Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f4cbb3f3-555f-3d26-880c-b18a1314aa9e.roa
File:                     f4cbb3f3-555f-3d26-880c-b18a1314aa9e.roa (raw, json)
Hash identifier:          1eTBuxGX0bfr+pyASTTUlV13Re8d0Ax3QuXBo79eKAM=
Subject key identifier:   67:D0:49:A1:F7:F6:5E:AB:B7:CD:45:52:A0:DE:D6:A8:0F:C5:CF:93
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DA4213DB3DC1AEA65E8F84740
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f4cbb3f3-555f-3d26-880c-b18a1314aa9e.roa
Signing time:             Tue 19 Apr 2022 12:00:00 +0000
ROA not before:           Tue 19 Apr 2022 12:00:00 +0000
ROA not after:            Wed 25 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.156.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a4:21:3d:b3:dc:1a:ea:65:e8:f8:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 19 12:00:00 2022 GMT
            Not After : May 25 04:00:00 2022 GMT
        Subject: CN=95b5ea03-8842-40d0-9f59-23b524db5adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:11:f8:6a:7c:61:a6:2a:85:70:17:df:fc:cd:
                    a8:42:6a:84:26:e4:9c:c5:75:a2:f8:02:fe:c0:8b:
                    2a:ae:a1:b4:f8:d4:0b:21:45:4e:6e:34:af:4b:51:
                    63:5f:83:17:1b:c3:7e:20:58:d0:dd:7c:71:65:3e:
                    e7:09:01:c8:72:25:1d:d1:68:55:f2:22:a9:63:9c:
                    a7:a0:29:39:c8:af:71:10:e6:88:ba:4a:a7:0f:77:
                    86:bd:93:c5:2f:9c:76:84:8d:e1:4b:11:36:e5:89:
                    ab:9f:72:24:6a:e1:76:62:af:15:b3:4a:89:62:f8:
                    0e:2e:e4:44:45:d6:69:5d:fe:57:20:08:d2:e2:47:
                    32:9a:24:55:39:16:fe:72:5c:5d:3c:70:32:f3:c3:
                    8f:99:08:57:68:cb:25:56:71:54:06:5f:6b:01:d6:
                    8e:1d:b8:80:1f:1d:52:9e:bf:e6:89:5d:94:7d:2e:
                    15:21:89:5d:a3:43:a6:01:37:e6:3b:b1:a0:22:6e:
                    07:87:f9:59:82:f8:ed:7a:e4:bb:9a:9a:40:06:41:
                    60:1e:3e:ac:8f:b4:2b:af:d0:19:c0:ca:7d:b3:24:
                    b4:ea:ce:bd:ca:10:23:22:c6:11:af:f6:62:b8:97:
                    1c:92:2c:07:31:c4:99:49:1d:3e:f1:63:c6:de:a9:
                    50:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D0:49:A1:F7:F6:5E:AB:B7:CD:45:52:A0:DE:D6:A8:0F:C5:CF:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f4cbb3f3-555f-3d26-880c-b18a1314aa9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.156.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:4d:50:20:e5:e6:30:7c:f5:a0:ed:96:8e:61:7a:24:83:7d:
         70:df:6f:ca:bc:38:c2:6c:d4:48:ed:82:52:73:83:d7:c5:9e:
         41:ab:e4:39:af:4f:14:75:a9:8e:0d:91:fa:bc:25:eb:81:3c:
         c1:a0:d3:0f:db:1b:e1:1b:3a:fa:08:ea:50:98:30:c3:d8:05:
         81:75:d4:53:be:c6:c0:04:c9:2e:f4:81:cb:91:0a:1d:f2:39:
         a5:82:0c:de:bb:f5:9e:a2:af:a5:ab:45:c8:be:32:20:fc:51:
         c2:63:d4:4d:a4:cf:94:0a:b9:7f:8a:b9:b9:87:87:76:5a:e8:
         ad:49:c2:61:5a:67:1f:15:16:d2:d2:73:c7:53:0c:99:89:fc:
         bb:34:93:36:5c:09:6a:18:6f:b9:b0:aa:8c:46:71:d8:ab:56:
         08:7e:48:6c:e2:4a:cb:9e:97:c0:82:11:9c:07:dd:3a:6e:af:
         4a:f5:37:81:39:45:20:32:7f:f3:19:02:2c:6e:8d:3e:8f:db:
         72:aa:4f:aa:a4:de:19:da:9f:e7:8e:74:0c:5f:1c:28:8d:29:
         84:67:d7:14:f6:e4:14:09:cf:6a:d7:b7:81:65:f6:fa:31:98:
         ce:98:dd:4c:fa:c5:a1:d2:69:2f:31:33:cd:2f:6c:b7:1f:4b:
         55:34:57:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----