Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/661ff0c6-3aee-3c04-b2da-527df84c5712.roa
File:                     661ff0c6-3aee-3c04-b2da-527df84c5712.roa (raw, json)
Hash identifier:          bazyaQgvB7fGGwNsSeYDAxXzgDdqgLWyfx7nQA+IyhI=
Subject key identifier:   FA:3F:81:65:13:8C:24:14:CE:AA:4A:F3:C8:24:A0:F0:82:AF:88:0E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858409023DF2DE69ABEBD25C45980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/661ff0c6-3aee-3c04-b2da-527df84c5712.roa
Signing time:             Thu 12 Jan 2023 12:00:00 +0000
ROA not before:           Thu 12 Jan 2023 12:00:00 +0000
ROA not after:            Fri 17 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        50.16.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:90:23:df:2d:e6:9a:be:bd:25:c4:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 12 12:00:00 2023 GMT
            Not After : Feb 17 05:00:00 2023 GMT
        Subject: CN=9ba049da-95f3-4b9e-a1ac-626599450d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:24:41:67:b3:09:51:55:87:94:6c:85:9c:d1:
                    10:6e:50:bb:ed:01:ea:b1:d6:d1:1d:bc:15:3e:8a:
                    6f:a7:2d:32:c9:a0:56:cd:17:aa:ae:75:d7:71:02:
                    b1:f6:06:b8:5f:3e:b5:2f:8e:11:42:85:66:91:ef:
                    86:e4:95:68:93:cb:4f:78:0f:90:0c:ec:d3:2f:2c:
                    6a:d3:36:33:6a:7b:a4:22:7f:72:62:43:9e:51:b0:
                    5a:0e:1c:82:6c:ac:da:ed:b4:ba:8c:bf:a8:19:6d:
                    c0:99:a7:bc:30:1e:d8:b4:fd:f4:ff:82:13:60:e8:
                    5a:d9:03:40:d3:85:c7:37:36:3f:2a:42:b0:85:dd:
                    4b:d8:bd:a5:2f:42:99:72:64:10:8f:f1:9b:fe:c8:
                    b3:f3:c6:71:5a:95:ac:11:6d:17:6d:b7:31:d4:94:
                    62:27:c7:4c:4c:9e:dc:e2:fc:1d:c3:f6:0a:fa:8a:
                    7b:a6:82:8c:75:0a:b1:5a:63:9e:d7:f2:77:38:11:
                    77:44:09:1f:ae:ee:9e:62:f8:75:71:30:e2:2e:f1:
                    97:d4:48:cc:d1:77:cf:f2:90:9d:5d:78:04:d3:4e:
                    96:49:e4:ab:39:b5:bc:26:d3:33:13:3b:c9:9e:ba:
                    d2:01:6a:4a:d7:06:97:d9:c2:e5:85:3c:8c:ad:93:
                    db:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3F:81:65:13:8C:24:14:CE:AA:4A:F3:C8:24:A0:F0:82:AF:88:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/661ff0c6-3aee-3c04-b2da-527df84c5712.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.16.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:81:c0:5a:c4:42:e3:bd:99:31:ee:ab:cf:d7:c3:15:39:38:
         1f:a4:5c:40:ca:66:cc:38:b0:66:9d:12:34:b5:e8:6a:3d:6d:
         db:9b:6c:e0:e1:f6:7d:99:01:b6:cf:93:7f:1d:4e:bc:7e:cb:
         04:98:2e:11:b5:9c:c5:49:28:55:62:96:7e:52:86:0a:16:56:
         07:84:ba:ed:d0:71:ef:4b:cb:61:54:31:6b:ee:cf:f0:78:69:
         d8:b2:02:16:f4:e7:91:b0:ea:b1:99:1b:ec:18:79:20:f1:a2:
         2d:5c:c1:73:44:58:7f:dd:57:8d:e9:e0:8a:e7:4e:60:4a:fc:
         c0:de:5a:5b:ff:39:d2:1a:bd:e5:65:3d:26:38:99:f3:1c:14:
         76:00:1d:df:59:7e:86:9f:ee:1a:91:a3:2c:2e:1d:9a:59:52:
         2d:f6:11:b0:da:ee:8f:bc:fd:11:df:91:9f:76:4d:7c:50:90:
         c0:15:fb:1a:9f:2a:31:a9:4d:4f:0d:c1:63:81:a9:f7:2e:6e:
         3d:9d:f0:17:b2:13:eb:c6:c2:13:45:d5:2e:ec:98:ae:ca:1d:
         72:9c:c1:f7:ac:60:e9:34:cc:1b:61:a0:d0:b2:00:10:d9:ed:
         1b:a1:88:9c:70:31:24:15:7f:8c:be:c4:16:c9:02:83:85:e9:
         dc:8e:40:03
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECQI98t5pq+vSXEWYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDExMjEyMDAwMFoXDTIzMDIxNzA1MDAwMFowLzEtMCsGA1UEAxMk
OWJhMDQ5ZGEtOTVmMy00YjllLWExYWMtNjI2NTk5NDUwZDg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySRBZ7MJUVWHlGyFnNEQblC77QHqsdbRHbwV
Popvpy0yyaBWzReqrnXXcQKx9ga4Xz61L44RQoVmke+G5JVok8tPeA+QDOzTLyxq
0zYzanukIn9yYkOeUbBaDhyCbKza7bS6jL+oGW3Amae8MB7YtP30/4ITYOha2QNA
04XHNzY/KkKwhd1L2L2lL0KZcmQQj/Gb/siz88ZxWpWsEW0Xbbcx1JRiJ8dMTJ7c
4vwdw/YK+op7poKMdQqxWmOe1/J3OBF3RAkfru6eYvh1cTDiLvGX1EjM0XfP8pCd
XXgE006WSeSrObW8JtMzEzvJnrrSAWpK1waX2cLlhTyMrZPbLQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPo/gWUTjCQUzqpK88gkoPCCr4gOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNjYxZmYwYzYtM2FlZS0z
YzA0LWIyZGEtNTI3ZGY4NGM1NzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCMhAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACIHAWsRC472ZMe6rz9fDFTk4H6RcQMpmzDiwZp0SNLXoaj1t25ts4OH2
fZkBts+Tfx1OvH7LBJguEbWcxUkoVWKWflKGChZWB4S67dBx70vLYVQxa+7P8Hhp
2LICFvTnkbDqsZkb7Bh5IPGiLVzBc0RYf91XjengiudOYEr8wN5aW/850hq95WU9
JjiZ8xwUdgAd31l+hp/uGpGjLC4dmllSLfYRsNruj7z9Ed+Rn3ZNfFCQwBX7Gp8q
MalNTw3BY4Gp9y5uPZ3wF7IT68bCE0XVLuyYrsodcpzB96xg6TTMG2Gg0LIAENnt
G6GInHAxJBV/jL7EFskCg4Xp3I5AAw==
-----END CERTIFICATE-----