Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f6a7349f-b762-3f77-b73c-9bdd3f6430d9.roa
File:                     f6a7349f-b762-3f77-b73c-9bdd3f6430d9.roa (raw, json)
Hash identifier:          jWxuY9NmiAiuQEnDp3jDEehz1+eO213yRVqiRm5Q6gM=
Subject key identifier:   B6:AD:70:7C:64:0A:AE:D7:20:EC:C0:81:B6:C8:72:A1:45:48:44:B8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840004EB8C8310464538958ADC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f6a7349f-b762-3f77-b73c-9bdd3f6430d9.roa
Signing time:             Tue 22 Nov 2022 12:00:00 +0000
ROA not before:           Tue 22 Nov 2022 12:00:00 +0000
ROA not after:            Wed 28 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        56.96.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:00:4e:b8:c8:31:04:64:53:89:58:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 22 12:00:00 2022 GMT
            Not After : Dec 28 05:00:00 2022 GMT
        Subject: CN=655a22c0-90a4-415d-89fa-347e89843cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d5:c8:40:f4:33:58:6d:14:ac:8b:65:b0:92:
                    89:52:e7:fb:18:60:ae:8d:13:9b:25:da:02:d5:b9:
                    65:e9:c6:8b:26:9e:07:d5:23:44:7f:3a:b6:32:45:
                    d0:a8:9e:df:ec:e0:c3:2a:2c:84:5d:f3:da:28:5f:
                    7f:d0:05:cd:ef:22:49:25:1d:e8:c6:f5:82:a8:78:
                    c4:ee:b9:96:b4:85:97:85:85:ff:96:1b:fe:49:94:
                    9e:89:ae:62:b7:28:e3:0e:1e:21:42:95:61:50:5e:
                    a5:67:fe:82:fe:5f:3f:cc:6d:01:ef:66:3e:bb:98:
                    2b:fb:80:d7:02:6e:38:22:b6:cb:2f:1f:33:47:06:
                    09:2b:a7:73:8d:d2:c0:33:d6:32:93:57:fb:8a:5b:
                    02:5f:27:17:04:36:ed:ca:e4:0d:58:42:0e:ce:9f:
                    40:d5:93:f0:19:e0:9e:70:29:22:5c:34:5a:bd:c6:
                    0d:c6:88:8a:d0:95:09:93:5e:4d:97:ca:4d:75:8f:
                    66:fc:02:ba:a9:50:6f:16:ae:6b:2c:f3:03:c0:91:
                    53:dc:a9:5e:08:17:1f:a9:35:ce:6e:1c:7f:3d:89:
                    ec:1c:77:02:a4:86:1f:22:db:29:37:4a:05:33:58:
                    e2:8b:96:d7:58:ae:3c:29:6c:f3:87:b5:45:30:a9:
                    3e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AD:70:7C:64:0A:AE:D7:20:EC:C0:81:B6:C8:72:A1:45:48:44:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f6a7349f-b762-3f77-b73c-9bdd3f6430d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.96.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:14:e7:c8:ae:71:11:da:37:76:79:1d:1f:70:77:63:3b:a2:
         8d:47:b8:bb:bc:02:73:db:79:51:fd:35:c3:8f:86:c8:dd:f7:
         e5:80:45:c0:0a:75:ac:5e:c0:78:08:ab:3d:e1:ca:f3:83:f1:
         92:73:db:fc:c8:23:c9:62:7d:10:9d:b7:a4:51:01:46:53:64:
         6a:93:dd:d4:4d:d4:8c:97:9c:c9:af:41:50:89:3f:6f:ca:f2:
         4f:7a:ba:53:5a:06:4b:3c:31:82:5a:69:5f:be:eb:44:b3:3a:
         8f:d4:0d:6c:a5:2a:ab:94:62:a3:ce:da:39:9a:67:c5:a9:9f:
         89:54:9c:f1:fa:25:3b:95:88:d4:7f:fc:af:35:e7:f5:e9:0e:
         fc:46:1a:df:64:60:61:63:aa:09:0c:d0:83:fb:0b:90:2f:dd:
         e9:ee:7b:5a:cf:0d:35:61:c7:50:d2:01:9e:53:16:7d:df:a5:
         d4:a5:f9:57:00:4b:bc:d8:f1:81:23:b0:f0:42:63:bb:d0:e8:
         b9:af:e2:81:ba:3e:4c:85:fe:6e:ca:b1:c1:5c:ba:a1:bb:39:
         bb:39:36:9b:53:6c:dd:4a:86:19:41:00:62:24:47:ef:df:84:
         89:50:60:4a:76:31:ac:2e:9b:d9:a4:68:15:37:bc:ab:de:f1:
         c0:d1:8c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----