Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fc358842-c754-315b-ab6f-8be40ecae156.roa
File:                     fc358842-c754-315b-ab6f-8be40ecae156.roa (raw, json)
Hash identifier:          8rn7tX5SgxvPgCHPJ7orhCW9n2eUPxW3s8qI6LsmETg=
Subject key identifier:   CA:32:54:27:CA:A0:ED:80:1F:FC:A9:88:B0:00:34:35:FD:AD:86:AF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858403AEEE69F07CF5945812A3900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fc358842-c754-315b-ab6f-8be40ecae156.roa
Signing time:             Tue 13 Dec 2022 12:00:00 +0000
ROA not before:           Tue 13 Dec 2022 12:00:00 +0000
ROA not after:            Wed 18 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        15.178.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3a:ee:e6:9f:07:cf:59:45:81:2a:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 13 12:00:00 2022 GMT
            Not After : Jan 18 05:00:00 2023 GMT
        Subject: CN=7df60a1f-86e2-41d6-abfa-997d44fa7c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6d:75:7b:8f:bb:69:34:81:39:f7:f6:c7:1c:
                    5a:0c:17:65:27:0c:f3:9a:fe:a8:2e:67:b2:5c:7b:
                    1f:50:69:f2:88:82:6c:83:fe:69:9a:f1:cd:1c:ac:
                    a8:73:f8:59:ed:36:19:ea:ad:bd:b7:e3:37:37:ee:
                    f4:a7:20:69:d7:db:46:46:91:e5:b4:bc:90:fd:be:
                    2d:57:4d:10:00:49:02:2b:b1:29:03:6f:31:4a:78:
                    99:9e:0a:b8:23:df:45:2e:c2:73:69:16:3f:c2:83:
                    c6:01:6c:13:5f:5f:13:5e:de:bf:93:21:14:c9:3c:
                    de:18:ba:01:d8:0e:f6:2b:f6:55:83:9a:95:fc:bc:
                    eb:fc:31:b0:2c:ce:9d:ba:60:a2:84:c3:08:7c:dd:
                    05:14:10:41:0a:84:d2:2a:fb:8f:68:b3:41:99:9d:
                    5d:e3:6b:43:06:b4:42:ed:1a:d3:a0:4d:11:49:20:
                    83:c0:32:83:ba:33:07:fe:0f:62:94:f5:fb:7e:fa:
                    b9:02:b4:c8:a5:e4:b8:29:52:43:ad:a7:d1:47:52:
                    c6:91:72:34:8d:6d:af:4e:4c:ed:d8:f4:72:8c:06:
                    91:95:0b:b1:84:3a:92:87:68:35:b1:49:e7:83:25:
                    96:c2:14:43:80:4a:fb:19:f7:79:68:3c:a4:f1:da:
                    00:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:32:54:27:CA:A0:ED:80:1F:FC:A9:88:B0:00:34:35:FD:AD:86:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fc358842-c754-315b-ab6f-8be40ecae156.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.178.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:7b:39:7f:1e:96:e3:b4:1d:91:3b:76:0f:02:d7:71:dd:36:
         ed:81:dd:6e:c9:7e:cc:85:bf:58:2a:f1:41:5e:20:e8:16:64:
         ad:b8:10:0a:d6:a0:f8:4a:a1:3e:a5:77:49:ed:08:20:4b:8e:
         11:88:73:c9:63:fe:87:fa:9d:5c:a7:52:31:38:87:47:94:c8:
         98:d3:6e:30:3f:e9:80:20:e5:ab:32:db:36:66:5c:70:6f:ea:
         db:5f:b5:8a:1d:75:b9:a0:4f:b2:fa:4a:c2:e1:f8:2a:f1:f0:
         bd:12:ae:ad:9d:e5:d5:02:ee:4a:30:5f:66:ff:3a:07:72:83:
         e0:0a:f9:df:42:52:cd:51:24:33:6f:fa:12:23:0c:69:77:ed:
         26:57:c2:dc:d6:e9:05:65:a3:64:94:9b:43:56:f5:84:ed:92:
         3a:a1:bb:6f:63:df:4d:4e:7b:60:2a:c0:a9:cd:04:e4:02:4e:
         a5:ec:01:3f:7f:f2:23:c2:7a:87:80:01:c0:50:9c:93:b0:c0:
         44:06:2c:a6:11:2c:8f:ee:2e:fc:b8:84:55:39:83:3d:46:88:
         dc:07:64:8f:b0:e2:66:88:84:40:8f:c8:9d:71:36:fd:61:dd:
         86:7a:2b:56:8c:72:a3:a0:cc:d7:c2:61:dc:b2:99:85:3c:a3:
         72:fb:98:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----