Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df7f0c44-88f3-3659-9339-912b96007171.roa
File:                     df7f0c44-88f3-3659-9339-912b96007171.roa (raw, json)
Hash identifier:          TtS6qw1NkBFmGI0G6FLf5Aq1ZYAuZit6q2iwupN1IWA=
Subject key identifier:   9E:04:2B:EE:ED:78:BF:60:74:A4:8A:AD:98:78:44:C2:D1:3D:C0:41
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EB171F183FCE91F6C24B0BE80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df7f0c44-88f3-3659-9339-912b96007171.roa
Signing time:             Mon 25 Jul 2022 17:39:07 +0000
ROA not before:           Mon 25 Jul 2022 17:39:07 +0000
ROA not after:            Tue 30 Aug 2022 04:00:00 +0000
asID:                     7224
IP address blocks:        162.221.160.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b1:71:f1:83:fc:e9:1f:6c:24:b0:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 25 17:39:07 2022 GMT
            Not After : Aug 30 04:00:00 2022 GMT
        Subject: CN=b89bf1d1-219e-4792-8c63-5d63c7965115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e8:b2:2f:1c:91:5a:d0:c2:da:52:13:9d:2f:
                    ea:47:d5:bb:93:e9:ef:88:da:1c:d0:e3:4d:8f:76:
                    24:90:a3:7f:e2:6e:e4:e6:fa:8d:75:c8:65:92:ed:
                    f6:a3:fd:33:3f:e2:1b:c3:e3:6b:54:ac:72:59:39:
                    dc:90:ae:2b:82:b6:52:62:b7:69:4f:e1:51:0a:fe:
                    47:e1:24:30:65:af:e9:87:1e:26:a4:2e:ea:9c:c7:
                    80:c0:d3:73:08:84:ca:bc:6a:3e:83:14:a7:ac:ef:
                    a9:6d:21:d9:b5:0c:0f:dc:31:15:23:a5:60:76:3a:
                    42:f0:b0:c1:1c:e7:88:6a:d2:11:0c:5b:71:86:26:
                    2e:bb:c0:60:f7:8f:35:41:f2:d8:90:70:85:36:0c:
                    71:16:f1:d1:8f:4a:67:4d:10:b7:35:f3:d0:df:aa:
                    5c:59:98:92:e3:4f:c5:d8:c3:53:9d:a4:e7:8c:e8:
                    3e:fe:17:b6:1c:b3:cb:bd:73:8a:f0:83:b8:e1:c1:
                    f3:6f:b4:3a:47:e7:76:93:c0:fc:6d:38:aa:a5:af:
                    54:7c:18:91:10:e6:dd:4f:17:9c:ac:35:fd:19:de:
                    31:36:6e:38:fa:66:df:c7:b9:5c:a9:2d:62:5c:e5:
                    de:17:63:56:99:7e:0e:42:27:d8:77:b3:a4:86:82:
                    fd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:04:2B:EE:ED:78:BF:60:74:A4:8A:AD:98:78:44:C2:D1:3D:C0:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df7f0c44-88f3-3659-9339-912b96007171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:79:58:a3:ed:2d:ac:35:06:1b:bc:8f:aa:df:94:fc:84:0b:
         4b:a2:16:f9:de:34:6b:13:de:16:e4:bf:3a:0a:c3:d1:91:3e:
         3d:f2:8e:95:8b:a5:98:74:8b:b9:af:6a:f0:58:3b:3c:cc:c2:
         9b:76:79:1a:5b:79:25:9d:14:38:3e:53:e4:db:28:fb:a8:11:
         1d:73:43:02:bf:84:3a:80:2d:32:75:bf:3d:15:34:8d:dd:b7:
         50:83:c8:50:a6:97:4f:4b:4c:a5:80:7e:3c:0e:40:16:ff:9a:
         28:a0:bf:c6:ab:c3:e5:ff:50:d3:8e:7a:62:e3:80:10:e8:0f:
         b8:27:f7:ec:8a:24:5e:e0:0d:45:5e:80:02:e9:d5:9e:d5:76:
         dd:13:93:28:7f:eb:71:ed:c8:e2:cd:12:98:ff:34:bb:15:2e:
         e1:76:46:d4:5c:d0:3b:7b:1b:25:cb:f3:f5:18:56:94:cc:73:
         e6:9b:88:76:0b:46:31:91:f7:dc:75:d4:36:aa:f5:23:c1:e6:
         48:df:2b:3b:68:cb:ca:77:4f:d0:32:f9:f2:42:84:6c:38:a7:
         27:22:af:fc:71:53:73:25:31:ed:2c:cd:6f:c5:fe:74:40:d3:
         6f:92:fb:7a:a1:aa:7e:b8:39:08:e4:64:e7:2c:d6:06:28:f1:
         e1:27:f4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----