Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/55b467c8-52fe-3409-86cc-97945963619d.roa
File:                     55b467c8-52fe-3409-86cc-97945963619d.roa (raw, json)
Hash identifier:          8FkXprUCZJ/Vc/XJjyRiSj2aFS+19t7x+Pj4Qvf+Oxo=
Subject key identifier:   E9:60:BD:76:1F:78:8D:29:57:17:3D:A1:B1:D2:F9:F4:38:C4:04:DD
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FAEDA281B55B2D05AB7BDFF40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/55b467c8-52fe-3409-86cc-97945963619d.roa
Signing time:             Mon 24 Oct 2022 12:00:00 +0000
ROA not before:           Mon 24 Oct 2022 12:00:00 +0000
ROA not after:            Tue 29 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.158.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ae:da:28:1b:55:b2:d0:5a:b7:bd:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 24 12:00:00 2022 GMT
            Not After : Nov 29 05:00:00 2022 GMT
        Subject: CN=bd0d4576-a847-48c9-9d95-7b393aed10a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3c:45:eb:24:e0:22:b1:e1:36:c5:c7:ad:69:
                    cc:77:e9:96:1c:59:a2:92:18:74:3c:ca:84:5e:a6:
                    7c:f4:0e:8f:40:68:4e:6e:52:f8:e4:55:ee:d2:ff:
                    31:8a:eb:7f:a4:2c:e3:9d:98:09:b1:b7:4f:a2:6e:
                    10:1c:24:87:a2:84:28:ff:5a:49:72:a6:da:fc:cf:
                    56:fd:95:95:7a:18:84:6a:c4:44:0d:66:40:e6:36:
                    5f:e5:1f:9f:7a:4a:94:c8:cf:79:14:44:51:a5:c8:
                    c6:36:fa:91:2b:1e:ec:5d:a9:e6:73:38:d3:1b:c0:
                    f5:11:5e:8e:c3:78:13:a9:30:1d:9e:25:10:d8:1e:
                    13:82:60:aa:81:48:0f:02:c1:0c:7b:ea:3c:ee:7a:
                    88:c1:59:12:5a:e2:92:72:da:ce:0e:5b:79:d2:e8:
                    4f:65:87:63:81:cf:78:f6:7e:65:60:13:a1:2a:26:
                    21:8a:bc:44:25:ee:f7:8a:f9:a0:2c:79:60:4a:8e:
                    5d:81:d0:80:25:a1:cb:63:3b:2c:ce:37:5a:ed:64:
                    09:1e:c2:91:48:e3:bf:fa:78:ea:ae:85:95:2a:5f:
                    df:bb:93:35:1d:dc:e4:02:dc:6f:65:52:32:7c:67:
                    40:77:f3:4f:c8:90:d8:5a:d5:f3:8a:f0:8c:3b:a1:
                    44:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:60:BD:76:1F:78:8D:29:57:17:3D:A1:B1:D2:F9:F4:38:C4:04:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/55b467c8-52fe-3409-86cc-97945963619d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.158.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:36:57:6e:de:61:1e:d8:91:c4:eb:96:01:42:95:d9:46:dd:
         55:92:36:25:e8:17:7c:ed:f0:7a:64:2a:61:cc:61:03:49:95:
         b3:1e:fe:d1:c5:8b:be:09:35:ed:05:07:d4:c0:f7:05:44:6e:
         63:3c:fe:65:9b:20:af:18:8f:91:4c:e1:0f:4e:89:03:29:3c:
         63:e1:b3:9d:d3:2f:d1:9c:da:0e:fb:54:b3:d3:38:fc:2e:dd:
         ad:e4:11:88:13:30:8a:67:80:2f:04:01:75:b0:9f:e7:b1:ec:
         ef:70:ae:a4:9c:81:72:03:7b:58:3d:53:25:cb:b5:88:a0:ae:
         25:0d:d3:16:5a:66:01:8a:46:99:20:c7:c7:80:d8:e4:62:80:
         c5:e9:cd:ab:d9:09:2f:88:89:29:35:c5:b4:38:f5:bc:3c:f1:
         aa:26:c4:57:10:60:c1:4e:cd:5c:bb:e8:49:0b:47:c0:53:bc:
         23:4d:fc:f2:c8:2a:ef:e7:98:1a:ea:87:46:40:7d:f2:74:43:
         51:96:dc:e8:04:26:2a:5e:f6:9b:fa:62:2b:34:5c:a4:06:e0:
         d6:99:f7:a5:c4:90:f3:50:72:23:1a:31:95:6a:91:8e:02:48:
         f5:6c:22:8a:4d:f5:eb:9b:c4:cc:4c:ba:68:a3:40:54:0d:ee:
         6f:bb:42:0c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+u2igbVbLQWre9/0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAyNDEyMDAwMFoXDTIyMTEyOTA1MDAwMFowLzEtMCsGA1UEAxMk
YmQwZDQ1NzYtYTg0Ny00OGM5LTlkOTUtN2IzOTNhZWQxMGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTxF6yTgIrHhNsXHrWnMd+mWHFmikhh0PMqE
XqZ89A6PQGhOblL45FXu0v8xiut/pCzjnZgJsbdPom4QHCSHooQo/1pJcqba/M9W
/ZWVehiEasREDWZA5jZf5R+fekqUyM95FERRpcjGNvqRKx7sXanmczjTG8D1EV6O
w3gTqTAdniUQ2B4TgmCqgUgPAsEMe+o87nqIwVkSWuKSctrODlt50uhPZYdjgc94
9n5lYBOhKiYhirxEJe73ivmgLHlgSo5dgdCAJaHLYzsszjda7WQJHsKRSOO/+njq
roWVKl/fu5M1HdzkAtxvZVIyfGdAd/NPyJDYWtXzivCMO6FEqQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOlgvXYfeI0pVxc9obHS+fQ4xATdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNTViNDY3YzgtNTJmZS0z
NDA5LTg2Y2MtOTc5NDU5NjM2MTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEJ4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATjZXbt5hHtiRxOuWAUKV2UbdVZI2JegXfO3wemQqYcxhA0mVsx7+0cWL
vgk17QUH1MD3BURuYzz+ZZsgrxiPkUzhD06JAyk8Y+GzndMv0ZzaDvtUs9M4/C7d
reQRiBMwimeALwQBdbCf57Hs73CupJyBcgN7WD1TJcu1iKCuJQ3TFlpmAYpGmSDH
x4DY5GKAxenNq9kJL4iJKTXFtDj1vDzxqibEVxBgwU7NXLvoSQtHwFO8I0388sgq
7+eYGuqHRkB98nRDUZbc6AQmKl72m/piKzRcpAbg1pn3pcSQ81ByIxoxlWqRjgJI
9Wwiik3165vEzEy6aKNAVA3ub7tCDA==
-----END CERTIFICATE-----