Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/28d79679-83d1-3949-892c-d9db42dccf83.roa
File:                     28d79679-83d1-3949-892c-d9db42dccf83.roa (raw, json)
Hash identifier:          5t4uxoMsI3cDYMbnKrfGM/LZ+/16GcqjNcKil8UmtZ4=
Subject key identifier:   9F:DC:7A:A2:C3:18:E1:8B:FF:D9:A8:86:44:ED:DE:CB:1D:E4:C3:B4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840AA7CB112005D417A38680AC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/28d79679-83d1-3949-892c-d9db42dccf83.roa
Signing time:             Sun 22 Jan 2023 12:00:00 +0000
ROA not before:           Sun 22 Jan 2023 12:00:00 +0000
ROA not after:            Mon 27 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        161.228.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:aa:7c:b1:12:00:5d:41:7a:38:68:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 22 12:00:00 2023 GMT
            Not After : Feb 27 05:00:00 2023 GMT
        Subject: CN=8c940f0d-6dfb-43d6-9981-951fa0c39d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:58:40:8e:2c:a7:d6:58:64:d7:63:1f:fd:5c:
                    b6:72:12:a7:28:57:77:db:47:67:04:10:d2:a7:ba:
                    41:d6:42:e0:e5:31:ed:ea:d5:6a:8f:49:4e:f1:72:
                    ce:21:18:6a:73:3d:e8:e9:f7:01:0a:0c:d8:82:e5:
                    dd:1a:98:53:4a:c8:c8:32:30:83:91:10:e4:11:3c:
                    7f:7c:66:d1:39:4b:4f:d2:c6:e5:c7:8b:72:1b:01:
                    b0:74:63:86:8b:f2:0b:34:4e:96:ee:4b:09:9f:02:
                    5b:78:0b:06:69:35:44:47:3b:7e:94:84:4e:7e:fd:
                    ac:2d:59:18:70:9d:b8:d9:4c:03:3a:87:ff:19:e3:
                    f0:6c:b9:12:3e:ac:ef:2a:e5:8e:a9:27:b4:f2:50:
                    86:ec:69:b4:0f:7a:9f:a7:a1:6b:72:7a:c8:47:26:
                    46:4e:ac:6b:36:fc:fd:e3:cb:85:15:af:f6:4a:48:
                    fd:2c:e6:c4:ad:e3:70:60:71:c1:ee:42:80:87:41:
                    5b:45:ee:68:05:66:5b:4a:0b:c6:82:26:43:8b:80:
                    4a:66:92:1d:ee:76:02:67:3f:e9:35:50:db:c5:8d:
                    ed:71:60:ee:ca:c0:ba:37:1e:e4:e1:93:ca:7f:cb:
                    95:f9:4d:d8:48:53:d2:7a:88:16:2a:07:5c:90:f4:
                    aa:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DC:7A:A2:C3:18:E1:8B:FF:D9:A8:86:44:ED:DE:CB:1D:E4:C3:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/28d79679-83d1-3949-892c-d9db42dccf83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.228.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:2a:b6:24:c2:5f:15:e1:ad:de:4c:c2:86:ea:8d:e8:6d:be:
         31:24:9f:1a:10:a4:40:ce:ae:3b:07:59:47:d2:bf:3e:fc:ac:
         ea:de:15:6d:63:99:89:eb:d7:77:ed:34:f8:c0:28:62:78:35:
         17:4a:7e:2a:2f:9b:e5:c4:e6:2d:e1:bc:36:77:c6:2e:1d:31:
         e8:f6:c9:cf:57:a5:e1:06:67:80:85:7e:d0:07:ad:2e:40:f2:
         f5:2a:e0:0e:3b:61:16:a5:fb:c7:17:be:5d:96:0f:bb:16:30:
         30:43:ad:e0:ad:f1:2e:bf:f0:bd:6b:ee:5d:28:da:90:23:2d:
         f2:0b:7e:d3:f9:6c:45:7b:51:42:a9:b1:e0:d3:38:55:2c:6c:
         2d:16:cc:56:ff:67:cf:52:a4:19:47:ab:bb:80:f3:16:27:2c:
         c1:06:0d:a4:2a:8c:a1:ab:de:19:cd:61:eb:67:df:fd:59:0a:
         e0:15:99:07:e2:1a:31:45:71:f9:a7:19:ce:60:5d:b6:28:77:
         3e:99:0c:37:dd:f5:04:0c:91:e1:a2:74:ca:24:b8:d0:9b:57:
         b7:14:cb:b1:28:03:08:77:ba:51:f0:e2:c0:fd:7c:5e:b9:c5:
         29:89:59:c5:cc:1d:5b:df:b2:c6:b6:77:c1:f6:45:2d:de:83:
         c4:bb:00:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWECqfLESAF1BejhoCsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEyMjEyMDAwMFoXDTIzMDIyNzA1MDAwMFowLzEtMCsGA1UEAxMk
OGM5NDBmMGQtNmRmYi00M2Q2LTk5ODEtOTUxZmEwYzM5ZDMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VhAjiyn1lhk12Mf/Vy2chKnKFd320dnBBDS
p7pB1kLg5THt6tVqj0lO8XLOIRhqcz3o6fcBCgzYguXdGphTSsjIMjCDkRDkETx/
fGbROUtP0sblx4tyGwGwdGOGi/ILNE6W7ksJnwJbeAsGaTVERzt+lIROfv2sLVkY
cJ242UwDOof/GePwbLkSPqzvKuWOqSe08lCG7Gm0D3qfp6FrcnrIRyZGTqxrNvz9
48uFFa/2Skj9LObEreNwYHHB7kKAh0FbRe5oBWZbSgvGgiZDi4BKZpId7nYCZz/p
NVDbxY3tcWDuysC6Nx7k4ZPKf8uV+U3YSFPSeogWKgdckPSqkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ/ceqLDGOGL/9mohkTt3ssd5MO0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjhkNzk2NzktODNkMS0z
OTQ5LTg5MmMtZDlkYjQyZGNjZjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGoeTAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAwqtiTCXxXhrd5MwobqjehtvjEknxoQpEDOrjsHWUfSvz78rOreFW1j
mYnr13ftNPjAKGJ4NRdKfiovm+XE5i3hvDZ3xi4dMej2yc9XpeEGZ4CFftAHrS5A
8vUq4A47YRal+8cXvl2WD7sWMDBDreCt8S6/8L1r7l0o2pAjLfILftP5bEV7UUKp
seDTOFUsbC0WzFb/Z89SpBlHq7uA8xYnLMEGDaQqjKGr3hnNYetn3/1ZCuAVmQfi
GjFFcfmnGc5gXbYodz6ZDDfd9QQMkeGidMokuNCbV7cUy7EoAwh3ulHw4sD9fF65
xSmJWcXMHVvfssa2d8H2RS3eg8S7AOY=
-----END CERTIFICATE-----