Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/65cc2e71-63a1-314d-b105-3cea424e089d.roa
File:                     65cc2e71-63a1-314d-b105-3cea424e089d.roa (raw, json)
Hash identifier:          i49zKUh1rvKQm3iZCmgPYWPaugfyt40F9Pn87I1u4z4=
Subject key identifier:   09:CA:1B:C2:90:77:6F:F2:2D:55:97:E4:AC:45:54:C8:FF:B6:0D:CA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EE18B51E3B315FFD34C4F3E40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/65cc2e71-63a1-314d-b105-3cea424e089d.roa
Signing time:             Fri 12 Aug 2022 14:42:08 +0000
ROA not before:           Fri 12 Aug 2022 14:42:08 +0000
ROA not after:            Fri 16 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        130.80.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e1:8b:51:e3:b3:15:ff:d3:4c:4f:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 12 14:42:08 2022 GMT
            Not After : Sep 16 04:00:00 2022 GMT
        Subject: CN=093e4a06-62d3-4cd3-9ca5-8fe6b8009e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a6:f4:06:2f:3f:d7:9a:42:83:34:53:97:0f:
                    3b:b7:98:e3:00:88:11:61:44:99:5a:91:b8:68:80:
                    20:96:48:47:50:e8:11:eb:da:60:1c:10:50:12:31:
                    32:46:83:1e:0d:1a:48:5a:c1:a7:d7:64:bb:72:6b:
                    78:c2:95:55:ca:ed:c6:15:e3:ac:6a:2c:8f:0a:01:
                    0a:98:9f:89:9c:db:57:b5:2a:a3:2b:af:94:dd:6d:
                    53:20:17:04:fb:19:73:76:1d:3b:57:23:53:5a:90:
                    38:a0:b3:78:92:86:8e:1d:a7:cc:0f:21:57:06:04:
                    d2:aa:cf:08:f6:80:f3:82:1d:74:c0:97:9e:1f:6a:
                    89:c0:26:c7:4d:06:40:e9:12:f3:e5:7e:55:a2:8d:
                    d6:f0:0d:1e:95:d6:cf:6d:e1:de:73:16:c9:15:8a:
                    32:9a:d2:dd:9f:d1:a1:b1:01:42:24:fd:c7:0e:c4:
                    ed:6e:3f:b7:cb:1c:5d:58:98:ee:97:de:e1:f4:3e:
                    cf:3e:db:ff:b3:6c:04:cc:ae:46:17:5e:0c:d6:e0:
                    d9:eb:fd:7c:03:7a:39:40:04:84:b7:a3:79:3b:8f:
                    e5:e3:29:aa:70:c8:7d:22:1d:4a:4d:c2:9d:b5:70:
                    d4:61:35:4a:8a:ca:7b:27:b4:59:bd:9d:17:0d:c3:
                    93:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CA:1B:C2:90:77:6F:F2:2D:55:97:E4:AC:45:54:C8:FF:B6:0D:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/65cc2e71-63a1-314d-b105-3cea424e089d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.80.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:e1:9a:6b:3e:2c:ba:46:09:84:9a:f6:f7:3e:5e:f8:42:f3:
         f4:d2:3e:73:ea:46:84:9b:6b:71:3d:36:ee:46:6e:88:9b:92:
         f3:43:c8:bb:9c:82:62:91:e5:1d:7a:28:f6:b0:5b:ec:af:e4:
         94:1c:38:2e:1c:03:d9:c2:cc:4c:18:49:23:e6:8e:38:a0:bf:
         38:eb:3d:59:30:20:28:e9:3a:7b:fe:54:6f:c7:7c:ca:80:73:
         a2:7e:bd:32:90:29:00:7d:a9:57:19:ea:39:d8:62:d7:db:f1:
         15:6c:fa:09:81:e5:af:93:97:12:95:a9:95:53:f7:3d:6c:ad:
         06:81:49:d5:32:5b:a6:b1:28:cd:4c:98:b2:12:7d:aa:0a:5a:
         83:1e:68:93:b5:8b:25:87:b6:1a:67:3c:e7:01:48:ce:c3:0a:
         aa:41:e2:66:45:43:b5:ec:ce:ed:fc:c5:42:c8:12:25:b3:5f:
         af:0a:ea:c2:f8:77:af:ab:83:ae:e8:57:c3:f8:48:1d:72:63:
         56:5e:b6:8a:76:8c:80:f5:e4:3e:ae:10:21:9b:c9:76:42:2b:
         19:1d:47:b3:5e:e2:60:92:26:56:48:60:d1:59:2f:09:06:d5:
         1a:0b:06:c0:a1:8b:cb:85:81:58:2d:6e:d2:3b:6f:18:9d:14:
         7c:68:07:e7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD7hi1HjsxX/00xPPkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDgxMjE0NDIwOFoXDTIyMDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk
MDkzZTRhMDYtNjJkMy00Y2QzLTljYTUtOGZlNmI4MDA5ZTVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjab0Bi8/15pCgzRTlw87t5jjAIgRYUSZWpG4
aIAglkhHUOgR69pgHBBQEjEyRoMeDRpIWsGn12S7cmt4wpVVyu3GFeOsaiyPCgEK
mJ+JnNtXtSqjK6+U3W1TIBcE+xlzdh07VyNTWpA4oLN4koaOHafMDyFXBgTSqs8I
9oDzgh10wJeeH2qJwCbHTQZA6RLz5X5Voo3W8A0eldbPbeHecxbJFYoymtLdn9Gh
sQFCJP3HDsTtbj+3yxxdWJjul97h9D7PPtv/s2wEzK5GF14M1uDZ6/18A3o5QASE
t6N5O4/l4ymqcMh9Ih1KTcKdtXDUYTVKisp7J7RZvZ0XDcOT4QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAnKG8KQd2/yLVWX5KxFVMj/tg3KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNjVjYzJlNzEtNjNhMS0z
MTRkLWIxMDUtM2NlYTQyNGUwODlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAglAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAQeGaaz4sukYJhJr29z5e+ELz9NI+c+pGhJtrcT027kZuiJuS80PIu5yC
YpHlHXoo9rBb7K/klBw4LhwD2cLMTBhJI+aOOKC/OOs9WTAgKOk6e/5Ub8d8yoBz
on69MpApAH2pVxnqOdhi19vxFWz6CYHlr5OXEpWplVP3PWytBoFJ1TJbprEozUyY
shJ9qgpagx5ok7WLJYe2Gmc85wFIzsMKqkHiZkVDtezO7fzFQsgSJbNfrwrqwvh3
r6uDruhXw/hIHXJjVl62inaMgPXkPq4QIZvJdkIrGR1Hs17iYJImVkhg0VkvCQbV
GgsGwKGLy4WBWC1u0jtvGJ0UfGgH5w==
-----END CERTIFICATE-----