:80:6f:bb:be:94:5f:78:23:50:45:da:fd:86:79:
                    53:15:1f:23:f8:17:3a:01:95:31:4b:93:8c:1b:07:
                    bd:84:fb:f7:c0:84:dc:f1:03:38:bb:0f:61:da:c5:
                    1e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:36:15:11:9D:D6:F0:0D:6E:8B:73:49:1A:BB:EE:AA:B0:92:3C:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de70e60a-9a6c-3208-9199-16a9065f984b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.93.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:a9:82:2d:90:fc:f4:55:34:ba:e6:67:9b:28:cc:3c:8f:c2:
         86:90:c1:ca:db:39:80:ba:3e:a5:04:4f:06:8e:49:82:45:cd:
         21:fd:11:18:e5:e1:3b:14:73:a4:f8:47:47:ff:f0:43:ab:9e:
         f0:cb:6d:38:1d:d1:3f:e1:be:a0:32:39:c6:8a:ce:53:f5:08:
         6a:27:71:9d:9e:b4:f6:37:15:8c:c2:70:9e:8f:23:b2:3c:35:
         50:3b:91:f5:2b:ca:37:59:68:64:8c:68:3b:6a:1e:07:ca:f4:
         f0:87:3e:4e:f9:81:59:99:4f:d5:c0:82:d2:ed:2e:2f:00:00:
         aa:7c:a7:76:cf:2b:e2:d0:25:08:f5:44:97:b2:d7:10:db:cf:
         06:4a:db:05:a0:56:87:1b:67:55:ba:76:c6:a1:02:b0:a9:e4:
         18:33:da:51:88:60:e5:10:62:87:fe:6d:99:38:58:b9:44:ed:
         bd:16:40:f5:e5:18:a1:d6:e7:51:d1:47:85:cf:47:3f:6e:f8:
         96:8f:4d:74:e3:4f:ca:cb:93:f2:bd:aa:8f:26:28:c4:65:7e:
         39:26:e9:8c:69:0f:ce:40:22:d0:ad:1c:69:86:92:ad:3f:4a:
         3b:f4:c1:7c:8f:5c:86:16:f2:32:f3:7d:c5:99:0f:7c:ac:9c:
         b2:9f:b3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----