Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0954ce38-af71-31ae-b3a1-161fe58e4d59.roa
File:                     0954ce38-af71-31ae-b3a1-161fe58e4d59.roa (raw, json)
Hash identifier:          W3dPHNFBLy+u8FSQxU9bRVYAuhPjdp4EjkacPjZWpzI=
Subject key identifier:   40:A7:C4:1B:3E:A7:6C:FB:4C:6B:10:8A:C3:AC:F9:AE:1E:9E:F2:F8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B94A0510F7836ACC64A03680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0954ce38-af71-31ae-b3a1-161fe58e4d59.roa
Signing time:             Fri 27 Jan 2023 12:00:00 +0000
ROA not before:           Fri 27 Jan 2023 12:00:00 +0000
ROA not after:            Sat 04 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        72.44.32.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b9:4a:05:10:f7:83:6a:cc:64:a0:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 27 12:00:00 2023 GMT
            Not After : Mar  4 05:00:00 2023 GMT
        Subject: CN=57323b8a-a563-4a67-9223-71d53fa2a4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:da:db:c7:aa:49:85:8c:59:4a:39:6f:1f:82:
                    7b:66:5a:1f:0f:92:1f:d3:2c:30:1d:48:c9:12:99:
                    98:4c:43:67:73:be:55:22:fe:02:9e:a4:61:dc:90:
                    0c:55:d9:59:df:cd:56:26:4c:1f:64:db:71:a1:94:
                    46:26:c5:82:2e:58:c8:20:03:1f:a3:c8:d4:b6:d1:
                    ce:6c:83:2b:f8:43:5e:a4:5a:5f:cc:0d:ca:1e:35:
                    5e:63:e2:8d:ea:9e:90:58:9d:49:25:8b:eb:63:d5:
                    b7:d3:e7:da:60:32:6a:1e:e7:32:45:02:6d:43:65:
                    1d:87:c0:5d:14:b5:2d:f9:b7:7e:09:65:0f:f2:4d:
                    d6:dd:31:5a:bc:00:b8:a6:07:2f:92:47:9e:9e:09:
                    a1:81:ac:fc:da:f5:83:75:81:fd:a6:80:ad:85:25:
                    da:4d:63:ef:0d:39:7a:96:e6:59:37:a1:c0:83:8b:
                    68:fa:cb:b1:53:f7:12:09:53:7b:08:fc:aa:a4:84:
                    e5:ed:f8:af:46:d0:0e:fd:21:a9:d4:cd:4f:9b:6f:
                    b8:63:8c:d0:22:12:8f:c1:5c:65:ef:b6:20:f5:d0:
                    7e:06:c3:14:8b:4a:06:dd:f3:47:12:f5:49:8b:b8:
                    7d:95:97:0a:b5:6a:40:f3:d4:d4:fc:fa:b8:83:79:
                    bc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A7:C4:1B:3E:A7:6C:FB:4C:6B:10:8A:C3:AC:F9:AE:1E:9E:F2:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0954ce38-af71-31ae-b3a1-161fe58e4d59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:c4:48:db:a0:fa:e0:62:f7:3b:58:53:e5:7f:68:4b:04:bf:
         2b:46:36:17:c0:5d:e3:0c:8d:82:99:25:28:6a:59:90:ba:b0:
         00:ea:2d:24:8b:7b:8e:ce:6d:d9:d2:ab:91:e6:39:7a:ef:ac:
         ba:b6:c7:77:4f:26:5c:16:73:e1:cc:89:02:e1:c8:0d:74:e1:
         5a:27:08:a0:e8:84:eb:e0:99:b0:86:fe:27:b7:b2:95:ce:dd:
         08:43:67:e7:b7:3b:39:43:61:10:94:bd:a6:b3:a0:42:22:8d:
         22:38:15:12:14:14:00:e6:08:32:28:d4:1f:6c:15:26:b0:51:
         c0:df:b3:3f:20:6c:f1:1c:47:f0:1c:e6:91:36:36:62:ef:03:
         4b:bd:df:85:ed:cb:0a:66:af:28:8b:a2:ba:aa:b3:80:1e:55:
         22:c9:59:4e:db:d5:58:b3:38:8e:24:8f:28:e0:36:f0:dc:82:
         50:a9:e8:dc:9d:06:24:fa:40:d6:96:1d:84:bb:9b:59:12:e0:
         90:46:de:fc:aa:b3:d1:88:8a:0a:e1:79:1b:3d:76:00:08:e8:
         8c:1c:71:63:a1:37:66:3d:a0:be:4d:84:69:80:11:49:c2:52:
         e0:16:74:9e:7d:18:9c:b7:39:de:6d:6b:23:94:94:a5:8b:bd:
         78:bc:82:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEC5SgUQ94NqzGSgNoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEyNzEyMDAwMFoXDTIzMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
NTczMjNiOGEtYTU2My00YTY3LTkyMjMtNzFkNTNmYTJhNGY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9rbx6pJhYxZSjlvH4J7ZlofD5If0ywwHUjJ
EpmYTENnc75VIv4CnqRh3JAMVdlZ381WJkwfZNtxoZRGJsWCLljIIAMfo8jUttHO
bIMr+ENepFpfzA3KHjVeY+KN6p6QWJ1JJYvrY9W30+faYDJqHucyRQJtQ2Udh8Bd
FLUt+bd+CWUP8k3W3TFavAC4pgcvkkeengmhgaz82vWDdYH9poCthSXaTWPvDTl6
luZZN6HAg4to+suxU/cSCVN7CPyqpITl7fivRtAO/SGp1M1Pm2+4Y4zQIhKPwVxl
77Yg9dB+BsMUi0oG3fNHEvVJi7h9lZcKtWpA89TU/Pq4g3m8vwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFECnxBs+p2z7TGsQisOs+a4envL4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMDk1NGNlMzgtYWY3MS0z
MWFlLWIzYTEtMTYxZmU1OGU0ZDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSCwgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEXESNug+uBi9ztYU+V/aEsEvytGNhfAXeMMjYKZJShqWZC6sADqLSSL
e47ObdnSq5HmOXrvrLq2x3dPJlwWc+HMiQLhyA104VonCKDohOvgmbCG/ie3spXO
3QhDZ+e3OzlDYRCUvaazoEIijSI4FRIUFADmCDIo1B9sFSawUcDfsz8gbPEcR/Ac
5pE2NmLvA0u934XtywpmryiLorqqs4AeVSLJWU7b1VizOI4kjyjgNvDcglCp6Nyd
BiT6QNaWHYS7m1kS4JBG3vyqs9GIigrheRs9dgAI6IwccWOhN2Y9oL5NhGmAEUnC
UuAWdJ59GJy3Od5tayOUlKWLvXi8glw=
-----END CERTIFICATE-----