Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/681e4ded-bdce-3b83-a4e6-ac914e14b1b1.roa
File:                     681e4ded-bdce-3b83-a4e6-ac914e14b1b1.roa (raw, json)
Hash identifier:          DT6b+gIXSz5/uZpZnjtJIMW+UQTJTNDfNvmxPU787lE=
Subject key identifier:   C6:42:D4:7E:CA:8E:F4:FF:53:A0:63:D4:A3:2D:51:98:3A:41:DB:93
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858406D3E1A6B4F635F3220D4EE80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/681e4ded-bdce-3b83-a4e6-ac914e14b1b1.roa
Signing time:             Sat 31 Dec 2022 12:00:00 +0000
ROA not before:           Sat 31 Dec 2022 12:00:00 +0000
ROA not after:            Sun 05 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        16.168.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6d:3e:1a:6b:4f:63:5f:32:20:d4:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 31 12:00:00 2022 GMT
            Not After : Feb  5 05:00:00 2023 GMT
        Subject: CN=36324899-32cb-49be-8b2c-26c3f9d172a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:1e:25:f0:42:31:4b:1e:8f:73:9e:e4:e1:4d:
                    2b:e9:58:83:4b:b3:f6:3a:e2:2e:64:fc:38:b1:80:
                    a4:e4:f0:67:78:a8:a6:b1:08:d6:ea:a1:83:88:3b:
                    c4:72:71:24:98:82:35:c5:22:62:49:17:0a:87:39:
                    c9:9c:0c:1b:66:9f:ac:d6:72:10:30:a1:6c:4b:62:
                    44:41:6f:f2:be:88:66:62:0d:94:38:33:bb:de:e7:
                    5d:38:bc:5e:b3:25:ec:c6:ed:89:b1:76:dd:a8:41:
                    98:e3:c4:86:dc:51:40:e1:2b:65:81:96:04:ba:c6:
                    b3:f7:ca:d0:16:c5:c4:62:70:76:0c:2a:6b:dd:6a:
                    8a:c9:46:ca:4b:4e:ed:5d:b7:39:81:19:d3:9b:34:
                    2d:5f:7a:d8:2e:da:a9:b2:58:64:d6:4b:df:f9:64:
                    5e:96:88:da:5f:48:12:a4:7c:e0:b7:8b:dd:90:ce:
                    d5:84:07:80:f3:7e:63:b9:06:89:64:72:1d:cc:1b:
                    03:3f:b6:62:bc:87:e9:0c:7f:17:62:3e:55:b5:57:
                    bd:bc:19:63:05:8e:18:f9:e2:63:c9:54:90:e0:54:
                    14:eb:2c:35:9b:ad:72:bd:9e:9d:7b:0d:8b:60:07:
                    0e:18:39:09:d1:79:2c:9c:ed:f1:ae:dd:a7:ff:e6:
                    18:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:42:D4:7E:CA:8E:F4:FF:53:A0:63:D4:A3:2D:51:98:3A:41:DB:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/681e4ded-bdce-3b83-a4e6-ac914e14b1b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.168.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:da:a7:09:c0:e9:5d:6a:77:46:c7:07:bb:49:8b:0b:c1:e2:
         9a:15:81:12:88:53:27:df:0b:c2:e5:29:45:4a:da:ee:1a:99:
         4a:bb:5a:00:90:13:30:e1:d0:ed:b7:ef:cd:8d:d3:fc:cb:89:
         89:0b:b8:ee:6b:36:ca:35:94:ab:cd:f2:b2:19:08:59:81:60:
         4c:13:26:3f:91:c0:3e:7e:c9:69:0c:a1:c3:78:90:9a:8b:f9:
         03:4b:46:0a:db:09:7e:a2:92:d5:80:ec:be:3d:50:6a:3a:52:
         26:2c:af:e6:09:84:ec:7d:56:33:17:cb:6b:b1:7b:a6:25:4b:
         d4:03:08:e2:98:0b:a6:86:58:84:a4:22:a2:fb:c0:c0:a5:15:
         d7:6a:d5:bd:6a:35:50:0b:2b:2b:b3:3c:4f:4f:9c:0d:fd:78:
         58:e7:a6:5c:4e:ae:2a:86:b2:fb:3a:eb:ed:26:1b:2e:14:d7:
         68:6b:40:9b:71:08:09:b9:09:0f:90:08:68:64:27:da:80:02:
         4c:73:57:22:92:be:a4:2b:23:c3:50:19:b0:91:49:23:76:6f:
         24:6a:eb:19:93:7f:92:5b:b2:c1:36:f8:b6:25:15:0d:8f:9a:
         07:59:59:b1:87:87:88:04:ad:38:c7:f6:aa:19:9f:b0:a4:26:
         41:c6:a2:d2
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBtPhprT2NfMiDU7oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIzMTEyMDAwMFoXDTIzMDIwNTA1MDAwMFowLzEtMCsGA1UEAxMk
MzYzMjQ4OTktMzJjYi00OWJlLThiMmMtMjZjM2Y5ZDE3MmEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7x4l8EIxSx6Pc57k4U0r6ViDS7P2OuIuZPw4
sYCk5PBneKimsQjW6qGDiDvEcnEkmII1xSJiSRcKhznJnAwbZp+s1nIQMKFsS2JE
QW/yvohmYg2UODO73uddOLxesyXsxu2JsXbdqEGY48SG3FFA4StlgZYEusaz98rQ
FsXEYnB2DCpr3WqKyUbKS07tXbc5gRnTmzQtX3rYLtqpslhk1kvf+WRelojaX0gS
pHzgt4vdkM7VhAeA835juQaJZHIdzBsDP7ZivIfpDH8XYj5VtVe9vBljBY4Y+eJj
yVSQ4FQU6yw1m61yvZ6dew2LYAcOGDkJ0XksnO3xrt2n/+YYewIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMZC1H7KjvT/U6Bj1KMtUZg6QduTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNjgxZTRkZWQtYmRjZS0z
YjgzLWE0ZTYtYWM5MTRlMTRiMWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEKgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAa9qnCcDpXWp3RscHu0mLC8HimhWBEohTJ98LwuUpRUra7hqZSrtaAJAT
MOHQ7bfvzY3T/MuJiQu47ms2yjWUq83yshkIWYFgTBMmP5HAPn7JaQyhw3iQmov5
A0tGCtsJfqKS1YDsvj1QajpSJiyv5gmE7H1WMxfLa7F7piVL1AMI4pgLpoZYhKQi
ovvAwKUV12rVvWo1UAsrK7M8T0+cDf14WOemXE6uKoay+zrr7SYbLhTXaGtAm3EI
CbkJD5AIaGQn2oACTHNXIpK+pCsjw1AZsJFJI3ZvJGrrGZN/kluywTb4tiUVDY+a
B1lZsYeHiAStOMf2qhmfsKQmQcai0g==
-----END CERTIFICATE-----