Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/746a9fc9-6799-3958-a34a-8966f4929646.roa
File:                     746a9fc9-6799-3958-a34a-8966f4929646.roa (raw, json)
Hash identifier:          /1XAQYL8U2A44RdSH/8+17T7N9x1PQghIXC5N7FfPCU=
Subject key identifier:   25:93:EF:0E:FB:65:06:85:C2:57:57:3F:A9:2B:7C:8C:20:45:94:91
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E95261417CF6E4DE637812280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/746a9fc9-6799-3958-a34a-8966f4929646.roa
Signing time:             Fri 15 Jul 2022 12:00:00 +0000
ROA not before:           Fri 15 Jul 2022 12:00:00 +0000
ROA not after:            Sat 20 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        108.136.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:95:26:14:17:cf:6e:4d:e6:37:81:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 15 12:00:00 2022 GMT
            Not After : Aug 20 04:00:00 2022 GMT
        Subject: CN=865332b8-0ba2-4f1d-85aa-6ed20f08d7fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:49:43:04:e7:fc:a1:f0:0e:4e:a0:28:c5:61:
                    24:fd:cf:c1:db:b5:f3:26:73:bd:48:c5:b9:50:be:
                    90:8d:a6:33:02:f6:37:32:08:0d:b1:a1:10:8b:89:
                    a7:4d:7c:7a:03:43:5d:d3:c8:11:82:d6:eb:54:29:
                    ac:88:11:84:9e:29:05:e6:d3:64:f8:62:bb:8e:e4:
                    15:95:a6:46:c7:d0:f6:16:83:43:8f:db:b2:a9:50:
                    5c:46:ea:09:65:eb:a4:cc:e7:89:23:4a:49:6a:10:
                    c5:a6:8e:d3:57:2d:c0:9c:1a:95:f4:9a:77:ba:1b:
                    7d:92:4d:9b:07:b0:36:7e:c4:e8:15:54:04:ac:85:
                    e2:72:11:73:2f:f6:93:6b:3f:bc:ea:e9:15:03:78:
                    33:26:f2:f2:cc:a4:a0:eb:34:bb:6d:74:18:91:b6:
                    58:29:7d:06:04:e2:a3:6e:a4:94:91:73:ff:60:72:
                    9e:f2:0a:13:e8:44:86:98:b1:2b:50:21:c5:a7:c0:
                    a4:48:ed:c8:bc:80:ff:f6:a9:74:ac:e5:1c:0b:81:
                    a8:7b:f8:34:5b:40:f0:ef:e1:74:fe:e2:5b:9c:2b:
                    86:cd:31:3c:fb:41:bb:d8:ab:11:cb:ac:00:68:6c:
                    60:36:aa:45:12:57:a6:24:ca:71:0d:3c:3b:f8:e8:
                    97:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:93:EF:0E:FB:65:06:85:C2:57:57:3F:A9:2B:7C:8C:20:45:94:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/746a9fc9-6799-3958-a34a-8966f4929646.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.136.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:63:fc:42:07:c6:c8:2c:97:23:78:5c:86:cd:6f:c1:98:1b:
         f3:48:09:21:ce:34:0c:da:b2:f3:1c:35:ec:cd:e4:a7:71:79:
         43:8f:5f:df:3e:71:36:d3:e6:2d:42:21:08:33:dc:f7:11:55:
         2d:df:2e:d4:07:33:33:04:d5:2e:31:33:5b:86:77:8f:9c:67:
         93:9c:44:3c:cb:23:49:ad:72:89:4b:ac:52:5b:b1:27:da:98:
         5b:2b:d0:45:00:9a:07:9c:76:68:5f:ab:60:9c:a1:3f:5b:70:
         09:cd:c9:f1:96:3a:c3:07:e0:1f:99:11:bb:33:85:41:52:a6:
         6b:f7:d4:bf:81:75:58:d3:a8:f3:ab:e8:9f:bf:17:71:c4:5f:
         4e:4d:c7:c4:aa:dc:2e:a3:27:28:da:af:82:b2:77:d9:db:37:
         44:6e:bc:28:f8:f0:93:ca:23:e3:4e:6d:b3:d8:78:78:57:fe:
         f1:26:73:78:d0:df:53:14:27:ec:74:16:5d:8e:2c:ad:c5:8b:
         86:3a:e9:50:bf:dd:8b:66:f0:b2:84:ac:b8:80:a5:f1:8b:56:
         3f:4d:9c:54:ed:b3:8b:ac:61:49:75:47:a6:74:ba:05:81:49:
         44:4e:a6:3c:32:08:65:17:ab:55:8d:db:b8:d6:77:38:e1:74:
         fa:b5:19:bc
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6VJhQXz25N5jeBIoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcxNTEyMDAwMFoXDTIyMDgyMDA0MDAwMFowLzEtMCsGA1UEAxMk
ODY1MzMyYjgtMGJhMi00ZjFkLTg1YWEtNmVkMjBmMDhkN2ZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgklDBOf8ofAOTqAoxWEk/c/B27XzJnO9SMW5
UL6QjaYzAvY3MggNsaEQi4mnTXx6A0Nd08gRgtbrVCmsiBGEnikF5tNk+GK7juQV
laZGx9D2FoNDj9uyqVBcRuoJZeukzOeJI0pJahDFpo7TVy3AnBqV9Jp3uht9kk2b
B7A2fsToFVQErIXichFzL/aTaz+86ukVA3gzJvLyzKSg6zS7bXQYkbZYKX0GBOKj
bqSUkXP/YHKe8goT6ESGmLErUCHFp8CkSO3IvID/9ql0rOUcC4Goe/g0W0Dw7+F0
/uJbnCuGzTE8+0G72KsRy6wAaGxgNqpFElemJMpxDTw7+OiX5QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCWT7w77ZQaFwldXP6krfIwgRZSRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNzQ2YTlmYzktNjc5OS0z
OTU4LWEzNGEtODk2NmY0OTI5NjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCbIgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAdmP8QgfGyCyXI3hchs1vwZgb80gJIc40DNqy8xw17M3kp3F5Q49f3z5x
NtPmLUIhCDPc9xFVLd8u1AczMwTVLjEzW4Z3j5xnk5xEPMsjSa1yiUusUluxJ9qY
WyvQRQCaB5x2aF+rYJyhP1twCc3J8ZY6wwfgH5kRuzOFQVKma/fUv4F1WNOo86vo
n78XccRfTk3HxKrcLqMnKNqvgrJ32ds3RG68KPjwk8oj405ts9h4eFf+8SZzeNDf
UxQn7HQWXY4srcWLhjrpUL/di2bwsoSsuICl8YtWP02cVO2zi6xhSXVHpnS6BYFJ
RE6mPDIIZRerVY3buNZ3OOF0+rUZvA==
-----END CERTIFICATE-----