Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/27144ec0-9ac5-3080-86c1-6350e47764cc.roa
File:                     27144ec0-9ac5-3080-86c1-6350e47764cc.roa (raw, json)
Hash identifier:          yuryivrsjQb5NlMAZAn4fDfQrE3xCRUaqEFJvdoZIl0=
Subject key identifier:   0D:1B:DC:CB:22:0D:6C:28:96:5C:01:34:AF:32:38:61:D3:7A:0A:CC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858406A3F5350A8D7BC3FD4E273C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/27144ec0-9ac5-3080-86c1-6350e47764cc.roa
Signing time:             Fri 30 Dec 2022 19:54:08 +0000
ROA not before:           Fri 30 Dec 2022 19:54:08 +0000
ROA not after:            Sat 04 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        164.195.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6a:3f:53:50:a8:d7:bc:3f:d4:e2:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 30 19:54:08 2022 GMT
            Not After : Feb  4 05:00:00 2023 GMT
        Subject: CN=274300f7-a0f0-42ca-aeb4-6e6299c0f870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d1:56:ee:27:f5:b3:9a:ce:5f:9e:b9:90:01:
                    78:de:bc:6a:9f:f5:5b:86:f5:ec:1f:1b:4d:17:04:
                    64:4d:eb:61:1d:cf:2a:2a:10:7a:68:eb:d6:56:e9:
                    2a:0c:36:80:02:d5:8b:89:79:8c:83:46:3f:7d:df:
                    a0:9b:7b:71:55:8d:07:e3:ad:9b:9f:e1:9d:6b:67:
                    5d:b8:17:82:06:9d:4d:66:a4:5e:e7:f4:a0:21:51:
                    29:ac:a0:b6:77:e4:03:bf:d6:c4:c0:f6:4d:01:a3:
                    26:93:2d:86:a7:b8:7f:64:0b:46:5d:c0:e6:5b:7f:
                    75:e2:6c:d4:b6:7a:2b:9f:9e:de:1f:59:45:bd:27:
                    34:96:60:f6:11:db:8e:fa:43:4b:8a:43:0d:26:5c:
                    da:07:61:39:52:ca:a2:85:11:f1:d5:c2:0e:af:2f:
                    90:79:92:66:86:05:bf:e5:fb:24:1b:2e:46:01:ca:
                    cc:90:cd:ac:2a:c9:63:62:a1:d3:69:55:df:0f:8e:
                    72:22:7a:6b:72:95:69:a1:47:61:f8:e5:45:47:81:
                    91:76:1c:ea:51:19:95:8d:c5:11:12:e0:24:6a:f6:
                    82:02:26:92:ec:cd:9a:51:fb:69:e7:c2:82:0e:07:
                    c4:a8:3a:72:d9:96:1a:24:39:43:a0:55:60:44:57:
                    cb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1B:DC:CB:22:0D:6C:28:96:5C:01:34:AF:32:38:61:D3:7A:0A:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/27144ec0-9ac5-3080-86c1-6350e47764cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.195.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:73:39:da:7b:12:cc:b7:05:11:57:ad:41:41:b2:40:57:de:
         c4:9c:c8:ff:a9:dd:4f:97:e9:d0:9b:af:d6:2c:e4:20:d0:00:
         84:45:62:bc:a5:c8:26:82:83:4b:3c:cf:8e:13:55:4c:04:1a:
         f0:07:04:9a:17:54:d2:d4:0f:1b:35:90:fc:1c:5f:f8:ea:29:
         61:38:a1:a4:91:0e:39:39:6d:24:5d:ae:fe:ae:78:3e:20:45:
         06:01:22:38:6d:74:65:b3:30:0e:ff:0b:b0:70:c2:2c:3b:34:
         18:86:c9:42:2e:28:6c:02:50:a1:a2:20:f0:1c:90:18:a6:b1:
         e2:2b:4f:5d:1f:bc:88:5b:e5:6a:58:08:f1:40:1a:ea:5a:0a:
         0d:c4:a6:89:de:e5:e1:f2:6a:d4:b7:51:71:90:b7:99:a6:a6:
         df:61:4c:14:89:67:a3:81:24:ac:c2:11:88:3f:5a:24:14:37:
         16:a4:6c:91:00:45:fd:cf:02:8d:6e:00:a8:78:61:81:fc:bd:
         14:5e:97:bc:dc:5d:6f:5c:0e:38:89:5a:ee:81:ce:33:2e:c2:
         2f:39:73:68:2e:a5:38:56:52:d2:d0:7e:7d:9f:4a:45:ad:36:
         e8:72:5a:b6:12:27:64:34:15:4d:bf:55:63:3a:64:0f:21:d5:
         dc:d9:d7:cc
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBqP1NQqNe8P9Tic8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIzMDE5NTQwOFoXDTIzMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
Mjc0MzAwZjctYTBmMC00MmNhLWFlYjQtNmU2Mjk5YzBmODcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldFW7if1s5rOX565kAF43rxqn/VbhvXsHxtN
FwRkTethHc8qKhB6aOvWVukqDDaAAtWLiXmMg0Y/fd+gm3txVY0H462bn+Gda2dd
uBeCBp1NZqRe5/SgIVEprKC2d+QDv9bEwPZNAaMmky2Gp7h/ZAtGXcDmW3914mzU
tnorn57eH1lFvSc0lmD2EduO+kNLikMNJlzaB2E5UsqihRHx1cIOry+QeZJmhgW/
5fskGy5GAcrMkM2sKsljYqHTaVXfD45yInprcpVpoUdh+OVFR4GRdhzqURmVjcUR
EuAkavaCAiaS7M2aUftp58KCDgfEqDpy2ZYaJDlDoFVgRFfLmwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFA0b3MsiDWwollwBNK8yOGHTegrMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjcxNDRlYzAtOWFjNS0z
MDgwLTg2YzEtNjM1MGU0Nzc2NGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApMMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAAnM52nsSzLcFEVetQUGyQFfexJzI/6ndT5fp0Juv1izkINAAhEVivKXI
JoKDSzzPjhNVTAQa8AcEmhdU0tQPGzWQ/Bxf+OopYTihpJEOOTltJF2u/q54PiBF
BgEiOG10ZbMwDv8LsHDCLDs0GIbJQi4obAJQoaIg8ByQGKax4itPXR+8iFvlalgI
8UAa6loKDcSmid7l4fJq1LdRcZC3maam32FMFIlno4EkrMIRiD9aJBQ3FqRskQBF
/c8CjW4AqHhhgfy9FF6XvNxdb1wOOIla7oHOMy7CLzlzaC6lOFZS0tB+fZ9KRa02
6HJathInZDQVTb9VYzpkDyHV3NnXzA==
-----END CERTIFICATE-----