Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/65edcc6e-628a-301c-8df1-0b2e5f5f0bd7.roa
File:                     65edcc6e-628a-301c-8df1-0b2e5f5f0bd7.roa (raw, json)
Hash identifier:          I6VSDohizB7qXFpdn+3x8YgfSt5nGuIdemms01ByKRc=
Subject key identifier:   DA:1A:D9:6A:87:F8:9A:B7:66:10:FA:F4:68:A2:A8:90:83:AE:CA:4D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E59E219860076040E9F98D260
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/65edcc6e-628a-301c-8df1-0b2e5f5f0bd7.roa
Signing time:             Fri 24 Jun 2022 20:03:07 +0000
ROA not before:           Fri 24 Jun 2022 20:03:07 +0000
ROA not after:            Sat 30 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        149.44.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:59:e2:19:86:00:76:04:0e:9f:98:d2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 24 20:03:07 2022 GMT
            Not After : Jul 30 04:00:00 2022 GMT
        Subject: CN=7d1e4d70-ec29-45d2-bf5f-67d471e95a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:19:18:f6:1e:44:40:9f:98:77:cc:4a:1e:c2:
                    3f:f2:4e:9a:2d:34:7c:61:e3:16:ba:f2:cf:da:c3:
                    21:cb:c7:6b:14:92:e5:db:3d:ba:9d:0d:51:fe:4a:
                    8c:9a:7c:3b:1a:16:c1:a0:5d:1b:2c:b7:5a:6f:e9:
                    8c:91:e3:cc:2b:ff:b4:4f:aa:9a:4a:9e:8d:dc:d5:
                    0a:1d:2f:f9:e1:ef:46:2e:fe:47:3e:8e:48:b4:1c:
                    41:fb:c2:4d:90:14:7a:2d:67:bf:ae:e3:73:00:8a:
                    7c:31:55:f9:b0:ba:e3:f7:d7:e0:11:6a:43:1f:56:
                    49:53:4c:c8:2b:09:17:bb:44:df:75:91:06:04:f2:
                    c7:cd:a9:d6:cc:3e:18:fd:1a:13:33:9e:f4:2c:1c:
                    d0:ba:c2:8e:a5:da:24:fa:20:ce:40:fd:73:da:5a:
                    61:eb:3b:d2:fd:a4:9a:54:f1:02:8e:25:4b:b5:49:
                    f5:fe:b4:ba:f2:59:49:3b:64:0e:66:93:07:f1:53:
                    52:81:77:62:ff:77:78:73:f8:c6:1b:67:e2:37:ea:
                    47:37:cb:38:83:92:86:45:6b:97:65:c2:3f:7f:bf:
                    ea:64:c5:67:84:18:70:0e:0c:04:ea:5e:d0:99:11:
                    44:d6:25:0b:b4:b4:9f:bb:ae:7e:9d:59:50:cd:cc:
                    cc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1A:D9:6A:87:F8:9A:B7:66:10:FA:F4:68:A2:A8:90:83:AE:CA:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/65edcc6e-628a-301c-8df1-0b2e5f5f0bd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.44.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:86:78:65:c8:6d:07:a2:ef:40:f7:5c:7b:53:53:2b:68:bc:
         59:26:38:9f:40:88:0e:51:a9:15:bd:a7:d1:ae:38:13:b0:6c:
         af:37:29:cf:2f:d6:40:d6:15:bd:e7:a4:ec:c5:c4:c3:9c:6e:
         57:4f:27:27:c3:0a:da:6f:39:bc:a3:5c:9e:52:1c:1c:ce:f5:
         1e:4b:40:1e:8d:61:01:03:7f:dd:e5:95:cb:59:6b:97:8d:49:
         f2:77:03:49:1b:13:1b:01:47:45:60:d5:7d:ff:9e:10:20:cd:
         4a:e5:88:5e:38:32:48:24:95:cc:e8:37:c8:38:19:17:4e:7f:
         04:3c:a3:83:97:4b:e7:ff:ae:78:33:e7:47:7f:fc:4d:fb:26:
         14:35:1d:7e:9a:5c:80:02:cf:c9:e6:1a:ba:57:a0:25:d3:e2:
         46:7b:4b:68:c3:41:b7:9e:ab:c5:b3:a4:9d:cb:b6:1f:d8:2b:
         50:91:7a:ff:37:62:6d:5e:a1:a7:d0:3c:88:f6:77:1e:d2:d9:
         cb:03:50:24:70:f3:68:f5:46:69:5d:dd:95:02:12:a5:54:84:
         b6:31:2a:e9:98:b7:2c:4c:f5:cd:f7:bb:f7:94:e4:25:65:5d:
         1f:77:01:22:0b:9b:53:26:c4:17:ed:fd:6c:47:e7:20:95:db:
         81:67:1f:ca
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5Z4hmGAHYEDp+Y0mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYyNDIwMDMwN1oXDTIyMDczMDA0MDAwMFowLzEtMCsGA1UEAxMk
N2QxZTRkNzAtZWMyOS00NWQyLWJmNWYtNjdkNDcxZTk1YTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRkY9h5EQJ+Yd8xKHsI/8k6aLTR8YeMWuvLP
2sMhy8drFJLl2z26nQ1R/kqMmnw7GhbBoF0bLLdab+mMkePMK/+0T6qaSp6N3NUK
HS/54e9GLv5HPo5ItBxB+8JNkBR6LWe/ruNzAIp8MVX5sLrj99fgEWpDH1ZJU0zI
KwkXu0TfdZEGBPLHzanWzD4Y/RoTM570LBzQusKOpdok+iDOQP1z2lph6zvS/aSa
VPECjiVLtUn1/rS68llJO2QOZpMH8VNSgXdi/3d4c/jGG2fiN+pHN8s4g5KGRWuX
ZcI/f7/qZMVnhBhwDgwE6l7QmRFE1iULtLSfu65+nVlQzczMSwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNoa2WqH+Jq3ZhD69GiiqJCDrspNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNjVlZGNjNmUtNjI4YS0z
MDFjLThkZjEtMGIyZTVmNWYwYmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlSwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAIYZ4ZchtB6LvQPdce1NTK2i8WSY4n0CIDlGpFb2n0a44E7Bsrzcpzy/W
QNYVveek7MXEw5xuV08nJ8MK2m85vKNcnlIcHM71HktAHo1hAQN/3eWVy1lrl41J
8ncDSRsTGwFHRWDVff+eECDNSuWIXjgySCSVzOg3yDgZF05/BDyjg5dL5/+ueDPn
R3/8TfsmFDUdfppcgALPyeYaulegJdPiRntLaMNBt56rxbOkncu2H9grUJF6/zdi
bV6hp9A8iPZ3HtLZywNQJHDzaPVGaV3dlQISpVSEtjEq6Zi3LEz1zfe795TkJWVd
H3cBIgubUybEF+39bEfnIJXbgWcfyg==
-----END CERTIFICATE-----