Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0fd10e7c-ac62-3586-a09c-f0280dc0cfaa.roa
File:                     0fd10e7c-ac62-3586-a09c-f0280dc0cfaa.roa (raw, json)
Hash identifier:          ABAydMk7YaN5XdlYasEVIxSLMrQ3jahxqBa2aNHhlYU=
Subject key identifier:   DA:A1:1E:87:17:7A:32:A4:F7:1F:D2:E0:1A:BB:2A:55:D2:1A:F6:EB
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858409593CA5BE48F2F27638DD000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0fd10e7c-ac62-3586-a09c-f0280dc0cfaa.roa
Signing time:             Sat 14 Jan 2023 12:00:00 +0000
ROA not before:           Sat 14 Jan 2023 12:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        16.177.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:95:93:ca:5b:e4:8f:2f:27:63:8d:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 12:00:00 2023 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=6d34aeb3-af7e-4701-9994-b7d5594bfc90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f1:c4:5d:28:b4:80:28:f8:19:d3:a8:9f:8f:
                    f6:29:d4:4a:bb:9d:3e:86:7a:b2:52:c3:9f:f0:74:
                    39:d6:15:92:2d:3a:65:80:6e:a8:6e:8e:16:53:9a:
                    18:75:4b:0f:3a:62:3e:f7:fb:25:15:3d:d5:87:bb:
                    35:83:89:0b:aa:6e:c6:1e:24:f0:1e:a8:2b:b4:7e:
                    a8:a2:3a:3e:e7:02:ce:8b:dd:72:04:3f:4e:0a:85:
                    85:78:f8:bb:be:42:7d:f0:53:04:e2:35:af:43:22:
                    d1:ed:66:a2:80:95:d2:66:b8:59:bf:a1:0b:5c:25:
                    7f:a9:b2:e4:07:34:70:7e:f4:ee:5b:0a:eb:19:8b:
                    a6:0b:0e:f5:aa:73:07:e6:ed:f4:8d:12:5f:6f:4c:
                    33:65:fb:6f:46:8e:47:09:28:d1:4a:c1:d3:68:ac:
                    09:eb:31:55:33:c0:20:29:f4:a3:98:75:f3:14:34:
                    82:28:6a:c9:44:2e:b2:63:94:c8:88:bc:81:8d:3c:
                    28:a1:0b:7d:2f:03:42:03:02:be:9e:9a:8a:67:fd:
                    50:40:69:83:33:f9:7e:20:19:da:71:1c:91:0b:3d:
                    ee:29:44:72:4d:fa:31:58:19:3d:7c:4c:82:8e:ff:
                    a2:ea:5f:7b:39:42:4d:2b:9a:98:6c:05:af:3e:77:
                    fa:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A1:1E:87:17:7A:32:A4:F7:1F:D2:E0:1A:BB:2A:55:D2:1A:F6:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0fd10e7c-ac62-3586-a09c-f0280dc0cfaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.177.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:9a:52:11:5a:e0:b3:d3:96:5d:3e:da:5b:65:43:b0:a1:b3:
         6a:9d:37:99:62:ea:99:dd:93:9d:cb:f3:94:2b:50:06:6b:f6:
         c9:f9:b3:06:91:c8:cd:e2:a8:bb:de:4b:a0:8f:65:db:11:6d:
         40:9d:25:45:0e:45:63:53:ea:b4:97:2b:03:b0:2c:63:16:12:
         8a:bc:45:91:5d:38:1e:c9:70:38:18:b5:13:73:64:f2:0b:76:
         89:33:52:b5:b9:a4:b3:ae:11:d2:7a:d1:91:04:da:14:6f:f7:
         0a:1e:e4:bc:3f:30:0d:a0:7a:ee:c1:69:16:c9:a9:f5:1a:4f:
         4f:67:f7:f7:d3:58:a0:41:66:fe:6c:f1:79:2e:64:cd:4f:b3:
         db:1d:be:15:54:f3:d5:76:89:44:45:35:42:11:18:b2:7b:45:
         77:2d:a5:9e:ba:54:b9:ec:78:24:04:87:cc:0c:87:92:87:d2:
         55:31:df:b2:8b:d1:05:59:0e:95:d4:84:42:b3:4f:7a:1d:5b:
         92:f6:18:a8:cd:2d:7e:09:72:43:af:63:ff:a4:be:e8:7c:a2:
         ae:a4:b6:cb:95:26:40:1c:8a:45:c5:fa:3f:5c:64:3d:a5:13:
         b7:86:d1:1a:80:e6:c0:4d:38:00:30:03:4e:bb:b3:df:d6:b4:
         6b:27:42:9a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECVk8pb5I8vJ2ON0AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDExNDEyMDAwMFoXDTIzMDIxOTA1MDAwMFowLzEtMCsGA1UEAxMk
NmQzNGFlYjMtYWY3ZS00NzAxLTk5OTQtYjdkNTU5NGJmYzkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/HEXSi0gCj4GdOon4/2KdRKu50+hnqyUsOf
8HQ51hWSLTplgG6obo4WU5oYdUsPOmI+9/slFT3Vh7s1g4kLqm7GHiTwHqgrtH6o
ojo+5wLOi91yBD9OCoWFePi7vkJ98FME4jWvQyLR7WaigJXSZrhZv6ELXCV/qbLk
BzRwfvTuWwrrGYumCw71qnMH5u30jRJfb0wzZftvRo5HCSjRSsHTaKwJ6zFVM8Ag
KfSjmHXzFDSCKGrJRC6yY5TIiLyBjTwooQt9LwNCAwK+npqKZ/1QQGmDM/l+IBna
cRyRCz3uKURyTfoxWBk9fEyCjv+i6l97OUJNK5qYbAWvPnf6lQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNqhHocXejKk9x/S4Bq7KlXSGvbrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMGZkMTBlN2MtYWM2Mi0z
NTg2LWEwOWMtZjAyODBkYzBjZmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAELEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAQJpSEVrgs9OWXT7aW2VDsKGzap03mWLqmd2TncvzlCtQBmv2yfmzBpHI
zeKou95LoI9l2xFtQJ0lRQ5FY1PqtJcrA7AsYxYSirxFkV04HslwOBi1E3Nk8gt2
iTNStbmks64R0nrRkQTaFG/3Ch7kvD8wDaB67sFpFsmp9RpPT2f399NYoEFm/mzx
eS5kzU+z2x2+FVTz1XaJREU1QhEYsntFdy2lnrpUuex4JASHzAyHkofSVTHfsovR
BVkOldSEQrNPeh1bkvYYqM0tfglyQ69j/6S+6HyirqS2y5UmQByKRcX6P1xkPaUT
t4bRGoDmwE04ADADTruz39a0aydCmg==
-----END CERTIFICATE-----