Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e2b855ba-4211-306e-990e-3dacc2adf44f.roa
File:                     e2b855ba-4211-306e-990e-3dacc2adf44f.roa (raw, json)
Hash identifier:          4gyutSvghkJJjK+PEUO9NE3i34gKxIypIBZVrDRynDw=
Subject key identifier:   0A:C6:E8:7A:CE:FB:9A:24:34:45:18:06:63:F4:BD:13:BA:21:A4:E9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584065B6341D30E987CEFA699800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e2b855ba-4211-306e-990e-3dacc2adf44f.roa
Signing time:             Wed 28 Dec 2022 12:00:00 +0000
ROA not before:           Wed 28 Dec 2022 12:00:00 +0000
ROA not after:            Thu 02 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        16.129.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:65:b6:34:1d:30:e9:87:ce:fa:69:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 28 12:00:00 2022 GMT
            Not After : Feb  2 05:00:00 2023 GMT
        Subject: CN=b7a1766e-a394-4312-b1ae-df3a4193bf44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1e:14:b4:14:39:12:d4:82:7d:57:da:b7:d4:
                    cc:29:e3:3c:44:68:3b:8c:d7:15:1a:32:b3:05:0b:
                    68:5c:55:fe:23:75:d8:5d:30:0e:2c:e5:f2:b4:ed:
                    b3:ae:ca:5b:cf:28:dc:fe:d5:69:c2:14:c6:3f:38:
                    8d:42:33:6a:c0:b4:d8:b5:5f:6b:a8:3f:ae:bb:0b:
                    aa:0d:dd:18:7d:aa:54:f1:b5:57:4b:d8:8c:df:46:
                    c8:0c:45:06:a5:8b:49:0e:4a:ff:d1:8f:b8:47:fc:
                    35:e3:67:74:e9:71:63:c8:65:8a:b8:c0:6d:ae:b3:
                    28:1f:85:36:b1:4d:80:52:d6:6d:0e:5e:d8:d0:4a:
                    eb:a7:8e:c8:dc:03:02:eb:65:b0:de:78:3e:c3:a0:
                    d1:4c:60:7e:45:31:ce:f0:0d:07:3f:09:b7:06:23:
                    94:4a:59:bd:55:ba:c1:e4:05:76:e8:99:f0:d4:92:
                    fb:7e:26:6c:5e:20:99:d6:3c:cd:82:35:63:3a:3b:
                    4d:78:3d:f3:ea:7d:29:a2:d7:3d:1d:85:1c:38:73:
                    75:6d:4a:ca:21:14:ae:18:68:2d:dd:9f:aa:ff:2b:
                    b7:a9:f0:c1:28:b4:00:46:0b:97:43:cb:14:14:55:
                    ee:81:ee:7d:d8:2a:2c:a3:73:29:9f:e9:71:ba:54:
                    25:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C6:E8:7A:CE:FB:9A:24:34:45:18:06:63:F4:BD:13:BA:21:A4:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e2b855ba-4211-306e-990e-3dacc2adf44f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.129.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:4b:5b:9c:24:9b:3a:25:cb:08:76:77:34:be:88:cc:7c:5f:
         66:9c:fe:51:79:f8:ed:ac:fa:e0:23:39:c2:25:90:a3:09:89:
         10:6b:fa:b4:89:fb:35:a0:e9:80:ad:26:87:e2:86:77:bb:92:
         ab:f0:35:07:1b:73:de:a0:06:fd:9e:03:8e:db:c9:87:73:8b:
         03:e3:b7:c4:51:e6:1a:1a:ca:60:ba:66:0a:7c:b0:a0:44:41:
         d9:71:e2:0b:a2:e9:f3:5c:5f:90:b7:9b:48:e6:52:b1:b0:59:
         17:67:fb:d4:49:84:93:de:90:59:34:a4:1b:f2:9b:49:e4:5a:
         b8:23:e9:a2:31:3c:fc:19:94:e2:1c:63:4a:43:fb:38:09:a0:
         1c:2d:3e:2d:8b:f3:6b:b7:7c:bc:7a:6c:cc:ba:57:64:21:9d:
         97:04:28:18:d3:a8:42:55:9f:6f:ba:ec:95:34:e7:32:d6:d8:
         5b:fc:07:03:e9:9f:e9:41:7d:64:3d:cc:6f:19:e2:61:48:68:
         4e:56:89:e4:e0:64:14:08:9d:54:eb:eb:61:22:b3:7c:ff:b5:
         12:26:92:9f:e2:84:ce:d3:64:92:b9:3f:27:be:f7:67:01:59:
         02:07:27:bf:99:00:06:d9:ce:1c:8c:32:c8:f1:bd:ab:7d:1e:
         df:32:48:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----