Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/10c01610-4094-3f17-9bb4-402f25f2b45c.roa
File:                     10c01610-4094-3f17-9bb4-402f25f2b45c.roa (raw, json)
Hash identifier:          CwP6S5vFwUeYEG7ytxYYUQF6yv3G7fie+H92R38LuAs=
Subject key identifier:   AF:E1:27:79:FC:A4:A6:78:F0:D0:7D:24:17:27:33:4F:B3:D7:BA:B2
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584094F03DBC001DDF2A90979B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/10c01610-4094-3f17-9bb4-402f25f2b45c.roa
Signing time:             Sat 14 Jan 2023 12:00:00 +0000
ROA not before:           Sat 14 Jan 2023 12:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        16.206.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:94:f0:3d:bc:00:1d:df:2a:90:97:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 12:00:00 2023 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=0ed13fb1-382e-470a-8741-29190926d1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c4:2f:0d:70:5f:80:5b:2e:06:ad:c6:2f:10:
                    3a:64:4b:ab:a5:92:18:43:8b:e2:d8:e2:78:e3:71:
                    21:1c:04:26:d9:90:0e:f0:b0:38:9b:c7:05:bf:e5:
                    81:bc:e6:6e:19:f8:7d:3f:04:8c:89:72:a3:6c:a4:
                    0a:8d:ce:a5:e4:e9:a9:46:dd:2d:a6:fe:b7:84:bb:
                    b9:4f:d4:fb:0e:12:55:35:cf:96:e8:00:0b:e0:5b:
                    cb:b8:5d:af:af:47:a5:32:d5:c0:b4:62:cf:2c:3b:
                    e5:63:32:5a:37:b4:7f:b6:3a:cd:92:a5:80:d1:37:
                    23:2e:fd:21:04:ab:09:b9:03:a2:f8:83:0d:0c:64:
                    2f:6a:6a:8e:5b:44:0f:e4:75:bd:1b:30:32:db:fc:
                    8e:6e:a9:9d:a8:90:bc:0a:d5:d5:bb:06:bf:57:05:
                    6d:44:5e:78:07:92:35:73:1f:ae:80:be:ad:b6:77:
                    98:7c:11:42:76:c5:fa:6c:cb:10:bb:b6:3e:15:cb:
                    16:da:74:cf:a2:11:6f:67:b9:1d:51:49:6c:74:e8:
                    e0:da:c2:be:a2:37:a5:f3:28:0b:01:8c:52:eb:0a:
                    c7:df:53:f7:74:38:f2:79:76:e5:a9:8b:05:22:84:
                    f3:85:56:2a:39:de:91:58:c0:4f:a8:6f:21:84:06:
                    0a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E1:27:79:FC:A4:A6:78:F0:D0:7D:24:17:27:33:4F:B3:D7:BA:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/10c01610-4094-3f17-9bb4-402f25f2b45c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.206.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:fb:79:19:82:38:e2:a5:49:cd:65:30:99:ff:75:fe:27:a2:
         0e:6b:5c:e9:53:93:f4:44:62:b6:48:bf:bb:60:23:2e:79:58:
         4f:cc:0e:40:57:b9:8f:fc:b0:72:80:7a:6f:e6:dd:84:33:96:
         69:2e:52:3b:5f:5c:f9:c7:2f:c2:de:1e:e0:67:d4:9a:a0:cc:
         b2:8d:a0:9f:9f:27:ce:ea:7a:20:25:ae:fa:ee:0c:64:62:02:
         b7:b9:fc:47:0e:5d:d5:18:a7:1b:74:e1:dd:da:02:52:53:83:
         0e:b8:71:ad:68:70:51:d1:4f:51:ed:33:06:ad:3d:8b:34:3e:
         0b:ce:14:19:16:aa:c8:b2:42:ff:30:3f:e9:48:5d:42:52:79:
         28:2b:71:ea:ba:9f:a9:7d:82:4a:31:1a:97:21:1d:db:59:9c:
         40:54:51:94:94:01:2d:81:00:28:21:29:fe:01:52:88:11:1e:
         46:a9:3a:78:a9:c0:19:20:f4:ad:68:7e:b5:3a:f4:a8:a1:57:
         7e:05:29:fd:0f:c7:fc:e0:9c:31:f5:39:e4:75:eb:67:02:c0:
         b7:87:1c:b1:50:85:ae:96:4f:8e:79:4b:34:88:84:9c:35:43:
         23:e9:d5:78:d4:41:0d:0f:74:04:56:6a:c2:82:09:bd:96:30:
         8d:9c:6f:f4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECU8D28AB3fKpCXm4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDExNDEyMDAwMFoXDTIzMDIxOTA1MDAwMFowLzEtMCsGA1UEAxMk
MGVkMTNmYjEtMzgyZS00NzBhLTg3NDEtMjkxOTA5MjZkMWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMQvDXBfgFsuBq3GLxA6ZEurpZIYQ4vi2OJ4
43EhHAQm2ZAO8LA4m8cFv+WBvOZuGfh9PwSMiXKjbKQKjc6l5OmpRt0tpv63hLu5
T9T7DhJVNc+W6AAL4FvLuF2vr0elMtXAtGLPLDvlYzJaN7R/tjrNkqWA0TcjLv0h
BKsJuQOi+IMNDGQvamqOW0QP5HW9GzAy2/yObqmdqJC8CtXVuwa/VwVtRF54B5I1
cx+ugL6ttneYfBFCdsX6bMsQu7Y+FcsW2nTPohFvZ7kdUUlsdOjg2sK+ojel8ygL
AYxS6wrH31P3dDjyeXblqYsFIoTzhVYqOd6RWMBPqG8hhAYKiwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFK/hJ3n8pKZ48NB9JBcnM0+z17qyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMTBjMDE2MTAtNDA5NC0z
ZjE3LTliYjQtNDAyZjI1ZjJiNDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEM4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAIPt5GYI44qVJzWUwmf91/ieiDmtc6VOT9ERitki/u2AjLnlYT8wOQFe5
j/ywcoB6b+bdhDOWaS5SO19c+ccvwt4e4GfUmqDMso2gn58nzup6ICWu+u4MZGIC
t7n8Rw5d1RinG3Th3doCUlODDrhxrWhwUdFPUe0zBq09izQ+C84UGRaqyLJC/zA/
6UhdQlJ5KCtx6rqfqX2CSjEalyEd21mcQFRRlJQBLYEAKCEp/gFSiBEeRqk6eKnA
GSD0rWh+tTr0qKFXfgUp/Q/H/OCcMfU55HXrZwLAt4ccsVCFrpZPjnlLNIiEnDVD
I+nVeNRBDQ90BFZqwoIJvZYwjZxv9A==
-----END CERTIFICATE-----