Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1271601-3510-3ca2-b8cb-485e3e74a2f3.roa
File:                     f1271601-3510-3ca2-b8cb-485e3e74a2f3.roa (raw, json)
Hash identifier:          FSYpdl+M0JNJLt63eUD7N4aXde7pqtkLLlgtxk8M8CE=
Subject key identifier:   93:44:BD:54:7E:8A:C3:3E:CB:E5:E8:86:35:6B:84:56:A4:6E:9F:D5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F56E9D5F75090701D6EBCF680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1271601-3510-3ca2-b8cb-485e3e74a2f3.roa
Signing time:             Thu 22 Sep 2022 12:00:00 +0000
ROA not before:           Thu 22 Sep 2022 12:00:00 +0000
ROA not after:            Fri 28 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        54.138.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:56:e9:d5:f7:50:90:70:1d:6e:bc:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 22 12:00:00 2022 GMT
            Not After : Oct 28 04:00:00 2022 GMT
        Subject: CN=038ded78-7fa2-45f1-af04-b9900f2c9f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3e:5e:80:93:0a:95:1a:23:a9:e6:c6:b6:04:
                    c0:3a:df:8e:de:d7:8a:f9:90:45:35:52:71:37:1e:
                    90:c7:f6:a7:4a:dd:0c:58:df:a3:c0:62:8d:4f:93:
                    1e:54:df:dd:b3:63:cb:27:bd:c4:e9:f5:6a:0b:d0:
                    8a:ee:6e:bb:eb:ab:57:53:38:0c:d6:b9:10:a6:fe:
                    bc:5e:59:86:0f:cf:71:2e:6d:c0:20:ab:51:17:e4:
                    a6:bf:af:13:7b:e3:c9:d6:bd:18:33:84:45:28:cc:
                    7f:37:87:d4:88:aa:4c:7c:38:29:df:93:a6:94:cb:
                    63:75:88:ba:6c:5e:7d:08:ad:44:ef:4c:48:7e:14:
                    60:2f:38:5c:32:a1:ef:00:00:41:dc:e3:ed:ac:b5:
                    5f:2d:1e:2d:7f:25:7f:d9:b0:32:11:8d:2a:56:6b:
                    d2:c3:66:03:3c:da:bd:0d:11:d5:7d:b3:7d:27:22:
                    9a:3d:d0:96:9f:62:d2:46:9e:92:45:05:24:b8:7a:
                    79:5f:b8:96:f2:da:bb:62:1a:7b:59:51:a6:36:00:
                    93:7e:22:14:82:48:bb:14:e9:8a:38:49:d7:5d:8a:
                    6c:ca:85:db:7f:5a:ee:90:98:1a:8f:15:3f:bb:0d:
                    c7:d3:e8:ae:77:bf:11:ac:4a:8f:cd:f5:96:ca:3c:
                    55:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:44:BD:54:7E:8A:C3:3E:CB:E5:E8:86:35:6B:84:56:A4:6E:9F:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1271601-3510-3ca2-b8cb-485e3e74a2f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.138.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:ad:77:ad:2e:ff:21:a7:12:65:c6:88:31:c9:8d:60:99:8c:
         d8:eb:97:44:a0:2f:98:b2:5a:d0:de:46:33:d2:da:55:29:e0:
         90:e2:4e:96:6a:eb:f8:fd:1c:23:86:c4:74:c9:d4:d9:8f:9d:
         73:7d:1e:70:c9:59:06:6e:7c:f4:36:c9:ed:a1:4a:d8:17:1a:
         9b:43:2f:ef:50:bc:9e:4e:af:cb:65:12:03:1a:8f:61:d9:67:
         a8:79:bb:34:bd:41:8e:79:a9:d0:a0:e0:fc:d3:71:4c:99:8f:
         df:1e:93:a9:3a:b0:66:06:37:7e:ac:7a:5e:28:24:e4:ea:e1:
         13:08:08:7a:a5:ca:9b:e0:93:57:80:43:e2:5e:8b:9e:44:a7:
         cc:ba:f4:ce:83:86:c2:5a:50:9b:d6:80:79:6e:34:de:dc:5f:
         46:0a:a0:ad:46:0f:59:b8:26:5d:c4:f0:dd:3c:00:33:84:98:
         e7:93:41:ff:30:41:11:45:03:ad:d9:46:81:76:77:7f:eb:88:
         2a:83:a1:a3:e0:32:ae:d4:9f:84:4d:f6:9b:a0:38:5b:3d:4d:
         04:d5:e4:73:70:a3:b5:b2:33:f8:96:9b:c7:97:e6:54:b9:17:
         30:f2:6d:9a:3b:50:45:22:26:37:f3:df:49:e7:de:22:04:fa:
         ec:19:d9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----