Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e5954f22-83b2-3894-9a2c-32571a4c7b39.roa
File:                     e5954f22-83b2-3894-9a2c-32571a4c7b39.roa (raw, json)
Hash identifier:          sck1HsRWkPCsWWHRInbpGTFDYJBVFwwWpau8NpThkmk=
Subject key identifier:   B6:B3:A6:81:0D:62:6B:13:32:4C:9A:2C:1E:4E:A2:50:F1:F7:07:FB
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B4068948EDFC07F75BD29300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e5954f22-83b2-3894-9a2c-32571a4c7b39.roa
Signing time:             Thu 26 Jan 2023 15:12:07 +0000
ROA not before:           Thu 26 Jan 2023 15:12:07 +0000
ROA not after:            Thu 02 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        16.62.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b4:06:89:48:ed:fc:07:f7:5b:d2:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 26 15:12:07 2023 GMT
            Not After : Mar  2 05:00:00 2023 GMT
        Subject: CN=7d6c53f7-b589-4345-863a-dfc347c86169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a1:90:50:75:02:ce:a4:d5:a6:8a:9a:40:b3:
                    e7:d0:4d:e9:2d:de:5e:89:6f:72:4a:72:b9:b0:55:
                    e8:fb:32:d2:db:37:5e:ba:bd:5f:56:9f:85:1e:3d:
                    12:07:b9:50:24:4e:58:80:79:4b:e7:91:51:65:c2:
                    46:82:18:d5:b6:d5:2b:03:3d:0f:f9:68:48:3f:ba:
                    f1:f7:7e:0d:56:95:b5:13:85:60:50:41:56:c1:05:
                    0a:92:82:ab:d0:78:d4:bd:e9:e1:c4:76:a5:2b:04:
                    c8:a1:83:13:24:ae:d0:f9:60:16:f1:91:b5:f9:c4:
                    3d:09:f2:08:08:bb:a2:7d:5e:ba:43:fb:9e:91:29:
                    b5:3b:a3:e4:0c:6f:7a:13:aa:c5:02:00:36:33:41:
                    ea:af:8c:63:9f:cd:f0:d8:7a:64:f7:e0:09:1c:51:
                    ad:66:4b:36:d8:85:25:98:c0:76:a9:0b:5a:27:e1:
                    f0:e2:74:5b:a8:93:4c:f6:4b:9a:ec:88:02:4d:11:
                    d4:fe:c6:16:f4:27:68:78:a1:c0:1e:bf:9d:c4:6c:
                    53:f7:fb:c5:01:c4:f7:68:e9:f2:47:5f:11:50:c9:
                    d3:85:fa:3c:a7:95:fc:80:79:ad:cf:ea:d3:7a:22:
                    ca:8d:09:c9:67:99:42:6b:ca:be:a1:e7:84:0b:50:
                    70:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B3:A6:81:0D:62:6B:13:32:4C:9A:2C:1E:4E:A2:50:F1:F7:07:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e5954f22-83b2-3894-9a2c-32571a4c7b39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.62.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:e3:3f:d7:07:a8:df:33:c3:a6:03:7a:99:33:35:1d:d7:dc:
         21:8c:c8:26:55:6c:07:86:76:67:4f:9b:b7:9b:61:bb:60:51:
         38:80:70:bc:14:d3:33:7f:86:33:70:77:38:ba:08:bd:01:41:
         a9:aa:8c:5f:be:a2:38:8c:e8:3c:60:db:32:c0:11:8b:4a:31:
         02:49:02:cf:cf:61:9e:d3:fd:f1:15:c6:1a:06:60:3e:c2:a0:
         35:a4:cf:aa:57:0c:71:46:45:57:57:54:ac:6f:78:6e:b8:d6:
         62:9b:1a:a3:ad:92:38:b3:a8:5c:21:d8:54:82:6b:59:70:9a:
         9d:86:49:7a:6a:72:7c:d4:bb:e2:25:b4:7d:09:25:f8:26:44:
         2e:ee:a0:02:37:2f:d2:05:cf:bc:5a:c7:42:c0:ea:04:5e:ba:
         fc:e2:38:2b:c7:e0:9a:6b:82:83:c0:a1:14:d1:eb:df:57:81:
         cd:9b:f6:71:c4:6e:2f:c2:d9:aa:f6:e9:c5:ff:04:ad:ea:57:
         1a:80:a6:12:28:89:98:e6:bc:e0:94:c3:bf:92:62:e2:37:1b:
         86:71:f6:02:ff:92:3a:bd:67:e4:19:e2:a8:d6:f7:4b:e7:0d:
         e3:cc:7e:7f:45:b0:db:3c:99:02:ec:af:7f:9c:e0:1e:50:e9:
         83:65:9b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----