Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/45e5ca20-656c-3394-9825-e49b34864793.roa
File:                     45e5ca20-656c-3394-9825-e49b34864793.roa (raw, json)
Hash identifier:          yNTtjhNByIoAF0X0hFkVIBuVw6um84QrE/Ym8PSHnCw=
Subject key identifier:   80:BD:50:6E:CD:32:51:DE:D9:2F:D6:E4:83:12:BC:95:37:07:B9:D2
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EEBC7CF307FF3E23C795876C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/45e5ca20-656c-3394-9825-e49b34864793.roa
Signing time:             Mon 15 Aug 2022 12:00:00 +0000
ROA not before:           Mon 15 Aug 2022 12:00:00 +0000
ROA not after:            Tue 20 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.86.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:eb:c7:cf:30:7f:f3:e2:3c:79:58:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 15 12:00:00 2022 GMT
            Not After : Sep 20 04:00:00 2022 GMT
        Subject: CN=cdf63b0a-f809-495a-bf3f-c2348169321e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0c:f9:6a:2b:77:4c:6b:ff:9f:0d:5f:86:8f:
                    f0:3e:95:dd:f8:f7:f7:6f:6a:2f:97:b4:d7:93:4e:
                    0e:e6:41:8b:2b:28:15:7f:06:84:e9:36:c2:d5:c7:
                    e0:6b:fe:2d:7c:9c:75:23:54:93:25:d3:30:53:9a:
                    39:9a:fd:12:39:dc:9c:dd:54:c4:a9:a9:48:f0:34:
                    0d:cc:3f:07:ef:27:23:f2:84:5f:bd:c4:dd:2a:80:
                    2f:af:66:9c:e0:a2:aa:75:91:01:5b:64:dc:a8:33:
                    ed:b6:9f:89:94:3f:6d:40:6f:ad:5a:f8:95:38:5d:
                    61:25:f5:2a:75:60:20:a9:c7:05:3b:fc:c8:b8:13:
                    a4:27:8a:d3:fb:8a:3c:f5:32:7b:42:cb:06:f3:6d:
                    2c:a9:89:43:f2:8a:a5:b0:5f:2c:91:fe:93:c9:2e:
                    8f:40:9c:e4:b7:d0:ea:36:79:ab:1b:7a:df:68:6b:
                    c7:10:d9:0b:4c:c6:4a:2a:b0:bc:19:8b:85:a7:60:
                    1c:2f:ea:24:a1:43:bc:20:7f:40:9b:79:2e:a1:42:
                    d0:f8:dc:00:70:24:0d:05:9d:5a:fd:72:a0:49:39:
                    7f:cd:95:d3:c3:09:f7:51:67:9f:3a:89:a0:60:cf:
                    dd:80:18:7c:1c:a3:13:5e:b8:b2:50:88:dc:46:73:
                    66:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BD:50:6E:CD:32:51:DE:D9:2F:D6:E4:83:12:BC:95:37:07:B9:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/45e5ca20-656c-3394-9825-e49b34864793.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.86.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:8d:b8:53:0c:e6:b6:f7:de:fc:1c:a5:38:2c:c4:9f:cb:b8:
         1d:43:e6:e3:85:f3:79:73:b9:b3:00:1e:a6:95:06:16:02:a0:
         eb:cb:9d:e7:f2:0d:b9:b4:72:c1:0a:30:f3:20:ad:55:36:81:
         ae:33:f3:5c:12:c8:cb:6a:d1:d4:0a:dc:69:b9:99:fb:5e:c5:
         55:8b:86:b4:c3:28:75:3d:99:9c:de:8d:c3:46:48:e6:cd:00:
         89:59:88:7d:9f:bd:21:33:60:ad:89:e7:42:d7:cd:58:98:91:
         c5:3f:25:7d:30:61:15:bb:4b:57:01:3c:11:1c:b4:b4:c3:19:
         49:e0:32:7f:db:92:23:33:ed:00:a7:40:05:bb:9c:91:73:17:
         64:92:1e:65:15:bb:f4:cb:bc:7b:b0:fd:11:45:4f:4b:2e:cd:
         f3:85:40:19:8a:aa:a2:c4:7b:67:2f:1e:ef:14:2f:3c:7a:a4:
         3e:58:92:6d:b0:14:ba:8c:bd:d7:20:c6:93:57:a9:3f:c1:e6:
         66:66:c6:7c:41:68:bf:d8:d9:35:71:e8:b6:95:51:96:56:c4:
         c5:b6:1c:23:e2:99:d9:b7:ca:fa:9c:ca:13:20:be:38:7b:d9:
         7b:b0:aa:0a:11:1a:61:96:72:aa:52:a0:2a:e8:64:1f:05:c3:
         b3:d5:81:f4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD7rx88wf/PiPHlYdsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDgxNTEyMDAwMFoXDTIyMDkyMDA0MDAwMFowLzEtMCsGA1UEAxMk
Y2RmNjNiMGEtZjgwOS00OTVhLWJmM2YtYzIzNDgxNjkzMjFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAz5ait3TGv/nw1fho/wPpXd+Pf3b2ovl7TX
k04O5kGLKygVfwaE6TbC1cfga/4tfJx1I1STJdMwU5o5mv0SOdyc3VTEqalI8DQN
zD8H7ycj8oRfvcTdKoAvr2ac4KKqdZEBW2TcqDPttp+JlD9tQG+tWviVOF1hJfUq
dWAgqccFO/zIuBOkJ4rT+4o89TJ7QssG820sqYlD8oqlsF8skf6TyS6PQJzkt9Dq
NnmrG3rfaGvHENkLTMZKKrC8GYuFp2AcL+okoUO8IH9Am3kuoULQ+NwAcCQNBZ1a
/XKgSTl/zZXTwwn3UWefOomgYM/dgBh8HKMTXriyUIjcRnNmiwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIC9UG7NMlHe2S/W5IMSvJU3B7nSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNDVlNWNhMjAtNjU2Yy0z
Mzk0LTk4MjUtZTQ5YjM0ODY0NzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEFYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATY24Uwzmtvfe/BylOCzEn8u4HUPm44XzeXO5swAeppUGFgKg68ud5/IN
ubRywQow8yCtVTaBrjPzXBLIy2rR1ArcabmZ+17FVYuGtMModT2ZnN6Nw0ZI5s0A
iVmIfZ+9ITNgrYnnQtfNWJiRxT8lfTBhFbtLVwE8ERy0tMMZSeAyf9uSIzPtAKdA
BbuckXMXZJIeZRW79Mu8e7D9EUVPSy7N84VAGYqqosR7Zy8e7xQvPHqkPliSbbAU
uoy91yDGk1epP8HmZmbGfEFov9jZNXHotpVRllbExbYcI+KZ2bfK+pzKEyC+OHvZ
e7CqChEaYZZyqlKgKuhkHwXDs9WB9A==
-----END CERTIFICATE-----