Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef13ce9e-f4dc-34d7-a2e7-90449415d5d6.roa
File:                     ef13ce9e-f4dc-34d7-a2e7-90449415d5d6.roa (raw, json)
Hash identifier:          b5tpk0g9YFXkLAcOz9T2GSXoIht/sKhd0ui04iG/VJ4=
Subject key identifier:   F5:1A:93:38:8F:C9:85:EF:81:3D:21:8F:94:50:C5:5B:26:E5:2B:D0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FE6BECF3EF78C180813BD07F0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef13ce9e-f4dc-34d7-a2e7-90449415d5d6.roa
Signing time:             Sun 13 Nov 2022 12:00:00 +0000
ROA not before:           Sun 13 Nov 2022 12:00:00 +0000
ROA not after:            Mon 19 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.26.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:e6:be:cf:3e:f7:8c:18:08:13:bd:07:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 13 12:00:00 2022 GMT
            Not After : Dec 19 05:00:00 2022 GMT
        Subject: CN=45d93a9c-7475-4832-9a1a-38d16e5aa6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:30:e7:14:ed:8d:b1:d4:0c:ff:7b:6c:9d:d3:
                    b3:cb:87:95:2f:c5:c1:bd:a4:21:12:4b:39:07:fc:
                    5d:19:ea:0b:34:ea:72:32:3e:6d:8a:a8:23:43:55:
                    25:9f:ed:f8:7c:af:d9:43:f2:47:87:61:fb:b4:7d:
                    ee:94:7e:98:e1:64:ab:fc:fd:f0:39:7e:c1:06:87:
                    12:88:cf:8f:2b:d3:d2:6c:b1:0e:f2:3e:93:4c:cc:
                    31:ed:71:02:c4:82:84:e6:11:3e:d0:22:bd:d7:bf:
                    71:55:01:16:7f:f8:e2:68:72:0b:3c:b7:87:a9:38:
                    78:a0:10:49:0e:7c:8c:de:14:57:55:b0:bd:79:5e:
                    7d:4a:77:a5:94:07:b3:c3:b9:ce:52:00:7f:80:05:
                    f2:b6:d5:85:4c:b5:c3:f9:03:40:50:e2:88:f1:19:
                    6f:35:29:e9:d0:aa:98:aa:01:c9:63:c0:57:9c:63:
                    3c:55:55:b5:eb:f2:ab:2d:f3:e4:ae:d8:b4:76:dd:
                    30:2f:13:f6:85:22:a4:bd:7d:28:fe:fa:b8:96:b0:
                    88:50:a1:7a:3f:e8:dc:f3:e2:d2:4b:2d:c9:59:27:
                    b9:3c:a8:9d:66:dc:4b:22:70:d1:db:99:a1:e1:36:
                    2f:16:d6:10:5c:70:fa:62:8b:73:1e:af:fb:1c:55:
                    08:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1A:93:38:8F:C9:85:EF:81:3D:21:8F:94:50:C5:5B:26:E5:2B:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef13ce9e-f4dc-34d7-a2e7-90449415d5d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.26.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:5c:fd:65:44:a7:c3:38:66:3a:13:cb:e0:4f:52:b5:cf:ae:
         da:68:cf:51:48:ed:38:6c:b3:83:d4:df:6a:8c:22:07:72:70:
         40:13:a5:07:dd:3e:32:ad:a4:56:9a:d7:b1:cc:e7:ce:40:fd:
         32:51:6f:6c:ab:b3:8d:c1:18:22:ef:03:96:79:34:5e:1e:ca:
         2a:7b:2e:3b:84:43:58:8c:4a:54:c4:ff:e9:78:da:17:18:5d:
         3b:96:ea:34:3d:fa:81:1c:d8:88:4b:40:f3:11:f6:3f:6d:e0:
         b2:b6:ae:50:10:fc:89:79:9c:90:08:4a:88:d5:14:36:11:89:
         80:6b:1d:48:1b:b9:33:8b:1e:9c:9d:b8:60:0e:97:8d:1f:84:
         74:77:06:39:ae:7e:a3:94:76:12:fd:5e:50:0a:d3:76:6b:8d:
         01:6f:df:2b:ce:61:c3:9c:d5:d5:d2:93:d1:29:07:a2:9e:17:
         b8:e9:ce:46:2e:f1:23:08:29:8f:a6:fd:0d:73:ff:a6:ca:26:
         27:61:11:e7:29:ae:66:26:ce:68:99:f0:a8:71:8a:82:01:3c:
         89:a8:da:e1:ae:92:f9:4c:ac:96:d6:ff:29:f7:e1:40:46:a0:
         51:57:ca:bf:36:e2:70:8c:6a:9d:3d:2e:00:1f:33:93:a8:64:
         16:5b:d9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----