Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e845d80b-f9d5-3b5e-9050-b667309738cd.roa
File:                     e845d80b-f9d5-3b5e-9050-b667309738cd.roa (raw, json)
Hash identifier:          jkUbhY9WFtNAGlF4fneR4FFqsCACnnvohVxjwVbBIKM=
Subject key identifier:   A6:E3:FF:01:ED:91:9F:10:48:43:86:87:17:F6:E9:9C:45:4A:A6:58
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F09879DEBE1D6951EC3A3AE80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e845d80b-f9d5-3b5e-9050-b667309738cd.roa
Signing time:             Fri 26 Aug 2022 17:36:07 +0000
ROA not before:           Fri 26 Aug 2022 17:36:07 +0000
ROA not after:            Fri 30 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        161.178.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:09:87:9d:eb:e1:d6:95:1e:c3:a3:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 26 17:36:07 2022 GMT
            Not After : Sep 30 04:00:00 2022 GMT
        Subject: CN=82595f30-b982-4f80-8a54-3c91bb7fdf16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:81:e0:95:2a:08:22:48:6a:c2:18:04:a6:e6:
                    51:51:2e:30:31:5a:2d:a6:06:b2:a7:5a:46:c0:7a:
                    81:39:a2:8c:4f:ab:36:ed:0e:da:2d:65:b4:39:dd:
                    02:04:fd:54:12:74:72:97:5f:04:43:32:d5:c5:f2:
                    53:09:8c:ac:26:7a:32:21:ac:10:c2:5b:33:e9:7f:
                    d7:e7:5b:1d:46:18:76:9a:d4:e3:3b:31:e6:94:37:
                    d5:9e:6d:a7:7e:f1:6d:11:b6:a8:a7:f6:70:52:e0:
                    3d:68:f6:db:0c:71:00:58:e5:ea:5d:9f:65:59:6e:
                    c8:19:63:fa:ec:e1:fc:e4:df:54:12:fb:d1:59:1d:
                    95:ae:d7:a6:61:70:5d:e7:01:92:fd:0a:59:23:e7:
                    04:7b:b5:ca:5f:6e:f9:99:71:d6:56:a1:17:2f:af:
                    99:1e:2f:f7:9f:85:cd:9d:5a:12:e9:42:f6:80:c0:
                    fe:06:fa:93:3b:40:a6:4e:9b:b1:a0:9a:82:72:12:
                    07:29:4a:55:91:fc:e2:97:32:64:ea:dd:4c:b1:45:
                    39:d2:1b:83:ea:56:fb:e2:53:28:b3:c5:14:09:08:
                    93:1c:56:9a:c7:ec:ce:02:2d:01:d1:97:d6:df:08:
                    8a:ba:b5:cf:f6:44:d4:15:ac:83:0d:0a:c8:92:99:
                    07:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E3:FF:01:ED:91:9F:10:48:43:86:87:17:F6:E9:9C:45:4A:A6:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e845d80b-f9d5-3b5e-9050-b667309738cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.178.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:3b:b7:08:41:c4:28:ea:9f:b5:75:89:fa:71:72:b9:19:b4:
         4e:4e:88:d7:5b:80:c8:92:5c:c4:ed:37:b7:45:cb:c4:08:91:
         ed:b1:45:b4:7a:1a:14:71:b0:cf:56:e6:b0:5b:69:2d:90:85:
         8c:42:cd:90:04:b6:24:24:ab:1d:d9:5f:7b:49:62:1b:33:63:
         59:2a:e6:9d:06:94:f4:ca:8c:ee:47:0b:90:ff:7b:4a:33:57:
         1a:4f:f1:b4:ff:86:8d:3a:40:7c:27:6b:43:b5:4a:25:73:3d:
         17:98:9f:86:31:a3:f4:5c:60:38:5a:43:bc:eb:aa:69:a3:98:
         b2:89:c8:ad:73:97:09:3e:b7:a0:ff:a1:36:32:89:b0:5f:c0:
         b0:a0:5c:3a:d0:2e:4b:dd:e1:40:24:98:87:19:18:b2:af:a8:
         2d:c1:3f:1f:fb:88:93:8a:b7:e2:09:4a:9c:7e:d2:e4:98:b7:
         3e:92:ae:d0:2a:bf:2b:09:af:c5:43:46:69:b9:c4:e0:f2:7e:
         f6:00:1f:46:e8:88:8a:21:83:b8:3c:56:45:07:ca:a2:32:40:
         e3:ea:7f:fa:6c:d1:28:e8:ac:ce:7d:44:5d:f1:ed:96:5a:9d:
         39:e3:96:ad:42:db:3e:59:6e:fc:54:23:40:9f:59:8c:e9:08:
         e8:5b:3e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----