Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/369fdbfb-ef29-359e-8fce-c075ee870999.roa
File:                     369fdbfb-ef29-359e-8fce-c075ee870999.roa (raw, json)
Hash identifier:          YpYa+WDit/QBrWvAOpNeVwqi/4P7lT2DUlY/LsLzvxI=
Subject key identifier:   36:F9:30:B4:3A:B3:73:93:5E:D9:A4:C4:7A:0F:1B:11:2A:2E:34:F9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B888844B64DFEA9498159F88
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/369fdbfb-ef29-359e-8fce-c075ee870999.roa
Signing time:             Fri 27 Jan 2023 12:00:00 +0000
ROA not before:           Fri 27 Jan 2023 12:00:00 +0000
ROA not after:            Sat 04 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        170.68.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b8:88:84:4b:64:df:ea:94:98:15:9f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 27 12:00:00 2023 GMT
            Not After : Mar  4 05:00:00 2023 GMT
        Subject: CN=b5a5c86a-1d0b-40cd-b245-9afce957252d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:85:e3:28:9c:1f:ff:fc:e7:27:6b:99:58:df:
                    e7:fa:3f:8c:02:8f:e7:80:5d:0c:73:db:42:6d:b0:
                    71:05:9c:fa:4d:94:f7:f8:cb:23:7d:70:1d:2e:b9:
                    99:c5:19:d8:9b:b4:b8:52:df:81:bb:28:a0:a8:45:
                    e5:af:3b:5c:79:26:3d:00:85:30:7c:6c:61:bf:35:
                    9e:96:23:d6:de:a5:73:18:83:f5:65:b3:53:53:d7:
                    23:0b:b7:6b:e7:d2:6d:05:8a:ee:e0:5c:81:fe:82:
                    68:91:4c:92:23:48:f1:51:64:bb:c7:e3:36:ea:5e:
                    49:18:99:9b:3a:e3:e7:82:b0:0c:b2:9b:a1:e9:04:
                    9b:49:1b:f6:55:c9:81:bf:65:90:97:6f:a7:b2:6c:
                    58:e8:6d:59:e0:77:d0:b3:bc:16:8a:92:9d:f1:ed:
                    7b:a7:fd:9b:46:64:c5:cc:b9:ae:e0:0a:a6:a0:1a:
                    18:da:eb:07:b3:14:42:ca:c1:5b:3e:dc:35:04:2e:
                    d9:bb:ed:5d:9c:73:ca:f1:b3:34:5c:2b:a8:a8:2f:
                    15:4a:2f:b3:44:04:f8:7f:37:95:d8:f0:06:ce:89:
                    b7:70:65:21:9a:e1:6f:18:8e:79:d6:be:3e:e8:df:
                    f8:29:73:54:d6:51:e1:42:f3:e5:13:ad:63:1e:1d:
                    ee:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F9:30:B4:3A:B3:73:93:5E:D9:A4:C4:7A:0F:1B:11:2A:2E:34:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/369fdbfb-ef29-359e-8fce-c075ee870999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.68.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:25:ac:8a:c1:ad:e7:ea:15:32:19:d0:4d:ae:d9:78:d5:75:
         60:72:0a:ad:4a:75:f1:05:85:22:71:6d:50:f6:ec:8e:6e:f8:
         48:fe:79:e5:b1:eb:a9:7f:23:88:9d:64:86:a0:c1:5a:69:1e:
         33:eb:77:75:57:01:db:b8:f6:70:f9:34:3d:fa:be:c8:c6:21:
         01:f1:d4:aa:e7:d0:5e:1b:8e:a9:87:a5:85:84:4e:82:55:13:
         e4:27:7e:d6:74:24:5c:c1:72:06:78:77:90:e6:96:7d:a2:be:
         e4:10:21:ba:c9:cf:68:88:1e:b9:66:de:c7:99:4c:a4:0d:3b:
         f8:42:a2:0d:d9:c7:6b:11:98:b4:3b:64:56:3c:47:06:77:cc:
         28:b5:50:8f:f5:49:37:a5:ab:51:15:cd:7d:3e:54:4f:29:65:
         69:ec:d6:71:e4:63:49:f7:a5:a8:b7:8a:28:ab:a6:20:b8:a1:
         97:c3:2e:68:89:ee:62:30:16:a4:fe:97:c5:48:c8:ee:89:5d:
         c8:1e:b1:6a:67:b1:4f:eb:ba:04:4f:6a:95:33:89:dd:1d:ed:
         7d:21:78:a9:e4:76:4a:a3:3b:62:85:ee:37:13:4d:70:8b:a7:
         36:31:63:8f:84:94:11:34:57:8a:d1:e4:4f:76:55:f2:d6:da:
         a4:d6:a6:33
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEC4iIRLZN/qlJgVn4gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEyNzEyMDAwMFoXDTIzMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
YjVhNWM4NmEtMWQwYi00MGNkLWIyNDUtOWFmY2U5NTcyNTJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIXjKJwf//znJ2uZWN/n+j+MAo/ngF0Mc9tC
bbBxBZz6TZT3+MsjfXAdLrmZxRnYm7S4Ut+BuyigqEXlrztceSY9AIUwfGxhvzWe
liPW3qVzGIP1ZbNTU9cjC7dr59JtBYru4FyB/oJokUySI0jxUWS7x+M26l5JGJmb
OuPngrAMspuh6QSbSRv2VcmBv2WQl2+nsmxY6G1Z4HfQs7wWipKd8e17p/2bRmTF
zLmu4AqmoBoY2usHsxRCysFbPtw1BC7Zu+1dnHPK8bM0XCuoqC8VSi+zRAT4fzeV
2PAGzom3cGUhmuFvGI551r4+6N/4KXNU1lHhQvPlE61jHh3uOwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDb5MLQ6s3OTXtmkxHoPGxEqLjT5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzY5ZmRiZmItZWYyOS0z
NTllLThmY2UtYzA3NWVlODcwOTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqkQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAriWsisGt5+oVMhnQTa7ZeNV1YHIKrUp18QWFInFtUPbsjm74SP555bHr
qX8jiJ1khqDBWmkeM+t3dVcB27j2cPk0Pfq+yMYhAfHUqufQXhuOqYelhYROglUT
5Cd+1nQkXMFyBnh3kOaWfaK+5BAhusnPaIgeuWbex5lMpA07+EKiDdnHaxGYtDtk
VjxHBnfMKLVQj/VJN6WrURXNfT5UTyllaezWceRjSfelqLeKKKumILihl8MuaInu
YjAWpP6XxUjI7oldyB6xamexT+u6BE9qlTOJ3R3tfSF4qeR2SqM7YoXuNxNNcIun
NjFjj4SUETRXitHkT3ZV8tbapNamMw==
-----END CERTIFICATE-----