Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/716ed726-4915-3e5d-807d-e084e9bed95e.roa
File:                     716ed726-4915-3e5d-807d-e084e9bed95e.roa (raw, json)
Hash identifier:          P30JmbwVBnT0FWbTkZpeSN5kiROnKqIuZzEbillBb/s=
Subject key identifier:   C6:75:2A:A7:7E:9B:10:A5:09:5A:C6:2B:EC:25:7E:51:E8:70:C5:00
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DB10A664C43B86B5CD139F800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/716ed726-4915-3e5d-807d-e084e9bed95e.roa
Signing time:             Sun 24 Apr 2022 12:00:00 +0000
ROA not before:           Sun 24 Apr 2022 12:00:00 +0000
ROA not after:            Mon 30 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        160.209.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b1:0a:66:4c:43:b8:6b:5c:d1:39:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 24 12:00:00 2022 GMT
            Not After : May 30 04:00:00 2022 GMT
        Subject: CN=c3de1961-bb39-4726-bbd9-4c76ea4f6b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1b:f8:8c:6d:2b:db:a1:41:04:d8:e0:8e:56:
                    51:6e:72:db:5a:c0:4a:53:ff:ac:ed:66:95:61:b4:
                    9b:9a:ec:72:d6:29:70:fb:53:e5:14:ef:f7:8a:6c:
                    d1:47:d2:8a:25:7b:95:6e:be:d6:c3:d0:e4:1c:d0:
                    a6:85:ce:21:dd:5a:76:02:54:4f:17:54:c9:84:eb:
                    07:01:c0:f0:91:6a:fa:5b:12:a0:35:fe:5f:11:58:
                    0b:ab:f9:3d:37:12:b4:51:98:63:06:de:d4:bb:81:
                    22:e0:d6:e3:a9:90:67:26:1e:98:e5:38:07:ea:63:
                    0f:da:f4:b6:68:5b:39:fd:dc:47:54:d0:d4:bf:a8:
                    e8:2e:23:ef:c0:89:3c:be:c4:7e:be:c6:25:c3:ee:
                    e7:5d:82:50:4f:7a:1a:f8:60:2b:5f:bf:d4:b0:ff:
                    a4:ba:be:d2:71:92:88:9d:44:3e:d5:9b:c5:97:21:
                    06:e3:0d:6c:d5:42:dd:a2:22:d0:06:2b:e1:2a:ee:
                    2a:d3:46:19:ef:4b:ba:41:60:63:d1:52:61:b1:a5:
                    d1:26:c6:c5:67:b4:46:be:52:61:08:f2:7c:40:2e:
                    51:50:94:3b:50:f7:cf:36:87:1e:ac:ea:e4:eb:32:
                    ab:b5:07:15:68:10:06:bb:0a:71:71:9c:6e:0b:73:
                    88:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:75:2A:A7:7E:9B:10:A5:09:5A:C6:2B:EC:25:7E:51:E8:70:C5:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/716ed726-4915-3e5d-807d-e084e9bed95e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.209.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:35:fc:f4:b2:76:b7:b4:76:76:25:24:61:16:3e:a9:42:36:
         f7:10:a7:0b:6d:66:e3:30:aa:a3:6b:89:8a:a4:a5:4b:a2:9e:
         ef:b3:a4:b2:3d:3b:68:c7:00:09:2c:e3:7d:b9:f8:73:cf:a5:
         d4:71:55:26:bf:f2:6f:c0:81:2e:3c:12:12:48:46:e7:7f:58:
         08:c4:ee:3b:7b:bb:0a:ad:a3:8c:3c:55:16:37:88:56:3c:5a:
         ae:0f:93:5f:7c:27:d3:0d:74:42:cc:70:20:f4:e5:d5:49:53:
         0f:6f:b4:cf:89:0d:68:02:e8:8b:ef:0a:94:f2:9a:8f:30:a3:
         30:f1:48:98:52:29:94:7e:5e:b1:cf:53:94:d7:3c:cb:d9:bc:
         28:c3:ba:50:19:9a:02:86:ae:1b:01:78:47:e8:66:bd:ac:33:
         9b:d6:21:99:72:49:62:e0:ae:7b:7f:c3:e2:9f:c8:c6:70:f1:
         a8:82:55:3b:36:7c:cc:bf:e8:9c:6d:67:f7:4c:9a:f6:e1:01:
         39:fb:52:29:90:f5:5f:60:ef:f2:23:f8:01:92:ea:d7:42:df:
         20:cc:aa:26:d3:73:0c:08:af:a9:37:e4:ab:d4:09:8f:4a:c9:
         56:47:18:b9:32:93:7d:31:1b:1e:eb:24:4a:37:73:96:6d:5a:
         a1:24:4f:6d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2xCmZMQ7hrXNE5+AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDQyNDEyMDAwMFoXDTIyMDUzMDA0MDAwMFowLzEtMCsGA1UEAxMk
YzNkZTE5NjEtYmIzOS00NzI2LWJiZDktNGM3NmVhNGY2YjIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hv4jG0r26FBBNjgjlZRbnLbWsBKU/+s7WaV
YbSbmuxy1ilw+1PlFO/3imzRR9KKJXuVbr7Ww9DkHNCmhc4h3Vp2AlRPF1TJhOsH
AcDwkWr6WxKgNf5fEVgLq/k9NxK0UZhjBt7Uu4Ei4NbjqZBnJh6Y5TgH6mMP2vS2
aFs5/dxHVNDUv6joLiPvwIk8vsR+vsYlw+7nXYJQT3oa+GArX7/UsP+kur7ScZKI
nUQ+1ZvFlyEG4w1s1ULdoiLQBivhKu4q00YZ70u6QWBj0VJhsaXRJsbFZ7RGvlJh
CPJ8QC5RUJQ7UPfPNocerOrk6zKrtQcVaBAGuwpxcZxuC3OIMwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMZ1Kqd+mxClCVrGK+wlflHocMUAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNzE2ZWQ3MjYtNDkxNS0z
ZTVkLTgwN2QtZTA4NGU5YmVkOTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoNEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEASDX89LJ2t7R2diUkYRY+qUI29xCnC21m4zCqo2uJiqSlS6Ke77Oksj07
aMcACSzjfbn4c8+l1HFVJr/yb8CBLjwSEkhG539YCMTuO3u7Cq2jjDxVFjeIVjxa
rg+TX3wn0w10QsxwIPTl1UlTD2+0z4kNaALoi+8KlPKajzCjMPFImFIplH5esc9T
lNc8y9m8KMO6UBmaAoauGwF4R+hmvawzm9YhmXJJYuCue3/D4p/IxnDxqIJVOzZ8
zL/onG1n90ya9uEBOftSKZD1X2Dv8iP4AZLq10LfIMyqJtNzDAivqTfkq9QJj0rJ
VkcYuTKTfTEbHuskSjdzlm1aoSRPbQ==
-----END CERTIFICATE-----