Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef2b7150-604b-39e8-8b06-ca9327a7943d.roa
File:                     ef2b7150-604b-39e8-8b06-ca9327a7943d.roa (raw, json)
Hash identifier:          eTgJF3GxSZCbY/9FcUefLNzrwr3fZFmGzrh0s0DaN+I=
Subject key identifier:   6E:C7:90:BB:8A:50:69:33:DE:7D:D2:9D:FC:E8:04:75:CB:9B:DD:C2
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EE6235A2B9F49F1E3AA5B4C28
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef2b7150-604b-39e8-8b06-ca9327a7943d.roa
Signing time:             Sat 13 Aug 2022 12:00:00 +0000
ROA not before:           Sat 13 Aug 2022 12:00:00 +0000
ROA not after:            Sun 18 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.219.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e6:23:5a:2b:9f:49:f1:e3:aa:5b:4c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 13 12:00:00 2022 GMT
            Not After : Sep 18 04:00:00 2022 GMT
        Subject: CN=e3ae2687-98a3-49a3-9efc-7d67a4b06022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b0:71:18:d0:ed:c1:a1:b8:b9:76:24:6b:67:
                    d8:e8:8f:a2:22:9a:07:25:21:07:ed:3a:ca:84:54:
                    67:cb:f3:ce:ac:a8:49:8a:26:b1:00:b5:9e:b2:b2:
                    28:30:02:67:e1:11:06:e4:94:84:51:dd:8a:aa:4f:
                    a7:8c:29:d5:9f:c0:82:fa:c4:a8:69:97:0b:15:90:
                    1e:06:f3:ff:06:65:b7:32:4e:fa:13:dc:19:9f:24:
                    fd:d8:ee:0c:92:66:c0:5f:9f:b5:f5:cc:7d:ac:44:
                    5d:81:8e:c0:d2:1e:33:88:3b:2b:2b:f5:a4:94:0e:
                    01:02:5d:7f:1d:9f:38:73:36:35:c1:51:0a:e8:01:
                    c0:49:0f:9c:8f:a1:0e:bd:f7:23:d0:a7:fd:31:36:
                    fd:c1:d7:6c:4c:ba:06:04:05:7b:eb:07:a8:3a:90:
                    b7:ef:18:6f:58:53:c9:7c:cc:23:76:d7:1f:8d:68:
                    e6:a8:6f:80:1a:89:51:4d:a2:2f:68:cd:50:5f:4c:
                    ca:34:9d:6d:32:26:01:ad:66:f9:d3:c4:0a:d4:0f:
                    bd:11:57:71:bd:36:74:0a:fd:ec:07:0d:4a:22:6f:
                    f6:f7:d9:db:2b:48:af:e7:4d:4f:07:06:94:b8:21:
                    a7:d8:e6:b7:fc:16:c7:05:67:fa:03:41:68:15:cb:
                    16:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C7:90:BB:8A:50:69:33:DE:7D:D2:9D:FC:E8:04:75:CB:9B:DD:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef2b7150-604b-39e8-8b06-ca9327a7943d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.219.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:a2:71:f6:94:eb:c8:7e:8b:53:6f:fa:3c:66:0c:2f:e9:87:
         59:02:07:be:67:8e:f9:2c:a1:df:c1:d6:77:59:48:cb:cf:2d:
         fd:f0:f5:39:36:19:15:d8:e0:7a:ba:f1:d9:f9:27:61:9a:e4:
         30:20:af:94:4d:f0:1f:fa:e3:51:77:fe:08:a8:89:83:8f:c7:
         36:d9:aa:17:25:e4:d4:03:55:4f:14:cd:98:8a:fe:81:e6:75:
         8e:55:f5:d5:e8:5f:f2:01:ca:d1:97:fb:f7:9b:66:df:ed:22:
         ee:b6:e9:3b:12:a2:67:c1:f6:29:7c:6d:ce:ef:ef:bc:98:c4:
         b0:0e:a1:68:ae:77:e6:2c:8a:0f:69:c5:c3:3f:a6:15:49:ba:
         3f:03:15:55:06:b9:cb:20:18:d8:07:3d:29:6a:4e:83:43:9e:
         db:f6:ee:e2:fb:d7:47:e6:0e:2b:da:90:21:d2:5b:af:35:0f:
         4a:b0:38:8c:56:9e:75:c0:3e:ce:43:41:33:37:ca:75:fd:04:
         e1:e4:4c:59:24:bb:31:ed:9a:05:21:1c:9f:7c:99:bc:97:c4:
         3b:d1:08:cc:92:31:82:c9:2d:e4:3d:e6:d4:65:ef:cc:d5:fa:
         a5:85:72:1c:53:c7:52:af:08:cf:05:54:c9:12:49:1c:71:5a:
         f8:77:78:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----