Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/07031c1f-e481-3a1a-a3ae-633bacfddaa4.roa
File:                     07031c1f-e481-3a1a-a3ae-633bacfddaa4.roa (raw, json)
Hash identifier:          zI56jOSctZCy0NVQXRtGlQX+TaGakApCmDKHelnzXDk=
Subject key identifier:   95:42:74:B3:B8:2D:A7:7F:3B:6F:9A:7B:28:3B:27:FB:6B:2D:E3:77
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DAD4A427B004E1E1DA8301B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/07031c1f-e481-3a1a-a3ae-633bacfddaa4.roa
Signing time:             Sat 23 Apr 2022 12:00:00 +0000
ROA not before:           Sat 23 Apr 2022 12:00:00 +0000
ROA not after:            Sun 29 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.177.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ad:4a:42:7b:00:4e:1e:1d:a8:30:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 23 12:00:00 2022 GMT
            Not After : May 29 04:00:00 2022 GMT
        Subject: CN=5916dd5d-d7f3-4638-a3dc-bc7c27596f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b5:65:5a:55:47:a8:c5:23:ea:b6:13:ec:62:
                    94:7e:ab:20:cf:cd:af:74:a3:8f:ca:c9:ae:89:4e:
                    7c:88:6e:da:f0:a2:c5:02:f3:64:f9:39:2d:e9:15:
                    c4:3b:33:a5:88:cb:2a:8f:de:16:c9:a9:1e:83:e3:
                    e2:a9:0c:de:3b:08:fa:3d:7f:26:f4:5a:9f:96:e0:
                    53:3d:3d:a8:4d:0d:e4:95:56:63:8c:21:67:d5:d3:
                    b0:00:e7:24:e8:f3:92:21:3b:cd:ae:ed:f3:f0:6a:
                    03:83:e7:88:d9:d4:30:5f:29:1b:b2:3b:0d:dc:63:
                    a2:68:19:92:26:88:9f:ba:8b:db:e1:b2:99:ac:f6:
                    c5:d9:3d:74:ed:13:e6:85:56:8f:52:83:61:55:66:
                    56:ef:8e:db:90:8f:da:5a:cc:a0:18:1d:4d:f3:b4:
                    ed:0a:17:45:ab:ba:81:9e:ac:55:c8:4e:1a:e9:87:
                    38:d8:6a:7e:e4:d6:dd:d6:01:78:57:7f:7b:ce:4c:
                    13:46:2a:15:f5:80:7f:1f:f8:4d:38:92:04:29:02:
                    4c:06:34:85:c1:77:28:11:6a:08:29:58:7d:2c:13:
                    c0:2e:1f:42:4e:b8:96:4c:c6:64:59:b5:9f:03:7c:
                    09:16:16:8f:d8:67:dd:b6:b3:0e:5b:eb:5b:6a:e4:
                    81:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:42:74:B3:B8:2D:A7:7F:3B:6F:9A:7B:28:3B:27:FB:6B:2D:E3:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/07031c1f-e481-3a1a-a3ae-633bacfddaa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.177.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:45:07:5c:6d:7e:7b:6d:59:03:94:b2:fb:69:60:44:50:30:
         48:69:be:e1:30:c4:56:dd:e4:38:58:69:03:d7:24:45:8e:c7:
         88:39:2b:cb:f8:14:40:19:86:ba:c8:a9:bb:fe:bb:22:ed:a1:
         f5:72:4d:79:3c:12:6f:04:e5:d0:66:aa:f9:b7:89:5d:88:0d:
         0a:6a:24:45:96:a6:f1:17:28:c9:b4:d1:bc:c5:04:5d:17:f7:
         e9:08:1d:a5:38:03:8d:47:2c:2d:51:10:11:dc:b6:4a:bb:2c:
         43:7f:9c:a2:cc:f2:f0:28:eb:9f:5c:09:d1:fc:9c:a3:ca:9f:
         83:da:22:a7:1a:f8:3d:0a:db:a7:77:6b:20:cf:f4:17:46:2f:
         62:87:7f:9d:58:5b:40:3f:92:52:13:11:5b:78:53:4e:c9:1a:
         70:9e:5d:bb:76:47:59:e3:ac:a8:37:18:23:1f:8b:b1:60:88:
         46:62:d7:76:ec:59:8f:ba:bf:53:eb:18:7e:2d:5d:73:2a:40:
         b6:cc:36:71:97:0c:70:eb:43:01:ef:00:b8:90:8f:c6:a6:ee:
         e8:ee:94:84:1b:7f:fd:76:1a:d4:a9:93:55:61:c7:57:51:72:
         0f:04:c7:02:8a:1f:d8:56:30:fe:58:75:a9:c8:bc:cc:cd:87:
         4c:aa:47:87
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2tSkJ7AE4eHagwGwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDQyMzEyMDAwMFoXDTIyMDUyOTA0MDAwMFowLzEtMCsGA1UEAxMk
NTkxNmRkNWQtZDdmMy00NjM4LWEzZGMtYmM3YzI3NTk2Zjg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbVlWlVHqMUj6rYT7GKUfqsgz82vdKOPysmu
iU58iG7a8KLFAvNk+Tkt6RXEOzOliMsqj94Wyakeg+PiqQzeOwj6PX8m9FqfluBT
PT2oTQ3klVZjjCFn1dOwAOck6POSITvNru3z8GoDg+eI2dQwXykbsjsN3GOiaBmS
Joifuovb4bKZrPbF2T107RPmhVaPUoNhVWZW747bkI/aWsygGB1N87TtChdFq7qB
nqxVyE4a6Yc42Gp+5Nbd1gF4V397zkwTRioV9YB/H/hNOJIEKQJMBjSFwXcoEWoI
KVh9LBPALh9CTriWTMZkWbWfA3wJFhaP2GfdtrMOW+tbauSBGQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJVCdLO4Lad/O2+aeyg7J/trLeN3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMDcwMzFjMWYtZTQ4MS0z
YTFhLWEzYWUtNjMzYmFjZmRkYWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAELEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAh0UHXG1+e21ZA5Sy+2lgRFAwSGm+4TDEVt3kOFhpA9ckRY7HiDkry/gU
QBmGusipu/67Iu2h9XJNeTwSbwTl0Gaq+beJXYgNCmokRZam8RcoybTRvMUEXRf3
6QgdpTgDjUcsLVEQEdy2SrssQ3+coszy8Cjrn1wJ0fyco8qfg9oipxr4PQrbp3dr
IM/0F0YvYod/nVhbQD+SUhMRW3hTTskacJ5du3ZHWeOsqDcYIx+LsWCIRmLXduxZ
j7q/U+sYfi1dcypAtsw2cZcMcOtDAe8AuJCPxqbu6O6UhBt//XYa1KmTVWHHV1Fy
DwTHAoof2FYw/lh1qci8zM2HTKpHhw==
-----END CERTIFICATE-----