Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f05f7c5a-3238-3a8f-9324-76d357e3dece.roa
File:                     f05f7c5a-3238-3a8f-9324-76d357e3dece.roa (raw, json)
Hash identifier:          6jGUVs6ro01OAIr1yPPvcXkD3kUnqGUQNWOE4uZqaCE=
Subject key identifier:   AA:3C:39:7C:9A:CA:D8:7B:60:CF:12:91:F9:BE:7C:20:09:5A:90:61
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E93069DD1D1361DB6F15D7340
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f05f7c5a-3238-3a8f-9324-76d357e3dece.roa
Signing time:             Thu 14 Jul 2022 21:12:08 +0000
ROA not before:           Thu 14 Jul 2022 21:12:08 +0000
ROA not after:            Fri 19 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        76.197.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:93:06:9d:d1:d1:36:1d:b6:f1:5d:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 14 21:12:08 2022 GMT
            Not After : Aug 19 04:00:00 2022 GMT
        Subject: CN=a3ffaf04-dfee-4d5c-a54f-d041fb4d05b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9b:c9:2b:a3:f3:68:82:c7:48:c6:64:1d:56:
                    de:da:bd:a8:d2:c0:1b:36:ba:68:a4:df:28:a8:f4:
                    f6:04:2c:d0:c6:6c:2a:4c:f4:ca:bc:74:3e:3c:85:
                    b6:16:7d:5c:82:2c:6d:cb:0e:87:de:f5:98:40:f6:
                    e4:79:31:2a:3b:e9:b5:fa:a2:48:9d:e8:21:71:d1:
                    53:f2:57:03:de:ea:a5:fa:68:d9:ee:09:6f:55:62:
                    44:67:46:f8:cf:0c:7a:13:14:e7:09:33:50:98:ee:
                    b7:73:28:b4:47:52:fe:3b:b7:7e:14:0f:e8:fe:de:
                    f9:d0:7d:2f:f2:1e:ec:2a:13:ed:06:66:61:a1:cd:
                    8a:fd:1d:26:34:58:5f:59:9f:3b:1f:0e:44:94:e9:
                    15:a0:e5:37:08:35:bf:ef:01:e5:a3:7a:6e:27:39:
                    ff:8f:c0:0b:5b:4c:f7:75:dd:51:1e:78:53:dd:ad:
                    67:bc:4f:23:34:df:a8:6a:3f:00:0c:8c:c5:a4:92:
                    85:03:f1:1a:ae:ae:df:e1:c6:ea:4d:78:83:4c:e6:
                    73:1f:22:5e:2b:41:3e:e6:c3:76:a9:57:b3:1f:9f:
                    f1:9d:1a:87:e3:be:a0:04:1a:d3:27:32:4f:09:02:
                    f6:6e:fe:38:2c:60:a8:db:cd:85:ab:19:ec:8b:15:
                    7a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3C:39:7C:9A:CA:D8:7B:60:CF:12:91:F9:BE:7C:20:09:5A:90:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f05f7c5a-3238-3a8f-9324-76d357e3dece.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.197.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:71:ee:e2:a4:6d:e8:12:9d:df:ca:b4:67:7b:36:d4:f6:82:
         fa:f8:a3:b3:8a:e6:10:4a:91:ff:c7:6b:a4:84:72:00:ac:ad:
         be:86:a1:47:33:48:c1:a6:bf:74:c2:54:11:88:5e:89:06:f8:
         39:cf:17:97:4b:81:9f:68:70:28:db:c6:47:88:a8:36:d9:d6:
         d8:65:91:43:01:2a:a2:f5:28:4d:7a:cd:d6:51:01:70:f8:d0:
         13:73:07:28:26:5f:45:61:92:f4:2f:ce:95:26:f9:ef:5c:1f:
         50:e8:83:c8:6b:1a:6b:ca:76:1c:9a:65:d1:93:40:56:e7:4d:
         b6:d2:03:66:68:64:ac:41:60:7e:85:e8:ca:34:a7:c1:00:d4:
         38:e1:08:d0:2c:ba:82:40:6f:1b:f7:ed:49:81:ec:c8:b0:fb:
         5d:e1:b0:25:75:b3:7c:16:bb:3d:11:c1:52:22:f1:24:a4:23:
         0d:b3:1f:9e:8f:1d:73:9b:db:f7:d2:44:6e:a1:3d:c4:bb:f1:
         b9:9a:a3:98:e1:ab:e2:39:89:af:5d:8e:c3:62:97:d8:4f:b4:
         c9:a1:4a:b1:a3:77:15:0a:80:36:88:88:e5:60:cb:f1:cb:ae:
         82:a9:6f:f5:3a:f2:92:e1:e2:ea:91:c0:43:d8:ee:c4:04:cc:
         77:85:d2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----