Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/317d0f1c-1444-3fa3-b2f4-3c09e60e970a.roa
File:                     317d0f1c-1444-3fa3-b2f4-3c09e60e970a.roa (raw, json)
Hash identifier:          zXlr06pjD4fYB+CTE31jCMcUWljOiL96ndSs8H8WPKg=
Subject key identifier:   32:E7:3E:B1:09:E9:ED:C5:25:F4:68:3A:3E:A1:55:F8:52:2E:11:1A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F539906900241485DC4D91280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/317d0f1c-1444-3fa3-b2f4-3c09e60e970a.roa
Signing time:             Wed 21 Sep 2022 12:00:00 +0000
ROA not before:           Wed 21 Sep 2022 12:00:00 +0000
ROA not after:            Thu 27 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.90.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:53:99:06:90:02:41:48:5d:c4:d9:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 21 12:00:00 2022 GMT
            Not After : Oct 27 04:00:00 2022 GMT
        Subject: CN=b2af7307-ae10-4f3a-9cfd-188ea7c65ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6a:d6:b5:f2:df:a3:e4:25:db:3f:8d:5e:89:
                    a6:28:d2:6f:2f:eb:d8:9c:23:bb:ae:cb:00:0f:15:
                    3d:51:3d:8e:46:09:4c:15:d6:7a:f2:32:41:e3:8b:
                    bd:58:ef:f9:39:aa:b5:27:8e:cb:e4:d1:7d:63:19:
                    11:db:bf:9e:9e:59:3c:b4:c5:ec:8c:81:b9:d6:f9:
                    65:a8:aa:ed:11:ba:c1:3b:ef:d9:cd:76:fb:f7:02:
                    ab:f0:13:e5:60:64:2c:bf:66:ea:41:df:51:e3:30:
                    78:96:31:58:49:0b:22:e0:78:0f:0b:47:eb:41:10:
                    1a:04:23:77:5e:89:eb:2e:e0:3e:c4:e7:c9:ba:9e:
                    4c:c5:b7:b3:80:a1:f9:10:c6:b9:a4:c9:3b:f6:11:
                    a7:a1:bb:4e:12:11:13:1a:eb:0d:11:5e:99:2c:d1:
                    06:b0:3a:03:51:46:84:48:67:8f:89:09:2d:aa:f8:
                    31:2a:77:28:a2:e7:db:92:7f:71:9e:be:ec:cc:ff:
                    24:e6:cc:4a:e6:d2:89:ad:e5:17:f4:27:cd:e4:76:
                    a1:20:80:25:de:c1:1a:9d:08:1a:c4:5f:08:fc:48:
                    ef:2f:9e:38:31:ec:87:67:2e:d4:4b:07:cd:c8:60:
                    3f:35:ce:9d:78:62:a7:6c:0d:92:de:f3:1a:3e:27:
                    d0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E7:3E:B1:09:E9:ED:C5:25:F4:68:3A:3E:A1:55:F8:52:2E:11:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/317d0f1c-1444-3fa3-b2f4-3c09e60e970a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.90.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:d3:6c:bf:5f:ca:3c:e3:c8:e7:b2:cb:53:8e:c1:4d:91:77:
         38:c7:db:2a:33:0c:d7:7c:b5:7f:84:93:af:b1:f4:75:07:03:
         57:d2:c4:e4:62:18:01:48:5f:d8:52:f9:9d:47:75:20:0a:06:
         e6:2f:76:7e:06:31:f8:80:6a:24:84:74:6e:a6:c8:d6:32:d3:
         fc:ac:92:86:1a:73:8e:3e:28:0a:91:c8:bf:19:f9:d2:b7:2b:
         44:94:11:11:b1:65:e2:14:2a:a6:a5:63:91:47:ec:7e:bd:ac:
         83:d7:a7:2f:4d:a5:80:da:d1:05:53:f8:79:53:d4:5b:ad:71:
         4c:52:08:e4:d9:a6:4b:8a:42:4e:eb:ef:ca:44:7d:00:5d:8e:
         a2:dc:a0:b0:69:4a:bb:ff:f9:8d:02:2e:a3:0d:e5:7c:f7:1d:
         e1:99:4f:90:71:e7:4f:97:f5:34:68:31:5d:52:3f:39:e7:b9:
         51:bc:8c:69:9c:8f:6b:b9:0f:c9:98:44:de:1f:b1:79:d0:70:
         d7:1c:5a:a6:94:22:a9:33:45:f4:2b:4d:35:b3:8c:e6:c1:3b:
         04:2f:24:28:a6:fb:37:84:0c:83:ae:03:de:04:7c:e3:a6:a1:
         54:c3:85:d3:5e:ff:2b:d2:6e:fb:10:b7:17:92:ba:80:e3:a6:
         99:f3:50:ee
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9TmQaQAkFIXcTZEoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDkyMTEyMDAwMFoXDTIyMTAyNzA0MDAwMFowLzEtMCsGA1UEAxMk
YjJhZjczMDctYWUxMC00ZjNhLTljZmQtMTg4ZWE3YzY1ZmYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGrWtfLfo+Ql2z+NXommKNJvL+vYnCO7rssA
DxU9UT2ORglMFdZ68jJB44u9WO/5Oaq1J47L5NF9YxkR27+enlk8tMXsjIG51vll
qKrtEbrBO+/ZzXb79wKr8BPlYGQsv2bqQd9R4zB4ljFYSQsi4HgPC0frQRAaBCN3
XonrLuA+xOfJup5MxbezgKH5EMa5pMk79hGnobtOEhETGusNEV6ZLNEGsDoDUUaE
SGePiQktqvgxKncooufbkn9xnr7szP8k5sxK5tKJreUX9CfN5HahIIAl3sEanQga
xF8I/EjvL544MeyHZy7USwfNyGA/Nc6deGKnbA2S3vMaPifQ0wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDLnPrEJ6e3FJfRoOj6hVfhSLhEaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzE3ZDBmMWMtMTQ0NC0z
ZmEzLWIyZjQtM2MwOWU2MGU5NzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEFowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAeNNsv1/KPOPI57LLU47BTZF3OMfbKjMM13y1f4STr7H0dQcDV9LE5GIY
AUhf2FL5nUd1IAoG5i92fgYx+IBqJIR0bqbI1jLT/KyShhpzjj4oCpHIvxn50rcr
RJQREbFl4hQqpqVjkUfsfr2sg9enL02lgNrRBVP4eVPUW61xTFII5NmmS4pCTuvv
ykR9AF2OotygsGlKu//5jQIuow3lfPcd4ZlPkHHnT5f1NGgxXVI/Oee5UbyMaZyP
a7kPyZhE3h+xedBw1xxappQiqTNF9CtNNbOM5sE7BC8kKKb7N4QMg64D3gR846ah
VMOF017/K9Ju+xC3F5K6gOOmmfNQ7g==
-----END CERTIFICATE-----