Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1cdecc3b-9656-3adb-a58d-9f4c6a56776c.roa
File:                     1cdecc3b-9656-3adb-a58d-9f4c6a56776c.roa (raw, json)
Hash identifier:          FH6BQim90RYBlxtukxuxN2wQRBMwmY+i8GcE09u07co=
Subject key identifier:   26:F6:D7:9F:C5:E0:13:D2:19:F2:B3:A5:2D:C0:E6:E9:50:ED:78:71
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F8B1CBDCCF512B7577217B100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1cdecc3b-9656-3adb-a58d-9f4c6a56776c.roa
Signing time:             Tue 11 Oct 2022 18:48:07 +0000
ROA not before:           Tue 11 Oct 2022 18:48:07 +0000
ROA not after:            Wed 16 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        56.147.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8b:1c:bd:cc:f5:12:b7:57:72:17:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 11 18:48:07 2022 GMT
            Not After : Nov 16 05:00:00 2022 GMT
        Subject: CN=e7ef459d-18c7-4d53-b6fe-5635e0a5c45d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:84:39:d3:23:63:81:27:c8:72:6d:67:57:5d:
                    c1:83:90:87:68:79:4e:ec:a8:a7:a2:91:91:87:34:
                    ce:ce:9f:75:48:49:33:51:97:82:2b:10:83:d2:93:
                    42:06:53:7c:b0:37:a9:5d:38:fa:53:a7:e9:42:9b:
                    7a:86:b3:8b:4a:35:67:d0:83:96:a5:3e:78:5f:86:
                    98:46:be:fe:93:32:5f:9f:99:ec:90:28:44:15:06:
                    64:e5:b9:73:98:ee:77:45:fb:45:0a:9e:5f:06:59:
                    d7:72:ed:9b:b8:2c:7c:d7:aa:c4:09:7e:38:7d:07:
                    fa:d8:b9:ef:ae:91:53:2f:95:1e:f3:5d:78:d4:15:
                    74:bf:3d:bc:26:cd:bd:de:6f:a8:6f:b4:b1:2c:82:
                    82:d0:cb:77:d5:89:65:67:d2:9c:1e:03:9c:25:98:
                    f7:34:19:a2:60:f3:35:c4:39:9a:3c:97:4a:d5:10:
                    5c:6e:be:99:ad:6c:0b:f9:f4:33:ea:48:aa:08:b1:
                    ef:57:6b:1b:82:3f:c4:4f:f3:91:10:c1:a0:7c:10:
                    c6:18:03:7f:b9:5e:5f:e9:0a:50:e1:1b:a2:ad:23:
                    d3:60:1e:af:de:04:4c:d8:14:6b:70:9f:d0:95:44:
                    c4:0d:9d:e1:b2:da:51:71:7d:0f:a0:bb:71:49:ae:
                    8b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F6:D7:9F:C5:E0:13:D2:19:F2:B3:A5:2D:C0:E6:E9:50:ED:78:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1cdecc3b-9656-3adb-a58d-9f4c6a56776c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.147.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ed:a2:29:31:76:12:4c:e2:c6:39:d0:51:fd:e2:7a:2e:11:
         32:f9:00:15:5a:3c:37:c2:0f:a5:76:9e:c6:5b:04:3f:d7:da:
         23:bf:0c:58:19:97:f0:5e:95:20:a4:91:36:66:90:75:a6:8a:
         79:1c:b2:60:7c:ea:9a:5e:b1:96:a9:77:1a:ef:30:4e:e0:f0:
         96:04:26:59:00:12:4d:56:eb:a2:44:ab:e4:d3:55:80:af:6b:
         73:04:7d:bf:a5:bd:b8:68:de:89:1b:c6:a4:fd:51:71:25:d1:
         cb:18:e3:04:79:fe:c4:73:7a:8d:cb:9e:e1:4e:c8:19:04:9a:
         d0:c0:94:df:6a:e9:69:3a:c0:b5:21:e9:38:12:25:ce:fc:1a:
         3c:78:e4:dc:76:e5:77:9d:f6:b1:4d:69:9e:4f:19:56:5e:fe:
         1d:72:73:58:2e:89:1b:d4:42:d3:73:59:25:8f:ad:9b:6e:c7:
         22:0c:ae:b0:2a:bf:09:44:7b:d6:34:56:6b:77:4d:5c:e7:45:
         3e:ed:9b:64:73:df:b6:54:38:e9:47:6a:9f:ec:d7:30:b6:22:
         f7:9f:cb:7c:fa:83:63:da:70:0b:33:fe:e3:f7:44:6c:ce:e9:
         f5:a2:92:cc:6c:6b:e4:1e:db:3c:99:fc:30:ac:ee:c3:47:04:
         15:f3:ed:93
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+LHL3M9RK3V3IXsQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAxMTE4NDgwN1oXDTIyMTExNjA1MDAwMFowLzEtMCsGA1UEAxMk
ZTdlZjQ1OWQtMThjNy00ZDUzLWI2ZmUtNTYzNWUwYTVjNDVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oQ50yNjgSfIcm1nV13Bg5CHaHlO7KinopGR
hzTOzp91SEkzUZeCKxCD0pNCBlN8sDepXTj6U6fpQpt6hrOLSjVn0IOWpT54X4aY
Rr7+kzJfn5nskChEFQZk5blzmO53RftFCp5fBlnXcu2buCx816rECX44fQf62Lnv
rpFTL5Ue81141BV0vz28Js293m+ob7SxLIKC0Mt31YllZ9KcHgOcJZj3NBmiYPM1
xDmaPJdK1RBcbr6ZrWwL+fQz6kiqCLHvV2sbgj/ET/OREMGgfBDGGAN/uV5f6QpQ
4RuirSPTYB6v3gRM2BRrcJ/QlUTEDZ3hstpRcX0PoLtxSa6L0wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCb215/F4BPSGfKzpS3A5ulQ7XhxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMWNkZWNjM2ItOTY1Ni0z
YWRiLWE1OGQtOWY0YzZhNTY3NzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOJMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAFO2iKTF2EkzixjnQUf3iei4RMvkAFVo8N8IPpXaexlsEP9faI78MWBmX
8F6VIKSRNmaQdaaKeRyyYHzqml6xlql3Gu8wTuDwlgQmWQASTVbrokSr5NNVgK9r
cwR9v6W9uGjeiRvGpP1RcSXRyxjjBHn+xHN6jcue4U7IGQSa0MCU32rpaTrAtSHp
OBIlzvwaPHjk3Hbld532sU1pnk8ZVl7+HXJzWC6JG9RC03NZJY+tm27HIgyusCq/
CUR71jRWa3dNXOdFPu2bZHPftlQ46Udqn+zXMLYi95/LfPqDY9pwCzP+4/dEbM7p
9aKSzGxr5B7bPJn8MKzuw0cEFfPtkw==
-----END CERTIFICATE-----