Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/720ef8e0-aba3-3222-8f23-13f928a76e29.roa
File:                     720ef8e0-aba3-3222-8f23-13f928a76e29.roa (raw, json)
Hash identifier:          qjwvbUnijrUlnieaBUDXupiHoNGZ+IBKRUeHgZqszGA=
Subject key identifier:   EC:6F:57:63:60:CB:F1:9A:C6:12:77:DF:38:E2:E3:29:87:A7:5D:13
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D567C2FE6D0CB0AE8AB1B4B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/720ef8e0-aba3-3222-8f23-13f928a76e29.roa
Signing time:             Thu 24 Mar 2022 04:00:00 +0000
ROA not before:           Thu 24 Mar 2022 04:00:00 +0000
ROA not after:            Thu 28 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.49.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:56:7c:2f:e6:d0:cb:0a:e8:ab:1b:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 24 04:00:00 2022 GMT
            Not After : Apr 28 04:00:00 2022 GMT
        Subject: CN=569969dc-e5a5-4478-8f0d-cd97b556d989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d9:58:f6:af:fb:43:d5:d8:d1:55:5c:31:5d:
                    ab:a7:84:2f:94:78:41:41:45:6e:57:02:5c:f1:d3:
                    5a:cf:cd:eb:86:39:a5:92:85:df:8f:65:20:9c:d0:
                    c2:cd:a8:3f:fa:28:08:b9:00:ca:83:bb:7b:fd:74:
                    b2:3b:aa:49:d5:9a:22:2a:b8:0d:b2:07:21:18:0c:
                    8a:b5:6d:d9:27:eb:75:59:fc:df:11:97:83:fc:f2:
                    db:f8:25:c2:13:ec:db:22:c4:28:40:93:7f:ff:f2:
                    33:c0:2a:04:a5:6c:57:90:1f:4d:de:a5:e0:6f:3f:
                    fc:40:2f:5c:3d:8a:9e:e1:8a:90:3c:c1:ae:df:ec:
                    ee:aa:18:ca:d1:98:67:36:96:0f:c1:6e:e0:2c:b2:
                    1c:b9:4d:cf:62:94:d4:f1:ba:5a:a0:2f:b5:79:6a:
                    6e:83:0a:17:43:31:a6:ab:0f:23:41:5a:40:27:35:
                    2c:ca:e2:b6:7d:9a:19:c2:33:7a:1a:bf:e9:5c:d9:
                    2a:c4:ab:dc:01:74:ce:93:88:54:6a:e8:a6:b0:cc:
                    2b:fd:3c:9b:56:0d:44:fc:92:96:5c:0f:32:87:0f:
                    b5:f2:5d:5c:fd:30:a4:19:4f:e2:f1:12:7a:b7:06:
                    43:79:9f:f3:51:1c:4d:78:e0:df:c6:73:79:fc:51:
                    ca:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6F:57:63:60:CB:F1:9A:C6:12:77:DF:38:E2:E3:29:87:A7:5D:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/720ef8e0-aba3-3222-8f23-13f928a76e29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.49.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:ba:ac:49:cf:b7:bd:78:a6:d7:65:9a:8c:cb:b0:74:7e:83:
         a4:1e:92:a1:f8:9d:77:fc:de:47:7c:a5:e8:56:7c:5d:02:9d:
         bc:e6:eb:c8:be:17:5e:3b:c5:0a:8e:d1:3d:6b:6c:0e:cd:0f:
         e5:e2:a9:cb:2d:3a:16:3a:d2:7b:21:80:69:ff:28:bc:50:0a:
         88:3d:ac:20:bb:70:23:1c:39:3c:2c:53:1c:c4:82:e3:de:90:
         fb:6b:5c:fc:46:6b:bd:98:ee:cc:b8:c9:f3:8a:f0:c2:37:e1:
         cc:43:cd:87:1f:cc:50:77:dd:97:d2:7a:c1:81:07:31:b6:2b:
         3b:f7:16:bd:17:5f:6d:0e:44:5c:e0:70:de:e9:45:dc:ef:5b:
         a5:3d:35:f6:5d:73:73:69:fd:9e:53:6f:45:5c:d0:4e:42:c0:
         fc:38:71:c7:36:a6:a0:98:27:35:0e:8a:08:dd:3f:20:91:a6:
         95:63:67:24:e2:b1:16:b6:14:bf:0f:5a:04:cf:35:dd:88:12:
         8f:47:34:f1:68:2b:ec:b1:9d:a3:01:19:50:b6:05:7c:79:99:
         dc:46:88:fc:c8:c2:b9:71:b1:cb:15:cf:33:5b:62:2f:8f:39:
         e1:5b:4a:fc:8e:67:e8:57:75:4e:26:b9:a0:1c:0f:17:d8:18:
         71:de:13:9c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD1WfC/m0MsK6KsbSwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMyNDA0MDAwMFoXDTIyMDQyODA0MDAwMFowLzEtMCsGA1UEAxMk
NTY5OTY5ZGMtZTVhNS00NDc4LThmMGQtY2Q5N2I1NTZkOTg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNlY9q/7Q9XY0VVcMV2rp4QvlHhBQUVuVwJc
8dNaz83rhjmlkoXfj2UgnNDCzag/+igIuQDKg7t7/XSyO6pJ1ZoiKrgNsgchGAyK
tW3ZJ+t1WfzfEZeD/PLb+CXCE+zbIsQoQJN///IzwCoEpWxXkB9N3qXgbz/8QC9c
PYqe4YqQPMGu3+zuqhjK0ZhnNpYPwW7gLLIcuU3PYpTU8bpaoC+1eWpugwoXQzGm
qw8jQVpAJzUsyuK2fZoZwjN6Gr/pXNkqxKvcAXTOk4hUauimsMwr/TybVg1E/JKW
XA8yhw+18l1c/TCkGU/i8RJ6twZDeZ/zURxNeODfxnN5/FHKrwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOxvV2Ngy/GaxhJ33zji4ymHp10TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNzIwZWY4ZTAtYWJhMy0z
MjIyLThmMjMtMTNmOTI4YTc2ZTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEDEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEApbqsSc+3vXim12WajMuwdH6DpB6Sofidd/zeR3yl6FZ8XQKdvObryL4X
XjvFCo7RPWtsDs0P5eKpyy06FjrSeyGAaf8ovFAKiD2sILtwIxw5PCxTHMSC496Q
+2tc/EZrvZjuzLjJ84rwwjfhzEPNhx/MUHfdl9J6wYEHMbYrO/cWvRdfbQ5EXOBw
3ulF3O9bpT019l1zc2n9nlNvRVzQTkLA/DhxxzamoJgnNQ6KCN0/IJGmlWNnJOKx
FrYUvw9aBM813YgSj0c08Wgr7LGdowEZULYFfHmZ3EaI/MjCuXGxyxXPM1tiL485
4VtK/I5n6Fd1Tia5oBwPF9gYcd4TnA==
-----END CERTIFICATE-----