Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2e44c34-68f9-34d9-b05d-1a58645b7b86.roa
File:                     f2e44c34-68f9-34d9-b05d-1a58645b7b86.roa (raw, json)
Hash identifier:          um3njz0wOEX8nbsAGY8FydNhgtgBMPUHhqqQox907sE=
Subject key identifier:   54:E9:73:F1:4A:C6:3E:DC:7F:58:D9:00:AD:07:B9:DF:A8:C9:BD:F4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858409023F1FDECD25F405A61A400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2e44c34-68f9-34d9-b05d-1a58645b7b86.roa
Signing time:             Thu 12 Jan 2023 12:00:00 +0000
ROA not before:           Thu 12 Jan 2023 12:00:00 +0000
ROA not after:            Fri 17 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        54.35.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:90:23:f1:fd:ec:d2:5f:40:5a:61:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 12 12:00:00 2023 GMT
            Not After : Feb 17 05:00:00 2023 GMT
        Subject: CN=cac4e6fd-d03c-47b0-9a17-7789225acda1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a6:2b:b7:66:54:fa:91:40:69:85:c0:03:3f:
                    68:08:5c:0f:c4:13:d4:a2:bc:b8:b1:e4:7e:2c:04:
                    a7:2b:96:96:db:ae:a9:77:7e:03:52:d8:bf:fa:61:
                    aa:4a:3d:02:30:8d:6b:c9:3e:31:6d:00:44:b1:1e:
                    65:fe:3a:86:e4:37:93:3a:58:cc:15:12:63:57:45:
                    19:51:97:76:c5:5c:9f:f1:fb:d4:2a:e5:c9:2c:ad:
                    67:f2:b8:c2:96:c5:57:10:7b:cc:91:7e:55:91:d5:
                    3e:55:2a:19:51:df:bc:67:53:0d:dc:b7:9c:1d:43:
                    a9:fa:5f:c8:06:91:3a:69:c1:20:c1:06:cc:ba:6c:
                    64:59:04:57:2f:0e:ab:a9:fa:af:c4:4a:70:76:7f:
                    ba:3d:db:1c:eb:a0:74:a2:e9:7d:54:b7:92:f7:d0:
                    eb:0b:eb:8a:cc:6c:cd:20:70:21:9d:6c:1d:ae:a8:
                    6c:69:14:8c:75:82:7e:2b:af:5f:9a:a6:04:a0:32:
                    3c:41:e7:75:f8:1d:bb:9d:7e:70:4b:82:c9:22:7f:
                    12:0e:5a:9c:cd:01:dd:36:44:73:67:ae:97:22:79:
                    9b:04:67:a9:ec:fb:1e:01:b5:a6:49:a1:70:e7:a5:
                    21:2f:98:d5:c6:b6:f9:39:7c:b6:28:75:be:e0:db:
                    56:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E9:73:F1:4A:C6:3E:DC:7F:58:D9:00:AD:07:B9:DF:A8:C9:BD:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2e44c34-68f9-34d9-b05d-1a58645b7b86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.35.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:db:50:33:5d:0e:4a:61:45:b0:e6:a7:bf:3d:fa:55:38:bd:
         39:85:1c:c5:92:cc:f6:3d:1f:60:fc:57:e8:e9:6b:96:c8:39:
         ee:ea:5f:83:f8:9d:a8:36:ac:fd:26:57:a0:bc:1e:91:15:b4:
         25:92:e1:df:aa:4a:9c:d3:f3:40:8a:86:c8:8e:e0:28:d8:79:
         dd:8c:b4:1b:38:6b:77:66:17:f6:8d:bd:df:09:c6:95:4e:ac:
         f1:c4:70:2a:d7:82:fa:19:dd:2c:41:a5:68:4e:34:d7:80:76:
         60:0c:d7:0b:11:5b:3d:a1:af:61:62:eb:77:d9:0f:15:da:32:
         5a:e4:0f:1d:e0:cf:52:c0:7c:d7:65:74:f2:93:e4:c4:aa:fb:
         ff:5e:2a:74:c5:33:fd:ed:00:43:1e:18:53:96:76:18:96:5c:
         67:0c:44:bd:7a:7a:f5:f6:76:22:ce:89:c3:5b:c6:95:98:17:
         fc:90:01:fb:ee:15:62:bb:17:a8:4d:da:79:4a:95:7d:3b:a0:
         91:65:bd:eb:e4:d7:51:99:dc:20:a4:bd:6e:61:94:4e:a8:cb:
         ba:f8:07:99:cb:2b:4e:bf:ab:4b:5f:f1:2c:91:dc:ec:d1:99:
         90:f3:4f:2d:91:bb:11:79:01:3b:c6:5d:4e:12:d2:08:20:98:
         55:8a:e1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----