Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/64d56924-c555-36df-971d-543a4f46ba7f.roa
File:                     64d56924-c555-36df-971d-543a4f46ba7f.roa (raw, json)
Hash identifier:          hnzjOnF7hxAANWxRAmLez/VNPlJQaYpCruEJLJUKMVY=
Subject key identifier:   67:17:3D:47:30:21:6F:32:D0:29:2F:47:9D:10:00:2C:A8:01:5B:A1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858404E903E341E88847596183300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/64d56924-c555-36df-971d-543a4f46ba7f.roa
Signing time:             Tue 20 Dec 2022 18:48:09 +0000
ROA not before:           Tue 20 Dec 2022 18:48:09 +0000
ROA not after:            Wed 25 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        56.96.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:4e:90:3e:34:1e:88:84:75:96:18:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 20 18:48:09 2022 GMT
            Not After : Jan 25 05:00:00 2023 GMT
        Subject: CN=e95f69c5-7ff8-48c6-8c40-aa6be4127b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:99:fa:5f:c4:c1:b7:bf:86:19:5c:d0:e4:8c:
                    e4:b2:83:0f:38:5e:94:40:98:fa:ec:8d:9e:ad:b0:
                    d2:bb:80:84:29:10:7d:c2:f0:06:37:cc:ee:38:41:
                    ed:b3:c4:d5:4e:62:d6:64:78:1e:1c:7e:57:41:a2:
                    64:b5:b7:a7:2a:62:3c:e6:bf:c4:33:df:9d:31:e2:
                    23:a3:1f:61:58:96:d5:10:1c:1e:29:19:cc:b1:27:
                    9f:8e:39:bf:0f:15:e3:2b:4e:bc:75:7e:59:59:50:
                    eb:7e:c1:c0:2e:4e:a8:de:ee:c3:d3:80:df:cf:7e:
                    c3:a4:c4:01:e0:67:80:0e:9a:8b:f8:54:41:2e:21:
                    45:bb:7e:29:fe:1f:c4:dc:4c:46:7b:d5:b5:cf:17:
                    32:e0:1c:b5:c6:df:2a:7a:c5:c8:57:36:a5:e0:a4:
                    39:53:50:77:bc:06:5d:0a:8a:70:5d:77:26:e0:12:
                    73:5f:97:c7:c4:c5:d3:d3:6f:48:9b:cd:f6:56:e9:
                    b4:33:91:cc:18:4a:26:69:65:ba:42:dd:78:6c:f0:
                    09:95:c0:1a:98:bb:ff:59:5d:e5:c6:09:1b:4c:f6:
                    71:5c:51:b3:18:9d:5b:0c:91:ed:da:7b:79:ae:8d:
                    31:c7:1c:3f:39:49:a3:7c:66:e0:49:79:dc:61:6f:
                    a2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:17:3D:47:30:21:6F:32:D0:29:2F:47:9D:10:00:2C:A8:01:5B:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/64d56924-c555-36df-971d-543a4f46ba7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.96.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:85:e8:4a:60:17:13:25:47:4d:55:c4:5e:f6:d2:83:18:2b:
         2b:85:ff:06:3f:fa:f5:3c:ef:45:40:1e:24:32:74:26:0a:8f:
         60:f1:84:b7:02:3a:52:c2:2d:fd:15:47:16:d6:b0:0c:df:33:
         dc:d1:62:0e:75:e3:3b:7d:8a:40:1b:6f:d9:7c:34:7f:35:75:
         c8:e6:84:83:09:26:80:74:fb:f9:d4:25:f3:05:68:19:dc:93:
         aa:51:e9:8d:be:20:a8:6d:02:8c:83:32:0d:7e:ee:45:b5:f9:
         6f:1a:f0:54:3b:93:f7:ac:7b:c1:25:ea:f0:50:e7:dd:e7:43:
         c8:24:85:07:14:9b:04:38:71:fd:d8:84:f5:42:ee:66:77:73:
         2f:20:52:94:c9:9f:db:a4:84:1f:e3:e9:60:21:aa:51:ca:e7:
         ac:9d:0e:c2:01:a2:5e:8c:51:51:3e:e5:7c:7b:42:ee:32:7d:
         05:f6:c4:d3:24:d3:2f:f3:9e:db:22:8f:6e:d8:c5:09:2d:0d:
         6a:41:09:a5:29:62:e9:04:12:ae:bb:ae:20:cf:28:15:f4:66:
         01:3a:99:c6:9b:29:d4:e1:2d:23:dd:bf:46:8a:2e:20:8d:f9:
         18:ad:8e:40:1f:2b:34:46:e6:97:ca:ea:2f:b8:e3:f5:0a:28:
         1e:4a:1d:63
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBOkD40HoiEdZYYMwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIyMDE4NDgwOVoXDTIzMDEyNTA1MDAwMFowLzEtMCsGA1UEAxMk
ZTk1ZjY5YzUtN2ZmOC00OGM2LThjNDAtYWE2YmU0MTI3YjUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopn6X8TBt7+GGVzQ5IzksoMPOF6UQJj67I2e
rbDSu4CEKRB9wvAGN8zuOEHts8TVTmLWZHgeHH5XQaJktbenKmI85r/EM9+dMeIj
ox9hWJbVEBweKRnMsSefjjm/DxXjK068dX5ZWVDrfsHALk6o3u7D04Dfz37DpMQB
4GeADpqL+FRBLiFFu34p/h/E3ExGe9W1zxcy4By1xt8qesXIVzal4KQ5U1B3vAZd
CopwXXcm4BJzX5fHxMXT029Im832Vum0M5HMGEomaWW6Qt14bPAJlcAamLv/WV3l
xgkbTPZxXFGzGJ1bDJHt2nt5ro0xxxw/OUmjfGbgSXncYW+i4wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGcXPUcwIW8y0CkvR50QACyoAVuhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNjRkNTY5MjQtYzU1NS0z
NmRmLTk3MWQtNTQzYTRmNDZiYTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOGAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAhoXoSmAXEyVHTVXEXvbSgxgrK4X/Bj/69TzvRUAeJDJ0JgqPYPGEtwI6
UsIt/RVHFtawDN8z3NFiDnXjO32KQBtv2Xw0fzV1yOaEgwkmgHT7+dQl8wVoGdyT
qlHpjb4gqG0CjIMyDX7uRbX5bxrwVDuT96x7wSXq8FDn3edDyCSFBxSbBDhx/diE
9ULuZndzLyBSlMmf26SEH+PpYCGqUcrnrJ0OwgGiXoxRUT7lfHtC7jJ9BfbE0yTT
L/Oe2yKPbtjFCS0NakEJpSli6QQSrruuIM8oFfRmATqZxpsp1OEtI92/RoouII35
GK2OQB8rNEbml8rqL7jj9QooHkodYw==
-----END CERTIFICATE-----