Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef897373-1d2c-3b6b-a15d-a88d3095bb19.roa
File:                     ef897373-1d2c-3b6b-a15d-a88d3095bb19.roa (raw, json)
Hash identifier:          QofQthdMZ3umfWQNBEuqEEOxmYsNIDCKYwbDuk870mk=
Subject key identifier:   EB:AB:50:1D:C7:B8:9D:56:67:1C:49:C5:4C:F1:39:D7:91:B6:85:F6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584041892F7082E8FC89E02CD200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef897373-1d2c-3b6b-a15d-a88d3095bb19.roa
Signing time:             Thu 15 Dec 2022 12:00:00 +0000
ROA not before:           Thu 15 Dec 2022 12:00:00 +0000
ROA not after:            Fri 20 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        76.211.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:41:89:2f:70:82:e8:fc:89:e0:2c:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 15 12:00:00 2022 GMT
            Not After : Jan 20 05:00:00 2023 GMT
        Subject: CN=310cf4cc-f907-4dc9-a1b6-6cda3227e823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d6:8d:c2:0a:8a:76:0a:11:81:7a:5a:21:40:
                    c6:33:40:83:f9:94:ef:3b:9e:0e:12:4d:64:47:49:
                    57:69:9d:e8:af:85:b6:4f:6f:66:f3:84:92:05:b7:
                    44:5c:57:8d:96:46:f0:f6:fd:4f:c4:a6:c2:e1:fd:
                    9b:62:2c:3f:0c:cd:25:78:c2:9a:a1:57:8e:05:cf:
                    d4:ad:1b:c7:37:8d:6b:87:9b:c6:41:68:97:9b:f0:
                    8f:c2:b3:c9:39:27:64:4e:3a:56:85:41:9a:2a:f1:
                    8b:19:7b:47:d7:04:77:cb:01:ad:23:7f:55:48:ef:
                    95:e8:dc:84:6b:df:a0:ba:d2:60:c3:f4:10:43:1d:
                    5c:11:af:7f:bc:3c:5f:45:73:59:81:c2:fa:a1:6a:
                    15:b8:5b:90:9f:fa:4d:f5:b3:7c:5e:5c:db:55:73:
                    3c:15:9d:ee:25:41:a5:ac:d8:f1:e8:9a:ba:db:b2:
                    5a:27:6e:7a:02:63:76:84:02:65:67:26:8b:94:e1:
                    cb:7b:3b:9b:16:31:ba:19:3b:eb:53:f8:d0:67:de:
                    64:b1:6d:04:b6:a8:d8:ea:e3:6b:21:60:1b:9e:7d:
                    44:85:e6:44:30:6f:03:86:36:2e:4b:4d:c9:3a:48:
                    5b:ea:35:8c:ec:0e:fe:20:35:5c:89:1f:63:2a:e6:
                    b8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AB:50:1D:C7:B8:9D:56:67:1C:49:C5:4C:F1:39:D7:91:B6:85:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef897373-1d2c-3b6b-a15d-a88d3095bb19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.211.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:56:3e:5e:cb:11:be:1a:41:8e:de:76:c5:0f:8c:d6:00:a3:
         dd:24:5e:4e:50:04:04:bb:fe:53:76:87:3a:fc:7b:ff:69:2b:
         7d:10:0d:58:5c:c5:71:b8:ac:46:bf:2c:17:8f:af:89:20:9a:
         3d:0c:ab:79:ab:df:b3:0a:a6:29:e3:f7:cf:c7:91:4b:0a:1c:
         af:41:f8:5d:71:e5:27:16:76:18:7d:23:e1:5f:62:b7:a0:17:
         0e:5e:f1:0d:ed:53:68:d3:45:92:a7:93:11:34:22:2e:8e:9e:
         d4:59:37:9b:d7:4f:f0:ab:28:78:62:e3:a5:58:81:c3:df:06:
         fa:c7:9e:c4:79:33:d5:2d:c5:72:4d:e4:74:43:56:2b:58:92:
         1d:c3:30:31:af:dd:eb:7d:48:7b:84:90:39:ac:e0:1b:37:52:
         60:cc:7a:68:d5:d4:79:33:ec:10:39:9a:d3:2c:a8:4f:47:e3:
         22:8a:46:25:02:25:2e:4b:a5:24:29:3b:15:73:50:d8:78:cb:
         33:98:ab:dd:b3:69:49:4d:da:c8:11:1f:1b:d9:2d:2d:3b:9b:
         4a:0c:c9:40:c0:d6:de:30:b2:3e:f0:5f:18:77:6c:99:06:ec:
         2e:4c:17:c5:e1:3a:64:15:68:0f:23:4f:e5:7e:4d:19:f4:7c:
         e6:b5:62:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----