Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2623509b-45ae-38af-bb11-8b987b90ba48.roa
File:                     2623509b-45ae-38af-bb11-8b987b90ba48.roa (raw, json)
Hash identifier:          7UNkzV7+c7CEQhRzgnz7hkqzzTzWE28IwnjsSRhK4WY=
Subject key identifier:   F1:A8:6E:8D:BB:69:2B:90:C4:D1:FB:7D:79:C5:D6:30:B2:EE:BD:08
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584086BF16CAE3E592466CC6FF80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2623509b-45ae-38af-bb11-8b987b90ba48.roa
Signing time:             Mon 09 Jan 2023 12:00:00 +0000
ROA not before:           Mon 09 Jan 2023 12:00:00 +0000
ROA not after:            Tue 14 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        20.142.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:86:bf:16:ca:e3:e5:92:46:6c:c6:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  9 12:00:00 2023 GMT
            Not After : Feb 14 05:00:00 2023 GMT
        Subject: CN=c350b2cf-ee92-461b-87d5-c71a22a877ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e2:83:5a:8e:71:50:a6:fc:a7:3d:85:59:14:
                    ba:fb:af:8f:03:ed:88:a6:5f:9c:d6:51:86:63:da:
                    26:2f:7c:a0:f8:04:21:d7:1b:8c:ae:dd:c8:9d:91:
                    95:82:73:2a:e0:19:58:fb:a2:ce:be:0a:34:00:c2:
                    c3:9c:35:b1:28:a5:7a:21:f8:b2:55:4f:5f:b0:28:
                    81:90:06:d0:6e:0e:c2:1b:7d:f7:b4:59:d4:be:67:
                    bb:6e:2f:90:d1:30:69:24:86:78:b7:6a:01:13:84:
                    51:a5:5e:e2:3e:88:83:8c:ac:4b:27:a0:74:40:1f:
                    f0:b1:51:10:eb:02:95:0c:81:3a:98:63:24:8d:60:
                    5a:1b:09:ea:ec:7e:8e:7e:64:35:d7:e6:23:a4:5c:
                    de:7e:2f:77:1c:14:20:4c:b5:3f:fb:76:05:35:63:
                    e7:51:b6:3d:ad:80:b2:79:cb:4a:ed:ea:f1:4a:a0:
                    d4:69:28:f4:a8:5e:26:e0:36:92:7b:87:ab:39:42:
                    33:a7:b4:83:c8:1e:5b:86:7b:bf:86:fe:a2:24:b3:
                    b5:95:cb:52:fa:e1:e6:de:6b:1a:6b:70:49:c7:fa:
                    d1:9c:67:2f:0e:c7:b0:ba:09:ab:92:2a:e9:ac:2e:
                    4b:36:41:72:15:d9:31:bc:a2:24:a3:5d:ad:40:21:
                    25:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A8:6E:8D:BB:69:2B:90:C4:D1:FB:7D:79:C5:D6:30:B2:EE:BD:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2623509b-45ae-38af-bb11-8b987b90ba48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.142.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:1c:8a:73:fb:27:0e:13:89:83:7b:ce:64:3b:d6:42:e5:d2:
         89:6e:6e:17:23:30:c1:f2:2b:50:5e:7c:49:b1:9a:4b:da:4c:
         f8:7e:cc:94:f9:36:d7:58:12:b1:e1:38:55:ab:5d:eb:12:0e:
         64:da:0b:aa:43:c7:6f:02:46:49:f2:de:54:33:e5:5c:8c:22:
         a7:6d:fc:56:f3:d7:c2:92:b0:6d:12:a5:7c:b8:b7:d8:fd:ca:
         c6:a2:d1:0e:d9:b5:d3:f3:ae:32:84:c9:df:75:a0:e3:47:f0:
         d3:18:48:c5:dc:ec:93:27:41:7d:df:d9:f4:62:4d:46:4a:1f:
         f2:9b:aa:c7:7a:96:ba:3a:d3:65:1a:c4:92:b9:76:ed:19:a8:
         1e:5c:96:c5:f5:c9:a5:f3:21:cf:ad:39:35:c0:a1:d5:c3:97:
         e3:e3:15:55:45:ce:8c:89:e9:f5:ec:e8:58:a0:c7:fd:c9:b6:
         40:7e:51:19:f0:9f:99:e5:d9:08:74:3e:13:ce:b7:a5:18:29:
         29:96:a3:84:88:33:22:b4:3d:d0:b7:1d:32:8f:ca:9a:b7:29:
         95:fd:a9:e6:a9:a3:3e:36:b6:df:b1:30:9d:de:0d:ae:05:4b:
         b0:ec:c2:2e:f2:3b:ab:ef:dd:d8:1b:69:4b:db:35:71:fc:99:
         ca:53:27:a8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECGvxbK4+WSRmzG/4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEwOTEyMDAwMFoXDTIzMDIxNDA1MDAwMFowLzEtMCsGA1UEAxMk
YzM1MGIyY2YtZWU5Mi00NjFiLTg3ZDUtYzcxYTIyYTg3N2VlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+KDWo5xUKb8pz2FWRS6+6+PA+2Ipl+c1lGG
Y9omL3yg+AQh1xuMrt3InZGVgnMq4BlY+6LOvgo0AMLDnDWxKKV6IfiyVU9fsCiB
kAbQbg7CG333tFnUvme7bi+Q0TBpJIZ4t2oBE4RRpV7iPoiDjKxLJ6B0QB/wsVEQ
6wKVDIE6mGMkjWBaGwnq7H6OfmQ11+YjpFzefi93HBQgTLU/+3YFNWPnUbY9rYCy
ectK7erxSqDUaSj0qF4m4DaSe4erOUIzp7SDyB5bhnu/hv6iJLO1lctS+uHm3msa
a3BJx/rRnGcvDsewugmrkirprC5LNkFyFdkxvKIko12tQCElAwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPGobo27aSuQxNH7fXnF1jCy7r0IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjYyMzUwOWItNDVhZS0z
OGFmLWJiMTEtOGI5ODdiOTBiYTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAFI4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAERyKc/snDhOJg3vOZDvWQuXSiW5uFyMwwfIrUF58SbGaS9pM+H7MlPk2
11gSseE4Vatd6xIOZNoLqkPHbwJGSfLeVDPlXIwip238VvPXwpKwbRKlfLi32P3K
xqLRDtm10/OuMoTJ33Wg40fw0xhIxdzskydBfd/Z9GJNRkof8puqx3qWujrTZRrE
krl27RmoHlyWxfXJpfMhz605NcCh1cOX4+MVVUXOjInp9ezoWKDH/cm2QH5RGfCf
meXZCHQ+E863pRgpKZajhIgzIrQ90LcdMo/Kmrcplf2p5qmjPja237Ewnd4NrgVL
sOzCLvI7q+/d2BtpS9s1cfyZylMnqA==
-----END CERTIFICATE-----