Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63490c0a-e8b0-38f5-9116-708a45ff4733.roa
File:                     63490c0a-e8b0-38f5-9116-708a45ff4733.roa (raw, json)
Hash identifier:          fcLxslQJm0iI0rDLDWT41joQ008uNKe5BbAUBqG4uzg=
Subject key identifier:   16:DB:7F:5F:47:60:B9:FE:ED:64:4E:E0:9E:EB:86:A1:58:36:29:16
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B90E9EF249EE9092658B2BE0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63490c0a-e8b0-38f5-9116-708a45ff4733.roa
Signing time:             Fri 27 Jan 2023 12:00:00 +0000
ROA not before:           Fri 27 Jan 2023 12:00:00 +0000
ROA not after:            Sat 04 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        208.110.48.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b9:0e:9e:f2:49:ee:90:92:65:8b:2b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 27 12:00:00 2023 GMT
            Not After : Mar  4 05:00:00 2023 GMT
        Subject: CN=b7477ebb-e722-4c4f-9987-0fbf91cd39f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:88:f2:f9:67:55:7b:52:d1:3e:fd:16:c1:90:
                    1a:6a:5a:5b:ca:81:45:a7:2a:e6:57:04:53:a5:93:
                    74:0a:ce:e7:da:d1:77:05:1d:c8:c9:b4:08:da:8f:
                    1d:3e:0a:d0:95:50:32:b8:31:41:ed:d5:a5:eb:87:
                    c5:5a:fb:4c:aa:c5:d8:74:a0:57:21:8b:ce:03:2f:
                    43:5c:44:33:43:1a:29:43:fc:87:33:cd:54:a4:4f:
                    a3:76:0a:33:91:79:ff:95:1f:1d:7d:cd:f3:7a:91:
                    c7:6b:f3:ca:70:dd:8c:b1:7b:e7:99:21:d4:fa:af:
                    a5:47:9c:68:3c:75:3d:de:93:08:09:ce:e4:9c:81:
                    3e:3c:cd:91:4b:87:59:7a:ff:23:dc:28:2c:a5:55:
                    54:46:39:68:67:7c:f1:d6:ff:fb:66:3b:99:5c:60:
                    3f:4f:c7:07:ef:ba:d4:c2:fb:33:3c:79:a4:eb:ca:
                    5b:33:62:f4:cf:d2:e2:41:40:bf:d8:9f:51:49:e1:
                    62:cb:ee:35:d2:83:26:3c:f2:14:56:0b:e7:3c:7a:
                    9d:c1:78:0a:78:50:92:f7:f7:eb:c0:16:a5:b7:f8:
                    5f:00:73:7d:a5:22:f0:6e:70:56:58:8c:25:03:38:
                    67:6e:b3:b2:c3:37:fd:a3:73:b1:1a:4b:56:23:f9:
                    3a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DB:7F:5F:47:60:B9:FE:ED:64:4E:E0:9E:EB:86:A1:58:36:29:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63490c0a-e8b0-38f5-9116-708a45ff4733.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.110.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:e6:6d:df:b9:fa:34:d7:29:ef:18:53:13:8f:02:fb:b0:26:
         66:bd:cf:c5:77:9b:bb:d4:4e:69:f3:ac:66:2d:77:19:80:59:
         74:96:7b:1a:cb:fb:48:83:dc:a5:f6:d1:08:ae:15:59:12:7e:
         ec:c8:7e:72:b9:47:17:65:23:06:02:b3:11:d3:72:8e:58:48:
         07:be:2a:36:c6:d3:8c:02:9e:08:ef:6e:19:61:45:60:42:4c:
         64:92:0e:09:bc:39:3f:3a:08:95:5a:63:9b:13:46:21:00:63:
         26:b6:ca:dc:8c:f6:e2:2b:fe:48:b4:a2:61:80:32:88:c9:13:
         a9:f7:91:66:28:c6:73:bb:d6:10:64:27:1b:97:c7:ad:ea:21:
         20:d3:e1:c2:26:b8:a8:95:83:bb:bb:b3:52:9c:31:2d:2a:b2:
         97:7d:29:c2:12:a6:aa:2b:7a:51:d9:bd:f4:1e:fc:af:cc:6e:
         c6:7f:e9:b9:8b:26:e3:43:ea:c1:97:12:f1:b3:d6:0f:8f:d1:
         41:0a:c2:d6:5e:3b:63:a5:3d:50:3a:b3:7c:6b:9e:72:ed:89:
         2b:82:79:f2:2f:f0:95:9e:59:fd:9d:f9:c8:87:59:ff:af:23:
         3f:d6:2b:4a:34:93:f5:7c:a0:fa:5f:67:ea:23:2e:28:8f:7e:
         0f:2c:5d:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEC5Dp7ySe6QkmWLK+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEyNzEyMDAwMFoXDTIzMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
Yjc0NzdlYmItZTcyMi00YzRmLTk5ODctMGZiZjkxY2QzOWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlojy+WdVe1LRPv0WwZAaalpbyoFFpyrmVwRT
pZN0Cs7n2tF3BR3IybQI2o8dPgrQlVAyuDFB7dWl64fFWvtMqsXYdKBXIYvOAy9D
XEQzQxopQ/yHM81UpE+jdgozkXn/lR8dfc3zepHHa/PKcN2MsXvnmSHU+q+lR5xo
PHU93pMICc7knIE+PM2RS4dZev8j3CgspVVURjloZ3zx1v/7ZjuZXGA/T8cH77rU
wvszPHmk68pbM2L0z9LiQUC/2J9RSeFiy+410oMmPPIUVgvnPHqdwXgKeFCS9/fr
wBalt/hfAHN9pSLwbnBWWIwlAzhnbrOywzf9o3OxGktWI/k63QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBbbf19HYLn+7WRO4J7rhqFYNikWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNjM0OTBjMGEtZThiMC0z
OGY1LTkxMTYtNzA4YTQ1ZmY0NzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0G4wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIbmbd+5+jTXKe8YUxOPAvuwJma9z8V3m7vUTmnzrGYtdxmAWXSWexrL
+0iD3KX20QiuFVkSfuzIfnK5RxdlIwYCsxHTco5YSAe+KjbG04wCngjvbhlhRWBC
TGSSDgm8OT86CJVaY5sTRiEAYya2ytyM9uIr/ki0omGAMojJE6n3kWYoxnO71hBk
JxuXx63qISDT4cImuKiVg7u7s1KcMS0qspd9KcISpqorelHZvfQe/K/MbsZ/6bmL
JuND6sGXEvGz1g+P0UEKwtZeO2OlPVA6s3xrnnLtiSuCefIv8JWeWf2d+ciHWf+v
Iz/WK0o0k/V8oPpfZ+ojLiiPfg8sXfc=
-----END CERTIFICATE-----