Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7046cb67-d643-3ac3-b83d-543cc0ff0d16.roa
File:                     7046cb67-d643-3ac3-b83d-543cc0ff0d16.roa (raw, json)
Hash identifier:          r9wQuYGyaVJ9xtJ6YsZJ80IA+tZhsBCB8MgiknsaaK0=
Subject key identifier:   5C:2C:55:62:C9:71:B5:73:B5:EF:E0:01:52:26:6E:3B:BC:91:59:EB
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B652BB38A9F6AFCDC3319580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7046cb67-d643-3ac3-b83d-543cc0ff0d16.roa
Signing time:             Thu 26 Jan 2023 15:12:07 +0000
ROA not before:           Thu 26 Jan 2023 15:12:07 +0000
ROA not after:            Fri 03 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        99.151.64.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b6:52:bb:38:a9:f6:af:cd:c3:31:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 26 15:12:07 2023 GMT
            Not After : Mar  3 05:00:00 2023 GMT
        Subject: CN=8ba7e249-7609-4da5-a918-7ef08a5ab221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d1:91:d3:b6:ad:67:e0:00:3e:35:f3:9c:cb:
                    68:07:f0:50:7b:fd:86:ca:21:6b:4d:47:1d:b7:30:
                    5b:9b:4b:01:84:8e:42:a2:92:00:6c:ed:9a:bc:02:
                    a3:51:3c:c5:6a:d9:cb:f6:db:5a:9a:a7:d8:75:7d:
                    6e:72:8c:5b:b1:08:ad:14:d5:a1:57:4c:7f:65:f9:
                    74:1e:fe:02:9d:d3:51:70:44:be:ae:30:b0:88:03:
                    3a:5a:20:eb:95:a7:a6:66:c7:ba:36:cf:34:23:a1:
                    65:f2:c3:ac:82:f9:db:60:0a:ae:61:6e:ed:22:bf:
                    0e:52:8a:85:f7:2a:6a:38:49:44:c6:c0:02:67:d2:
                    7c:e4:b0:16:42:a2:a2:34:52:da:fb:63:29:ec:a0:
                    1e:03:18:3f:4f:c4:bc:ff:24:cd:fa:5d:8b:b5:86:
                    be:11:2b:99:eb:3b:10:64:56:64:ba:f0:0d:12:a7:
                    fe:e5:a0:13:52:f2:48:73:d9:f5:c1:85:ea:5a:29:
                    87:d9:e1:53:1d:36:57:c6:0f:d8:16:f6:ad:c2:8f:
                    e4:c6:7e:8c:ce:79:b7:4a:af:a0:03:b4:09:66:ad:
                    53:7e:01:02:bf:1f:f1:b1:c7:45:86:9c:6d:e5:9f:
                    80:77:e2:04:fb:99:d8:02:c4:2d:15:8c:7d:5b:76:
                    9d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2C:55:62:C9:71:B5:73:B5:EF:E0:01:52:26:6E:3B:BC:91:59:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7046cb67-d643-3ac3-b83d-543cc0ff0d16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:9e:ed:ae:ab:27:f3:30:d0:e5:7a:55:bd:2e:0b:e3:74:92:
         59:18:30:7e:2d:cb:cc:a6:64:33:e1:e1:58:3c:27:b7:c7:fe:
         6c:49:d7:98:5b:91:e7:09:df:5b:0c:8a:8f:29:4d:0f:cc:b5:
         ce:31:e4:93:75:d6:3f:87:87:c1:2e:2b:26:19:a6:ff:9a:6d:
         bd:eb:4d:a7:e4:97:85:11:cf:77:61:91:f4:88:53:f1:45:67:
         e5:d2:a6:8a:13:a6:53:69:4d:8d:c3:45:0e:25:cd:c3:bb:8c:
         16:88:0b:4f:c3:d4:de:7a:69:98:74:00:77:5e:a4:25:5a:98:
         b9:6d:e5:b4:e2:08:93:06:b2:4d:d0:2f:75:e9:c2:58:a1:e7:
         5a:7f:ce:aa:ca:c5:a9:2b:30:f5:bb:86:f7:50:ba:f6:b0:81:
         fc:a4:6d:3d:b1:cd:cc:8b:00:54:bd:c7:c2:cd:0c:b3:df:d6:
         00:67:25:f9:5b:19:a6:c2:2c:33:35:02:0c:7f:08:03:19:ad:
         25:68:ed:11:ce:02:8b:5e:3c:85:56:de:f9:aa:46:18:4a:6b:
         3c:45:9c:cb:ef:af:9c:d6:81:30:5d:13:77:77:6f:f8:89:56:
         d7:d0:c7:19:f4:ff:cd:f6:5b:40:8b:f2:bd:6d:9c:98:21:ec:
         07:00:b3:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEC2Urs4qfavzcMxlYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEyNjE1MTIwN1oXDTIzMDMwMzA1MDAwMFowLzEtMCsGA1UEAxMk
OGJhN2UyNDktNzYwOS00ZGE1LWE5MTgtN2VmMDhhNWFiMjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztGR07atZ+AAPjXznMtoB/BQe/2GyiFrTUcd
tzBbm0sBhI5CopIAbO2avAKjUTzFatnL9ttamqfYdX1ucoxbsQitFNWhV0x/Zfl0
Hv4CndNRcES+rjCwiAM6WiDrlaemZse6Ns80I6Fl8sOsgvnbYAquYW7tIr8OUoqF
9ypqOElExsACZ9J85LAWQqKiNFLa+2Mp7KAeAxg/T8S8/yTN+l2LtYa+ESuZ6zsQ
ZFZkuvANEqf+5aATUvJIc9n1wYXqWimH2eFTHTZXxg/YFvatwo/kxn6Mznm3Sq+g
A7QJZq1TfgECvx/xscdFhpxt5Z+Ad+IE+5nYAsQtFYx9W3adAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFwsVWLJcbVzte/gAVImbju8kVnrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNzA0NmNiNjctZDY0My0z
YWMzLWI4M2QtNTQzY2MwZmYwZDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGY5dAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACGe7a6rJ/Mw0OV6Vb0uC+N0klkYMH4ty8ymZDPh4Vg8J7fH/mxJ15hb
kecJ31sMio8pTQ/Mtc4x5JN11j+Hh8EuKyYZpv+abb3rTafkl4URz3dhkfSIU/FF
Z+XSpooTplNpTY3DRQ4lzcO7jBaIC0/D1N56aZh0AHdepCVamLlt5bTiCJMGsk3Q
L3Xpwlih51p/zqrKxakrMPW7hvdQuvawgfykbT2xzcyLAFS9x8LNDLPf1gBnJflb
GabCLDM1Agx/CAMZrSVo7RHOAotePIVW3vmqRhhKazxFnMvvr5zWgTBdE3d3b/iJ
VtfQxxn0/832W0CL8r1tnJgh7AcAswo=
-----END CERTIFICATE-----