Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/706298de-7a9d-33e6-849c-3706d5a256fc.roa
File:                     706298de-7a9d-33e6-849c-3706d5a256fc.roa (raw, json)
Hash identifier:          0VI0RteILDE46OhpIDxrFHB9a3UCy44JJs2YqB9/mrM=
Subject key identifier:   3D:19:57:57:14:DA:4E:1E:E2:0C:AE:97:34:4C:79:23:45:86:FC:4A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858407931D81250B0A2E589D6C600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/706298de-7a9d-33e6-849c-3706d5a256fc.roa
Signing time:             Wed 04 Jan 2023 12:00:00 +0000
ROA not before:           Wed 04 Jan 2023 12:00:00 +0000
ROA not after:            Thu 09 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        16.165.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:79:31:d8:12:50:b0:a2:e5:89:d6:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  4 12:00:00 2023 GMT
            Not After : Feb  9 05:00:00 2023 GMT
        Subject: CN=004ed8e1-6409-4f9d-97e4-9cc82dce460f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:36:89:a6:19:c4:51:8f:98:4c:97:79:55:99:
                    a4:82:a3:f4:f2:75:a3:90:12:2b:95:9c:27:25:d8:
                    06:a3:3c:74:cf:ef:9d:35:88:d5:37:7e:a5:5d:e7:
                    9e:47:0f:02:69:f5:fd:2d:3a:03:d9:4e:94:a2:95:
                    19:5a:34:35:29:b8:e7:27:d2:37:77:bf:2c:57:3c:
                    4f:b1:58:75:ba:27:12:39:e2:0b:75:0b:23:5d:9e:
                    c8:e8:f6:2d:4a:75:d1:5b:3b:aa:61:68:44:cb:86:
                    f5:14:21:6e:47:50:c0:ba:6c:5f:8b:76:56:40:32:
                    3b:e4:dc:04:37:6a:8a:8e:35:cb:59:a7:b4:6a:6c:
                    8d:f2:7c:fc:63:58:cb:3b:c3:0c:7c:5c:a5:d7:a5:
                    cf:35:95:aa:d0:f8:af:54:36:aa:00:a3:b2:84:d5:
                    c9:76:58:df:45:dc:43:c7:25:29:66:e2:0e:f6:07:
                    65:e7:32:68:b6:01:5a:1a:22:60:01:db:4a:56:e1:
                    24:e3:5f:38:a5:7b:59:ed:99:e9:e8:1d:4d:b2:95:
                    ae:85:09:1d:3b:11:35:18:8b:29:6c:a3:4f:04:3a:
                    34:cd:0e:b4:3f:89:bb:02:49:5f:96:b6:8b:27:fe:
                    0d:90:79:d9:04:4a:04:88:1b:c1:6a:9e:b5:67:0e:
                    52:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:19:57:57:14:DA:4E:1E:E2:0C:AE:97:34:4C:79:23:45:86:FC:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/706298de-7a9d-33e6-849c-3706d5a256fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.165.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:4c:63:38:5f:10:c2:e3:19:5f:06:e7:71:0c:b5:24:21:00:
         eb:e1:df:e6:5a:66:e1:cd:9f:f7:95:50:bd:1a:0b:a1:f8:62:
         20:4b:7d:e2:de:97:d1:6a:04:97:e6:b8:33:49:53:83:4a:b1:
         70:67:f3:23:43:8f:21:76:cd:c9:b7:a3:47:1e:62:4c:f7:4c:
         ab:88:70:bc:ba:ef:e0:ce:91:f1:f4:0a:19:5d:96:e8:39:0b:
         48:92:f6:59:46:a7:00:0f:dd:fd:08:48:35:9b:38:9c:d7:74:
         ed:ce:de:90:fc:6a:ae:7f:87:3f:13:92:11:7b:0c:ef:b0:c6:
         5e:16:d0:c5:27:20:b1:48:33:b4:6a:ba:41:53:19:31:65:ac:
         f9:4d:79:ed:03:d1:0f:8a:0b:98:73:65:de:ff:89:5e:54:5e:
         06:43:63:92:db:90:1e:3d:68:c5:d3:28:64:85:7f:42:a5:45:
         bf:41:23:70:54:ea:6c:46:d4:f1:2e:9c:52:22:0a:cd:09:f3:
         b0:03:55:76:a6:40:13:44:29:ee:9a:12:4c:82:12:c6:dc:fd:
         83:ac:7c:eb:bb:22:7b:90:b9:83:fb:66:c9:16:dd:b7:4e:30:
         1b:c7:78:59:e1:92:ac:6b:d3:be:68:75:dd:fd:80:a1:43:34:
         4d:3e:11:ef
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEB5MdgSULCi5YnWxgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEwNDEyMDAwMFoXDTIzMDIwOTA1MDAwMFowLzEtMCsGA1UEAxMk
MDA0ZWQ4ZTEtNjQwOS00ZjlkLTk3ZTQtOWNjODJkY2U0NjBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzaJphnEUY+YTJd5VZmkgqP08nWjkBIrlZwn
JdgGozx0z++dNYjVN36lXeeeRw8CafX9LToD2U6UopUZWjQ1KbjnJ9I3d78sVzxP
sVh1uicSOeILdQsjXZ7I6PYtSnXRWzuqYWhEy4b1FCFuR1DAumxfi3ZWQDI75NwE
N2qKjjXLWae0amyN8nz8Y1jLO8MMfFyl16XPNZWq0PivVDaqAKOyhNXJdljfRdxD
xyUpZuIO9gdl5zJotgFaGiJgAdtKVuEk4184pXtZ7Znp6B1NspWuhQkdOxE1GIsp
bKNPBDo0zQ60P4m7AklflraLJ/4NkHnZBEoEiBvBap61Zw5SwwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFD0ZV1cU2k4e4gyulzRMeSNFhvxKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNzA2Mjk4ZGUtN2E5ZC0z
M2U2LTg0OWMtMzcwNmQ1YTI1NmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEKUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACUxjOF8QwuMZXwbncQy1JCEA6+Hf5lpm4c2f95VQvRoLofhiIEt94t6X
0WoEl+a4M0lTg0qxcGfzI0OPIXbNybejRx5iTPdMq4hwvLrv4M6R8fQKGV2W6DkL
SJL2WUanAA/d/QhINZs4nNd07c7ekPxqrn+HPxOSEXsM77DGXhbQxScgsUgztGq6
QVMZMWWs+U157QPRD4oLmHNl3v+JXlReBkNjktuQHj1oxdMoZIV/QqVFv0EjcFTq
bEbU8S6cUiIKzQnzsANVdqZAE0Qp7poSTIISxtz9g6x867sie5C5g/tmyRbdt04w
G8d4WeGSrGvTvmh13f2AoUM0TT4R7w==
-----END CERTIFICATE-----