Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/03afbd26-15b6-31e3-a2dc-4b4f5af33aab.roa
File:                     03afbd26-15b6-31e3-a2dc-4b4f5af33aab.roa (raw, json)
Hash identifier:          nCJlOJUT6V85SN5EGUXkVnXNiQ6c7OB7W2y3FBqtzkw=
Subject key identifier:   B3:D6:22:43:5E:92:23:70:4E:9D:93:FD:5B:D2:09:75:C2:81:37:1A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B85B98638528633399372BC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/03afbd26-15b6-31e3-a2dc-4b4f5af33aab.roa
Signing time:             Fri 27 Jan 2023 12:00:00 +0000
ROA not before:           Fri 27 Jan 2023 12:00:00 +0000
ROA not after:            Sat 04 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        71.145.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b8:5b:98:63:85:28:63:33:99:37:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 27 12:00:00 2023 GMT
            Not After : Mar  4 05:00:00 2023 GMT
        Subject: CN=bdf7c852-0928-4300-b079-73c3833075d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e7:de:6c:b9:ff:c2:da:b2:79:c9:2c:83:4c:
                    2f:4c:a3:13:1b:75:dd:fb:34:44:3e:23:3e:2c:f2:
                    c7:79:ed:32:1d:74:ef:8f:c6:4f:28:3d:2b:be:59:
                    58:54:b3:13:14:5c:d7:ef:f0:43:f7:32:73:73:d6:
                    c7:f4:1b:db:09:6b:a3:28:a7:28:ac:df:5f:24:16:
                    f7:0a:24:1f:b6:09:1f:bd:27:b3:1b:04:4c:9f:f6:
                    1d:c2:3d:4d:78:06:a9:83:09:f0:30:32:d3:c4:6c:
                    3d:47:2c:2e:3e:57:99:74:50:85:9d:30:32:1b:1e:
                    10:3f:46:aa:ae:1a:23:93:fe:51:98:96:ab:58:b5:
                    8c:25:f4:5f:fd:1d:a2:8e:3a:8c:83:9b:b0:5e:f0:
                    a1:32:2f:f7:c3:c5:79:d3:f4:71:a9:a5:22:64:f5:
                    dd:dd:5f:c8:9d:d8:98:17:a0:b1:c9:2a:6b:dc:ce:
                    e7:65:7e:01:43:20:bc:c8:c4:65:a1:b7:47:b6:d5:
                    d2:d5:da:18:9d:86:46:32:0f:9e:85:f1:d8:ea:f3:
                    83:ee:ae:0d:90:91:bc:66:69:ff:51:06:19:42:a3:
                    c9:89:47:4b:89:21:3e:c0:25:09:f9:8a:cf:16:3d:
                    4d:78:fc:97:6d:5d:f4:b1:94:dd:68:c8:3e:5d:c7:
                    42:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D6:22:43:5E:92:23:70:4E:9D:93:FD:5B:D2:09:75:C2:81:37:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/03afbd26-15b6-31e3-a2dc-4b4f5af33aab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.145.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:72:cc:4e:33:b7:27:b7:af:7b:2a:15:d9:cd:48:22:a8:f9:
         95:b3:f0:66:17:1e:ed:b1:16:4a:fb:40:9e:f8:87:9b:88:93:
         28:c7:11:d3:ca:96:1a:b0:2c:6e:69:2e:01:e0:8a:ae:5a:2a:
         d0:8d:64:9a:d2:12:57:cf:ec:42:be:d4:f2:e8:10:fe:56:4d:
         52:3c:08:f7:48:33:38:03:58:a7:00:28:54:df:8a:ab:b0:44:
         f1:20:ab:97:41:89:da:d3:ae:b0:1c:60:1e:c7:b0:79:1e:2f:
         7b:2d:bd:47:59:ea:17:ea:a1:3e:42:72:15:8a:7a:04:77:88:
         f5:44:fc:90:0a:3c:92:9f:df:d1:99:96:23:d6:9f:e9:81:bb:
         c5:bb:55:8c:48:7c:80:e8:18:76:b0:b2:27:d5:6f:65:4f:e4:
         08:fb:37:96:43:b1:ec:11:6d:51:6e:9b:df:6d:37:96:98:67:
         6f:e0:6e:72:5b:01:ec:1e:7a:4f:a7:1e:09:5b:74:b3:ad:d9:
         03:ff:dd:ca:d1:0d:c1:e4:c4:9f:ee:ac:db:d1:f8:56:48:d8:
         42:65:1f:15:ad:b5:0b:bf:db:70:97:5f:3d:24:27:ed:35:c6:
         df:52:24:c2:ad:31:07:6e:6f:fb:7b:6d:81:90:5d:66:3d:ff:
         ac:44:00:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEC4W5hjhShjM5k3K8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEyNzEyMDAwMFoXDTIzMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
YmRmN2M4NTItMDkyOC00MzAwLWIwNzktNzNjMzgzMzA3NWQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOfebLn/wtqyecksg0wvTKMTG3Xd+zREPiM+
LPLHee0yHXTvj8ZPKD0rvllYVLMTFFzX7/BD9zJzc9bH9BvbCWujKKcorN9fJBb3
CiQftgkfvSezGwRMn/Ydwj1NeAapgwnwMDLTxGw9RywuPleZdFCFnTAyGx4QP0aq
rhojk/5RmJarWLWMJfRf/R2ijjqMg5uwXvChMi/3w8V50/RxqaUiZPXd3V/IndiY
F6CxySpr3M7nZX4BQyC8yMRlobdHttXS1doYnYZGMg+ehfHY6vOD7q4NkJG8Zmn/
UQYZQqPJiUdLiSE+wCUJ+YrPFj1NePyXbV30sZTdaMg+XcdC5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLPWIkNekiNwTp2T/VvSCXXCgTcaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMDNhZmJkMjYtMTViNi0z
MWUzLWEyZGMtNGI0ZjVhZjMzYWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGR5GAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGJyzE4ztye3r3sqFdnNSCKo+ZWz8GYXHu2xFkr7QJ74h5uIkyjHEdPK
lhqwLG5pLgHgiq5aKtCNZJrSElfP7EK+1PLoEP5WTVI8CPdIMzgDWKcAKFTfiquw
RPEgq5dBidrTrrAcYB7HsHkeL3stvUdZ6hfqoT5CchWKegR3iPVE/JAKPJKf39GZ
liPWn+mBu8W7VYxIfIDoGHawsifVb2VP5Aj7N5ZDsewRbVFum99tN5aYZ2/gbnJb
Aeweek+nHglbdLOt2QP/3crRDcHkxJ/urNvR+FZI2EJlHxWttQu/23CXXz0kJ+01
xt9SJMKtMQdub/t7bYGQXWY9/6xEAOw=
-----END CERTIFICATE-----