Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1bd9b4c1-b716-3d54-bd48-83265eebc0a5.roa
File:                     1bd9b4c1-b716-3d54-bd48-83265eebc0a5.roa (raw, json)
Hash identifier:          rrZkFizLmKOcFs96iRokV7Uf656rM2lGQLVtZwmm32E=
Subject key identifier:   74:09:A7:D5:D5:FA:6F:67:C8:37:5D:EA:9A:5B:42:B5:0C:3E:6E:22
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E95BAFD03986965816465D480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1bd9b4c1-b716-3d54-bd48-83265eebc0a5.roa
Signing time:             Fri 15 Jul 2022 12:00:00 +0000
ROA not before:           Fri 15 Jul 2022 12:00:00 +0000
ROA not after:            Sat 20 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        70.232.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:95:ba:fd:03:98:69:65:81:64:65:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 15 12:00:00 2022 GMT
            Not After : Aug 20 04:00:00 2022 GMT
        Subject: CN=939b524b-094c-4122-abc2-5335cc285a89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5c:0f:d4:cf:c1:b4:2a:24:ed:23:59:fa:87:
                    a2:dc:1a:ee:e9:76:54:30:3d:da:10:cc:48:93:90:
                    6b:86:cd:8b:9e:20:3a:be:6a:8b:67:d4:af:b0:c0:
                    5b:78:f8:c9:3c:5b:83:ef:ed:85:72:36:c1:68:3b:
                    5a:69:db:a7:25:5d:46:32:08:02:7e:47:5f:89:cc:
                    25:16:9e:45:00:78:37:7d:f2:31:f3:57:a8:ba:1c:
                    e6:31:d7:c6:c8:ac:28:df:e4:5a:17:4a:09:d9:ad:
                    53:c0:4b:7e:98:dc:2f:5e:b2:65:a6:43:d3:57:84:
                    89:fe:09:31:aa:70:cd:b5:9d:3c:e0:42:c5:ac:d7:
                    20:5d:e2:4e:4b:9e:4e:82:02:ec:a0:d9:bc:01:0b:
                    47:cc:f6:f2:bc:b0:2a:48:9c:d9:fd:ef:99:3d:65:
                    b3:7a:8c:4a:cf:6d:e6:de:d2:34:52:b0:cb:7c:82:
                    a1:3d:40:f5:4d:3e:d9:20:59:1f:18:6b:5a:c8:c4:
                    a0:c9:75:67:be:ff:2f:cf:df:03:26:ff:c5:ba:2b:
                    64:8c:31:fc:b9:81:88:f7:fb:af:86:ef:59:e2:e2:
                    0e:25:38:87:99:a3:d1:36:2b:55:13:c8:96:6b:f7:
                    d8:50:c0:79:ba:9a:94:9e:8a:99:c3:4a:99:9c:f8:
                    d6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:09:A7:D5:D5:FA:6F:67:C8:37:5D:EA:9A:5B:42:B5:0C:3E:6E:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1bd9b4c1-b716-3d54-bd48-83265eebc0a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.232.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:6a:b8:db:cd:c7:5d:59:75:a9:b6:6b:91:5c:05:4f:dc:b7:
         0b:11:d8:7b:62:07:b7:18:41:47:7e:ea:e7:dc:37:46:dd:60:
         1d:ad:80:ce:97:db:2b:b8:87:7c:1f:52:82:c0:2c:dd:8b:cf:
         fa:90:d3:60:ad:34:a9:f6:02:17:6a:01:9b:db:60:9e:6b:f0:
         fd:ba:ad:c6:f0:96:f1:a5:68:28:5a:80:57:1f:f1:c2:2e:47:
         4d:fd:bf:b8:b9:8c:6d:63:f4:58:bc:0c:e4:6f:45:67:6b:27:
         3f:01:d9:74:8e:a6:4a:b7:04:b1:23:fd:09:7b:6c:35:fe:8f:
         8c:78:bc:17:51:0b:19:a9:f9:4e:e7:9c:6e:73:66:3d:0d:6c:
         26:c6:31:51:23:c2:3d:2b:d1:6f:e5:e7:d7:e1:e7:96:27:5f:
         e5:e1:b5:34:ed:79:96:60:32:14:c8:f6:d9:9f:8b:2d:a8:84:
         50:50:c8:46:56:d9:b1:56:12:06:97:34:8a:f7:04:f8:cc:47:
         1f:49:d4:a9:15:b6:4c:63:18:8c:db:25:2e:9b:43:05:9e:df:
         81:c4:cc:59:75:6f:1f:84:72:be:99:c0:61:1f:c3:52:c3:23:
         5c:1b:0b:7e:2b:ac:53:bd:4f:d9:f6:3f:55:b5:7f:77:ec:e1:
         b1:52:c0:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD6Vuv0DmGllgWRl1IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcxNTEyMDAwMFoXDTIyMDgyMDA0MDAwMFowLzEtMCsGA1UEAxMk
OTM5YjUyNGItMDk0Yy00MTIyLWFiYzItNTMzNWNjMjg1YTg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplwP1M/BtCok7SNZ+oei3Bru6XZUMD3aEMxI
k5Brhs2LniA6vmqLZ9SvsMBbePjJPFuD7+2FcjbBaDtaadunJV1GMggCfkdficwl
Fp5FAHg3ffIx81eouhzmMdfGyKwo3+RaF0oJ2a1TwEt+mNwvXrJlpkPTV4SJ/gkx
qnDNtZ084ELFrNcgXeJOS55OggLsoNm8AQtHzPbyvLAqSJzZ/e+ZPWWzeoxKz23m
3tI0UrDLfIKhPUD1TT7ZIFkfGGtayMSgyXVnvv8vz98DJv/FuitkjDH8uYGI9/uv
hu9Z4uIOJTiHmaPRNitVE8iWa/fYUMB5upqUnoqZw0qZnPjWYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHQJp9XV+m9nyDdd6ppbQrUMPm4iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMWJkOWI0YzEtYjcxNi0z
ZDU0LWJkNDgtODMyNjVlZWJjMGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRuhAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACpquNvNx11Zdam2a5FcBU/ctwsR2HtiB7cYQUd+6ufcN0bdYB2tgM6X
2yu4h3wfUoLALN2Lz/qQ02CtNKn2AhdqAZvbYJ5r8P26rcbwlvGlaChagFcf8cIu
R039v7i5jG1j9Fi8DORvRWdrJz8B2XSOpkq3BLEj/Ql7bDX+j4x4vBdRCxmp+U7n
nG5zZj0NbCbGMVEjwj0r0W/l59fh55YnX+XhtTTteZZgMhTI9tmfiy2ohFBQyEZW
2bFWEgaXNIr3BPjMRx9J1KkVtkxjGIzbJS6bQwWe34HEzFl1bx+Ecr6ZwGEfw1LD
I1wbC34rrFO9T9n2P1W1f3fs4bFSwMg=
-----END CERTIFICATE-----