Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ee4f6fc5-7966-39c9-8d38-4d932362e000.roa
File:                     ee4f6fc5-7966-39c9-8d38-4d932362e000.roa (raw, json)
Hash identifier:          KbzhifUJC6J31mLV8ADAEA5t1w+MKZ5pXMGTcmO+wbQ=
Subject key identifier:   4C:A6:5B:D9:94:1B:08:04:98:0B:2B:FD:A7:46:C4:4C:26:27:14:3D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D5B40C609BF60A452EAE88FC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ee4f6fc5-7966-39c9-8d38-4d932362e000.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        54.47.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5b:40:c6:09:bf:60:a4:52:ea:e8:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=88c9e6d8-495c-4b0e-8b52-c2eb9fb9cbc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:40:d8:13:2f:6d:d1:7e:25:57:41:29:07:01:
                    ae:86:b7:7e:20:47:24:6d:33:05:be:fc:28:51:2e:
                    a1:bf:f2:bf:0e:7e:22:50:c0:cd:46:57:35:16:f7:
                    46:17:16:97:1f:a4:d2:22:e2:c8:51:bc:ab:f5:c7:
                    21:8d:da:93:8b:87:5c:5c:7d:5a:cd:e8:1e:cf:d0:
                    de:61:10:ec:5c:8a:c1:63:17:9d:f4:ef:2a:be:5a:
                    64:7d:60:41:30:a6:be:6a:8b:a4:58:8e:84:e1:f4:
                    c4:fc:07:44:ed:a0:51:73:e3:29:01:bf:fe:f3:64:
                    c0:c8:f9:b8:74:71:f6:d5:be:8f:57:b4:3b:1c:e7:
                    98:a6:16:3f:c1:0c:51:b3:63:e9:99:4a:e8:5e:72:
                    dd:9e:61:e3:8b:b4:1f:ca:a6:7f:47:65:e6:ec:fd:
                    87:49:7f:d7:25:42:75:5d:4d:2a:d3:e7:4d:39:74:
                    36:81:01:c4:8b:c5:8e:f4:84:2d:63:b6:fe:d7:10:
                    9f:0e:95:be:82:92:09:67:4e:bc:bd:e1:30:8e:c9:
                    11:2f:9d:26:6d:e8:f5:39:0d:6b:98:5d:a0:6b:23:
                    75:d8:c5:1d:a3:d4:60:fe:ee:b8:e8:6c:28:f9:1b:
                    d7:98:bd:c8:0e:c5:f6:a7:ca:ff:c9:30:48:9a:0d:
                    4c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A6:5B:D9:94:1B:08:04:98:0B:2B:FD:A7:46:C4:4C:26:27:14:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ee4f6fc5-7966-39c9-8d38-4d932362e000.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.47.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:71:8f:94:f2:95:20:c9:22:c7:94:30:94:ee:5c:17:ac:c3:
         50:61:81:e1:52:ad:76:4d:93:14:8b:3c:1b:4e:bf:8b:25:40:
         4d:ca:db:20:0b:7e:61:c8:2c:d3:0b:94:00:9a:cf:0d:28:93:
         28:08:de:13:31:f0:f9:0c:da:37:7c:74:4b:41:2a:f5:f5:f5:
         6e:1f:78:d4:a7:ef:ab:6f:01:48:db:bb:96:94:42:5a:4e:a4:
         16:90:56:79:f4:2f:7b:65:95:88:5c:6b:eb:e7:68:82:55:a2:
         13:b4:f4:94:38:6f:01:b0:3d:ca:93:e3:eb:5d:da:80:fb:d1:
         0d:45:22:01:58:3f:3b:a5:7c:ca:82:2a:43:2e:08:98:57:7f:
         68:2c:af:4e:b0:5d:97:7d:31:b5:c6:3e:a4:d7:d6:b5:7b:ef:
         15:ae:5a:a4:a7:f0:45:e0:6e:08:66:f9:9d:1a:45:a3:77:5c:
         88:70:35:b1:cb:10:e3:d2:ed:2e:a9:90:83:ca:1f:bd:87:6e:
         5f:7b:3c:12:c4:ef:9f:a4:98:6f:52:fc:0b:b8:36:2c:3e:f4:
         16:16:de:01:95:b3:67:fa:c4:0c:0b:cc:40:05:2e:89:c6:5f:
         2d:22:ad:ca:5b:34:cb:7d:80:fb:11:f1:16:74:7a:53:ce:fc:
         4e:a9:65:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----