Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f586fb7d-063b-3ab1-bb37-0622e86ece9a.roa
File:                     f586fb7d-063b-3ab1-bb37-0622e86ece9a.roa (raw, json)
Hash identifier:          dD+oppGsML1vgkofWPc5CJ82KG/QT/C35PuQWf/cCxo=
Subject key identifier:   5B:0E:48:5F:CD:2F:ED:FC:7B:13:30:47:0E:63:79:3D:F8:FA:74:43
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C9661606ECCC32F745D75B360
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f586fb7d-063b-3ab1-bb37-0622e86ece9a.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        65.8.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:96:61:60:6e:cc:c3:2f:74:5d:75:b3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=35e73f0d-10ef-4318-9589-26968e3339e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d4:c6:5a:77:c3:ce:71:61:0c:c0:e5:5e:43:
                    3a:11:8c:d4:f6:5a:35:c4:af:56:ac:e3:0e:05:2b:
                    5a:fc:1f:bb:0b:6c:46:5b:5f:d5:b1:92:e0:ca:7f:
                    98:d3:7d:7a:aa:97:10:a5:44:8e:fb:85:b8:e5:67:
                    8d:7f:7d:b3:81:74:7d:0b:dd:cb:96:02:4c:0f:01:
                    42:2f:68:3b:68:70:94:e3:46:96:3f:91:39:62:5b:
                    a3:81:05:e9:90:cf:d2:79:93:2e:ad:f9:61:7b:d1:
                    de:6a:aa:38:61:35:14:3a:01:23:e6:ba:c4:39:1b:
                    e6:23:c5:46:30:b1:25:19:39:87:cf:7c:75:50:a2:
                    10:e1:9f:97:24:b9:c6:25:f2:de:f2:6d:38:10:ad:
                    e6:d2:66:7f:81:9c:d3:56:2b:22:ff:e9:1f:9e:f5:
                    5f:fb:cf:a3:00:ec:9f:f1:93:da:6f:48:45:1c:c1:
                    ec:58:0b:87:27:da:e1:f3:cd:9a:da:3e:0d:95:ed:
                    20:e8:83:f7:f1:96:c4:be:de:4c:98:21:63:46:be:
                    14:d0:ba:8a:18:f8:92:5a:6b:53:c8:92:61:9e:8c:
                    fd:b6:c9:16:50:67:3a:c7:83:72:e2:fe:9b:60:84:
                    eb:49:06:07:56:75:9e:0b:e6:ab:4d:f8:5a:ac:aa:
                    91:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0E:48:5F:CD:2F:ED:FC:7B:13:30:47:0E:63:79:3D:F8:FA:74:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f586fb7d-063b-3ab1-bb37-0622e86ece9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:48:76:a6:7a:6c:80:5e:e3:bd:2a:ae:64:02:1f:d1:bd:38:
         78:3b:c1:62:89:25:6b:c0:44:27:6c:2f:ce:f8:27:85:d4:00:
         36:8e:9a:57:62:1b:f2:07:1d:4c:e1:f2:9f:44:c5:64:fb:fb:
         dd:ae:7d:d9:c8:47:b6:1e:49:8c:4a:df:63:e5:e8:e6:50:b6:
         7a:d8:ed:8d:b3:86:cc:45:cf:db:a8:d9:d9:89:06:3b:eb:92:
         f4:58:35:20:ba:72:a6:57:d4:d3:f1:fb:d3:19:e3:c7:7d:db:
         4c:9d:e9:3b:5f:07:b4:e5:66:bc:30:38:9f:e5:fd:2e:13:93:
         a5:40:68:b6:b8:68:98:c9:8d:85:f9:f7:72:10:18:6d:00:7a:
         78:6c:2c:46:59:25:b3:45:5f:a0:14:c4:1c:07:7e:36:ad:0b:
         d6:4a:b3:d1:ef:60:f9:d6:05:54:88:d7:87:a5:f4:69:f7:e0:
         f8:d9:6b:88:4b:1f:4d:92:b9:55:73:b6:7f:9e:ad:8b:6f:a0:
         d8:5c:56:70:cb:eb:c2:6a:3b:b8:ec:65:60:df:75:f9:64:8a:
         34:b8:1e:3b:7d:81:7a:b4:61:09:24:4a:28:99:df:0e:a9:0a:
         0a:69:ed:14:16:04:32:d5:df:1b:25:cb:13:78:b8:f1:a4:aa:
         be:1e:50:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----