Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/351984b6-37eb-3d51-8375-fff0a4b0d9ee.roa
File:                     351984b6-37eb-3d51-8375-fff0a4b0d9ee.roa (raw, json)
Hash identifier:          pVS3odn/3x2nmcobA9WoH/hpNBHfk6Vvq+iq+ToQyK8=
Subject key identifier:   AB:43:0C:B9:0B:2A:61:64:13:EE:66:19:E8:02:B9:87:E9:18:42:90
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C970CE8B45E2DB4E35BAB1840
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/351984b6-37eb-3d51-8375-fff0a4b0d9ee.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        162.254.72.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:97:0c:e8:b4:5e:2d:b4:e3:5b:ab:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=32e5722b-3451-4857-88e3-2a72204cd2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f1:c8:dc:a9:17:5d:7f:3c:79:7e:6a:be:8a:
                    3a:e6:c5:29:f4:4c:36:e6:a0:3a:1c:96:3e:f3:93:
                    f5:28:43:8f:8b:33:a9:62:85:dc:8f:df:b9:f0:cf:
                    12:ba:a4:e9:fa:19:2b:80:51:e6:d8:2e:bc:aa:2f:
                    70:84:f6:3f:b7:98:d6:8e:17:09:bc:f3:32:98:dc:
                    00:4a:b5:6e:e2:da:ac:d8:4c:6a:26:82:4a:77:a7:
                    e0:d3:76:0d:40:ff:b8:39:28:30:c8:dc:c6:1d:7e:
                    de:58:df:60:49:bf:43:f0:d9:6d:42:9a:d1:a5:13:
                    fa:2a:3c:f4:11:94:98:b0:e3:97:b3:6f:73:84:f2:
                    77:64:e5:77:19:3b:4d:83:b5:49:48:2b:1a:a0:fc:
                    cf:3e:99:25:71:3b:39:62:de:a8:2a:ea:a5:15:b9:
                    c0:4f:65:7e:d4:ab:16:a6:76:b4:07:22:f1:f2:0f:
                    78:7a:e7:43:90:40:04:ab:4b:7d:ae:61:19:d0:e5:
                    f9:72:d5:2c:9c:00:b1:c0:f7:26:be:de:a7:ae:bc:
                    5f:12:29:35:b6:cc:fd:f1:d7:57:87:2c:6a:15:66:
                    b2:14:1d:f3:7c:e0:bb:1e:ca:bf:ca:90:bb:89:97:
                    df:31:d2:a6:f2:9d:68:34:8b:27:38:c2:c1:e1:58:
                    80:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:43:0C:B9:0B:2A:61:64:13:EE:66:19:E8:02:B9:87:E9:18:42:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/351984b6-37eb-3d51-8375-fff0a4b0d9ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:de:28:81:9f:1f:27:24:02:3e:4f:4c:2a:a9:ad:82:ff:c0:
         4b:08:e8:8b:55:96:0a:ae:0c:7d:29:27:43:79:5b:f2:a1:35:
         f6:15:4d:12:99:11:6a:2f:db:24:f8:46:3e:c7:7f:a4:bd:98:
         21:6d:5e:07:49:65:82:06:22:82:a3:7e:43:77:46:5f:66:83:
         5b:7b:a5:4c:01:a7:eb:52:66:df:d6:4f:f4:f2:5a:66:27:de:
         8d:b5:86:ff:db:14:5d:b5:d0:69:b0:5c:1e:c3:99:a9:fa:5f:
         69:86:82:3d:3d:97:b6:b7:f2:92:96:f7:fc:46:4e:3f:ee:71:
         49:31:74:c9:95:0a:f6:58:15:76:cb:35:02:34:53:78:89:61:
         63:55:63:0d:c7:6f:c5:99:53:3a:bf:65:f3:16:fc:6d:e8:78:
         a8:6e:ff:28:00:a8:65:2d:59:ca:1c:b4:ea:2e:1d:33:3e:ec:
         1a:8a:dc:e0:21:61:21:bc:f5:e9:48:3a:b4:8b:a2:3f:83:8a:
         a4:45:6e:96:7e:b8:b7:b0:e4:bb:05:92:a1:b1:dc:ec:7c:1b:
         3f:d7:84:b8:f7:28:49:d8:65:1c:f9:3e:1f:b3:1c:ae:5d:9e:
         3c:f8:0a:ad:c0:63:02:7b:1d:e0:84:48:d3:6a:f3:2e:2e:c5:
         45:3f:7d:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDyXDOi0Xi2041urGEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDExNDA1MDAwMFoXDTIyMDIxODA1MDAwMFowLzEtMCsGA1UEAxMk
MzJlNTcyMmItMzQ1MS00ODU3LTg4ZTMtMmE3MjIwNGNkMmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPHI3KkXXX88eX5qvoo65sUp9Ew25qA6HJY+
85P1KEOPizOpYoXcj9+58M8SuqTp+hkrgFHm2C68qi9whPY/t5jWjhcJvPMymNwA
SrVu4tqs2ExqJoJKd6fg03YNQP+4OSgwyNzGHX7eWN9gSb9D8NltQprRpRP6Kjz0
EZSYsOOXs29zhPJ3ZOV3GTtNg7VJSCsaoPzPPpklcTs5Yt6oKuqlFbnAT2V+1KsW
pna0ByLx8g94eudDkEAEq0t9rmEZ0OX5ctUsnACxwPcmvt6nrrxfEik1tsz98ddX
hyxqFWayFB3zfOC7Hsq/ypC7iZffMdKm8p1oNIsnOMLB4ViAuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKtDDLkLKmFkE+5mGegCuYfpGEKQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzUxOTg0YjYtMzdlYi0z
ZDUxLTgzNzUtZmZmMGE0YjBkOWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDov5IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHreKIGfHyckAj5PTCqprYL/wEsI6ItVlgquDH0pJ0N5W/KhNfYVTRKZ
EWov2yT4Rj7Hf6S9mCFtXgdJZYIGIoKjfkN3Rl9mg1t7pUwBp+tSZt/WT/TyWmYn
3o21hv/bFF210GmwXB7Dman6X2mGgj09l7a38pKW9/xGTj/ucUkxdMmVCvZYFXbL
NQI0U3iJYWNVYw3Hb8WZUzq/ZfMW/G3oeKhu/ygAqGUtWcoctOouHTM+7BqK3OAh
YSG89elIOrSLoj+DiqRFbpZ+uLew5LsFkqGx3Ox8Gz/XhLj3KEnYZRz5Ph+zHK5d
njz4Cq3AYwJ7HeCESNNq8y4uxUU/fdg=
-----END CERTIFICATE-----