Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f9eef992-f4ca-3e10-92bc-dcbc3d67a62c.roa
File:                     f9eef992-f4ca-3e10-92bc-dcbc3d67a62c.roa (raw, json)
Hash identifier:          bdiIefGVF12BKW2dIHkBwyFX+pnAf9w8ZF3oflG6bBQ=
Subject key identifier:   7D:75:5F:CA:1F:6A:DB:24:34:8D:F3:36:83:40:E7:7F:CE:F5:18:0F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EE24CB2FEAD41360B2D635B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f9eef992-f4ca-3e10-92bc-dcbc3d67a62c.roa
Signing time:             Fri 12 Aug 2022 14:42:08 +0000
ROA not before:           Fri 12 Aug 2022 14:42:08 +0000
ROA not after:            Fri 16 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        54.6.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e2:4c:b2:fe:ad:41:36:0b:2d:63:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 12 14:42:08 2022 GMT
            Not After : Sep 16 04:00:00 2022 GMT
        Subject: CN=aeba3976-247d-497f-a823-fa1c00bf0399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ec:b8:cd:2c:f9:80:f7:e5:e1:6c:8d:23:54:
                    50:57:fb:35:23:74:0b:f0:90:6f:de:25:3a:49:0f:
                    b0:47:f6:62:03:72:65:ae:e0:1b:b4:87:bd:50:f4:
                    c7:76:13:c8:6c:68:bb:9b:20:04:e1:f9:f5:3b:3f:
                    84:fc:34:48:28:45:3b:f0:cc:4d:b6:2e:3c:5a:04:
                    46:65:19:82:df:38:08:ac:57:26:38:f3:39:ab:58:
                    30:7a:a2:c8:41:62:4d:91:b2:ee:2e:dd:cc:9b:08:
                    9c:80:55:4d:f2:ce:18:c9:3f:2a:de:14:6a:f2:a1:
                    5e:29:ff:81:df:20:3c:ad:17:c8:cd:0d:9c:f5:63:
                    33:94:6f:0f:d4:1f:bf:c8:c2:9d:1e:64:26:a8:e6:
                    bd:c3:a9:80:ac:c6:f0:60:10:7c:d2:0c:eb:a3:fc:
                    57:36:79:be:65:3f:88:74:c2:25:79:6c:c3:72:97:
                    4c:26:47:7e:05:a9:47:9d:2a:ec:19:f1:cd:b8:2f:
                    11:33:b0:2c:09:a5:2b:f4:b1:e2:96:6a:21:df:ef:
                    5d:2a:a1:ac:fc:dd:db:ba:78:95:0c:34:4b:88:e9:
                    46:0f:bb:50:de:ba:7d:f6:a5:6e:42:a9:25:43:ba:
                    e8:3c:2e:51:68:81:43:ad:1a:bb:9d:e6:df:52:dc:
                    43:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:75:5F:CA:1F:6A:DB:24:34:8D:F3:36:83:40:E7:7F:CE:F5:18:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f9eef992-f4ca-3e10-92bc-dcbc3d67a62c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.6.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:51:07:dc:56:1f:b1:79:36:bc:f8:f0:3d:bf:25:c8:b9:43:
         fe:8f:ae:55:b3:5b:87:60:4f:90:62:db:7a:79:e5:e7:ef:86:
         97:47:28:73:bb:03:fc:91:2f:03:03:21:30:74:b6:7f:b9:c9:
         f5:ed:6f:ce:5e:cf:5d:55:a7:d6:e1:0e:1e:fe:ba:fd:b0:9f:
         cc:e6:53:cd:1b:19:eb:bc:f6:ca:43:53:d3:b7:3c:bb:3d:c7:
         3d:df:f5:86:ba:1f:f1:11:bf:f6:82:f8:9c:b0:e3:40:f2:93:
         75:fb:fb:27:1c:ea:24:4c:c9:e7:5a:46:20:37:18:0f:31:3c:
         c0:14:7d:2b:46:ad:59:dd:1c:d4:d0:1b:fe:c9:7a:03:86:ee:
         de:36:b5:96:2f:58:00:d5:46:0a:7c:33:c2:2a:bb:f1:80:ab:
         2e:0b:f4:a2:91:1d:c6:8a:6d:11:fa:80:0e:1b:85:10:a0:01:
         ba:03:b7:ac:9d:3e:4b:ac:d9:48:14:d1:47:2d:d5:da:15:64:
         1c:f6:b0:9e:93:bd:05:40:8d:07:76:3a:57:23:2e:f4:c8:71:
         b9:c0:3e:ad:db:a2:66:1d:dc:19:d4:bc:36:d8:1a:02:bf:5b:
         52:b8:fc:1a:5e:c2:ea:9b:4f:6e:9e:ff:1b:6c:41:5e:7b:00:
         f9:8f:bf:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----