Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/eb04c05f-6bba-3320-9fac-922744fe48d5.roa
File:                     eb04c05f-6bba-3320-9fac-922744fe48d5.roa (raw, json)
Hash identifier:          jZ52H3vECJX663kdDAP76kNNJXoa5yCLSnxu/PdYfHc=
Subject key identifier:   F6:FD:5E:0A:5F:30:07:2C:B8:F2:54:7C:E0:BE:51:30:8A:F1:74:CE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D5A1717F528F9049D9D5EAB30
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/eb04c05f-6bba-3320-9fac-922744fe48d5.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        75.2.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5a:17:17:f5:28:f9:04:9d:9d:5e:ab:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=a5d0f203-cfee-434c-a97e-fbedb6252e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:42:df:9e:cf:27:07:55:10:29:dc:ab:9e:51:
                    28:31:84:23:d5:1f:68:08:bf:a0:e3:b1:2a:5f:70:
                    87:bb:20:83:82:1b:3f:f2:69:f0:42:ec:c4:4d:0d:
                    f4:74:fc:e4:21:9e:a9:80:d8:ff:e0:9f:4f:3b:1d:
                    28:d7:31:c9:63:b1:c0:9f:aa:cd:91:ea:53:bf:ff:
                    c5:e1:dd:71:56:ed:8e:d9:1f:e4:c7:6b:b8:4e:71:
                    f2:30:99:a9:7b:30:87:0b:fc:31:9f:0f:40:37:63:
                    67:65:be:76:f9:07:a9:03:02:a5:c0:b7:48:4e:6d:
                    27:b0:0b:89:c7:bd:6b:1d:45:d5:ce:84:46:24:34:
                    f6:47:0e:f4:3c:71:28:8f:58:a8:b0:6e:50:fa:17:
                    f5:2a:ec:cb:4f:dd:ba:ac:f2:37:56:17:80:62:cf:
                    f2:98:c5:a2:7c:a7:a2:d3:a6:ed:2f:34:ac:97:a1:
                    15:a4:c4:11:6c:97:52:84:3a:2d:48:39:12:d4:c2:
                    a6:b0:d6:81:50:6f:b6:10:b3:1c:ec:58:3b:37:fc:
                    9b:fb:db:3d:0e:34:ce:0c:da:5f:d3:91:8f:66:ee:
                    2d:cd:b9:7e:5a:6e:ea:69:90:3b:3b:db:d1:a1:13:
                    53:94:a1:09:de:54:ae:4f:c2:84:65:fa:ae:df:74:
                    b1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FD:5E:0A:5F:30:07:2C:B8:F2:54:7C:E0:BE:51:30:8A:F1:74:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/eb04c05f-6bba-3320-9fac-922744fe48d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.2.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:c7:95:fb:a4:3e:4a:3a:c3:51:61:94:03:ea:6c:8b:45:3d:
         53:e1:40:cf:87:c6:22:60:a2:ab:31:34:05:1c:fe:ac:7d:ed:
         de:75:4c:24:d6:d1:f5:53:9e:5e:ac:7e:50:07:d5:98:69:37:
         21:eb:72:5e:63:6b:a8:c4:47:bb:45:e9:cd:7a:ca:cb:a3:6a:
         3d:07:91:55:ce:e5:e2:fe:98:af:94:f2:04:d4:e8:8b:79:ea:
         28:4f:cb:12:ad:b4:80:76:d8:0a:00:f2:92:aa:2c:5e:14:7c:
         48:ff:eb:42:bb:2f:e9:f9:56:56:30:8e:11:ea:f9:96:69:78:
         20:66:aa:ca:5a:08:f4:c7:1e:1e:94:c6:d0:d0:e2:e8:5e:9b:
         15:88:0f:a1:e9:52:dd:c3:5a:41:54:e3:40:d3:ea:fc:0d:83:
         4e:76:76:84:f4:59:cc:65:ec:fc:8a:d3:82:6d:dd:db:b8:ca:
         68:68:21:15:4b:22:ca:7f:69:49:e7:f9:df:e5:9e:5f:0c:54:
         45:93:5c:f6:8d:03:ef:1e:ae:ec:f9:49:ab:c4:86:45:27:ba:
         1e:ff:58:76:c2:72:8f:c3:88:fc:23:39:67:26:90:9b:5f:03:
         75:d6:b6:2d:dc:12:52:e8:0e:e3:1a:86:e8:fe:98:8d:2e:d1:
         72:89:de:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----