Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c559806-8067-3f05-aefb-047a77e2a40c.roa
File:                     4c559806-8067-3f05-aefb-047a77e2a40c.roa (raw, json)
Hash identifier:          fLpiJnXbL7hnUodKDeIirLxSN06FszSV5ed2DdAKzO0=
Subject key identifier:   7A:8F:AC:62:D5:37:17:31:C2:1C:21:3B:09:24:DC:DD:23:33:FD:FA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840D7023645727D553E3DC4E900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c559806-8067-3f05-aefb-047a77e2a40c.roa
Signing time:             Tue 07 Feb 2023 12:00:00 +0000
ROA not before:           Tue 07 Feb 2023 12:00:00 +0000
ROA not after:            Wed 15 Mar 2023 04:00:00 +0000
asID:                     14618
IP address blocks:        207.240.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d7:02:36:45:72:7d:55:3e:3d:c4:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  7 12:00:00 2023 GMT
            Not After : Mar 15 04:00:00 2023 GMT
        Subject: CN=f0bff414-6a64-4ccc-84f3-d17de7804c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:13:d0:b4:09:bf:37:f5:4c:c5:6c:c7:2e:9e:
                    56:53:0d:6d:3e:b1:66:11:eb:d9:19:b1:d7:66:89:
                    6a:aa:e0:67:da:04:18:3f:57:26:c6:7f:24:09:7f:
                    7f:19:08:70:67:b1:2c:ac:c6:cb:1a:e7:42:2d:b1:
                    ca:86:32:4e:6a:c0:af:23:ec:52:98:a2:a6:b7:3f:
                    ec:e4:a9:f7:ff:e7:11:61:9d:43:9d:5e:64:a9:49:
                    14:67:7e:d3:7d:4a:0f:96:b1:c2:c5:30:70:b6:ed:
                    c5:68:e2:6b:cc:96:4b:ce:dd:11:b1:3b:10:c0:d8:
                    07:ae:e3:d3:50:26:ac:63:2a:47:7e:86:9e:95:b3:
                    57:cc:12:fa:ae:fa:23:84:5c:79:10:0f:16:a4:b5:
                    e6:cb:66:11:ca:db:62:77:88:de:ea:af:ab:d5:5f:
                    2e:87:18:6b:e4:8d:1f:67:ff:17:79:58:c8:44:44:
                    ea:b9:cf:8b:e1:1e:b4:3a:d0:94:67:ff:a8:88:d1:
                    bb:3d:76:a3:16:0c:fd:41:89:8c:a6:87:aa:87:21:
                    cf:fe:7b:a9:ae:33:54:b0:4a:3d:48:70:b7:7f:a9:
                    b3:bc:94:e9:79:25:bb:96:87:f2:67:01:43:fa:45:
                    4e:e7:24:96:d4:6a:73:57:66:0b:1d:71:ad:83:03:
                    57:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8F:AC:62:D5:37:17:31:C2:1C:21:3B:09:24:DC:DD:23:33:FD:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c559806-8067-3f05-aefb-047a77e2a40c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.240.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:6b:b3:d7:b4:9f:6b:44:04:4e:8b:cb:05:3b:c0:1f:e9:21:
         a6:cb:1a:21:26:49:0b:83:c6:8f:51:91:e1:2c:cf:e3:64:56:
         6a:76:f3:e1:52:7e:29:56:48:d3:b0:4b:25:83:82:30:da:88:
         b7:97:c1:f0:a6:a7:66:7d:02:89:97:45:97:fc:2f:4d:36:13:
         21:4d:ac:ac:8b:63:71:e5:1a:0d:93:0a:ba:b3:95:f1:d2:bd:
         6d:7e:9f:6c:62:00:d0:ee:1e:81:6a:75:64:35:55:4e:0e:15:
         7a:25:b9:df:d0:e2:40:01:18:5f:0d:fa:91:9c:5d:b0:ab:cd:
         53:09:25:28:3c:b4:f7:aa:19:c5:b6:a8:85:b0:a1:fc:c8:ff:
         e3:3f:f5:14:e7:8c:d1:72:cb:0e:69:dd:c9:04:2e:8a:5d:41:
         42:58:46:46:d7:ba:38:7d:af:6a:a8:86:07:d0:93:f2:e3:d6:
         be:c4:e0:cd:c3:63:0b:65:3b:a4:0b:35:13:72:b4:f6:19:32:
         86:07:34:84:40:c3:37:61:eb:9c:d4:10:8f:ed:3e:70:c7:1f:
         4b:47:45:f3:de:e7:92:dc:64:e7:83:b6:6e:f4:6c:43:77:04:
         4b:4f:dd:56:95:df:7a:ac:ae:9f:04:43:a8:82:64:71:68:c9:
         ab:19:9a:fe
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEDXAjZFcn1VPj3E6QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDIwNzEyMDAwMFoXDTIzMDMxNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZjBiZmY0MTQtNmE2NC00Y2NjLTg0ZjMtZDE3ZGU3ODA0Yzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBPQtAm/N/VMxWzHLp5WUw1tPrFmEevZGbHX
ZolqquBn2gQYP1cmxn8kCX9/GQhwZ7EsrMbLGudCLbHKhjJOasCvI+xSmKKmtz/s
5Kn3/+cRYZ1DnV5kqUkUZ37TfUoPlrHCxTBwtu3FaOJrzJZLzt0RsTsQwNgHruPT
UCasYypHfoaelbNXzBL6rvojhFx5EA8WpLXmy2YRyttid4je6q+r1V8uhxhr5I0f
Z/8XeVjIRETquc+L4R60OtCUZ/+oiNG7PXajFgz9QYmMpoeqhyHP/nuprjNUsEo9
SHC3f6mzvJTpeSW7lofyZwFD+kVO5ySW1GpzV2YLHXGtgwNXqQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHqPrGLVNxcxwhwhOwkk3N0jM/36MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNGM1NTk4MDYtODA2Ny0z
ZjA1LWFlZmItMDQ3YTc3ZTJhNDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAz/AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAnGuz17Sfa0QETovLBTvAH+khpssaISZJC4PGj1GR4SzP42RWanbz4VJ+
KVZI07BLJYOCMNqIt5fB8KanZn0CiZdFl/wvTTYTIU2srItjceUaDZMKurOV8dK9
bX6fbGIA0O4egWp1ZDVVTg4VeiW539DiQAEYXw36kZxdsKvNUwklKDy096oZxbao
hbCh/Mj/4z/1FOeM0XLLDmndyQQuil1BQlhGRte6OH2vaqiGB9CT8uPWvsTgzcNj
C2U7pAs1E3K09hkyhgc0hEDDN2HrnNQQj+0+cMcfS0dF897nktxk54O2bvRsQ3cE
S0/dVpXfeqyunwRDqIJkcWjJqxma/g==
-----END CERTIFICATE-----