Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/77774836-51a3-3940-a94d-421b95de0c22.roa
File:                     77774836-51a3-3940-a94d-421b95de0c22.roa (raw, json)
Hash identifier:          tM5bGxBOLWTXvTHN/Fv4UXMU5YeYsuNGUyZWRBIOs9Q=
Subject key identifier:   E5:A2:4B:87:EB:FD:E1:D0:E7:51:C4:74:35:B2:2B:6C:AB:D5:F4:82
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DEF81B82FCB84A6D7F0784580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/77774836-51a3-3940-a94d-421b95de0c22.roa
Signing time:             Mon 16 May 2022 12:00:00 +0000
ROA not before:           Mon 16 May 2022 12:00:00 +0000
ROA not after:            Tue 21 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        56.67.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ef:81:b8:2f:cb:84:a6:d7:f0:78:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 16 12:00:00 2022 GMT
            Not After : Jun 21 04:00:00 2022 GMT
        Subject: CN=bd401886-a1fb-4f59-95fc-d7e10d89bdf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:89:04:f2:b8:19:07:72:37:18:9a:b3:33:d5:
                    c6:3d:d9:2c:b2:23:9b:04:e1:23:3d:7c:14:1c:17:
                    cf:8c:5a:c3:fd:02:e1:4e:e1:9c:21:31:85:b3:21:
                    47:f8:81:b7:a7:7d:33:1a:e7:f0:e8:cb:cc:31:a0:
                    1b:3d:d8:86:a3:57:9d:47:fb:54:c2:70:05:d6:08:
                    e0:57:ee:50:29:0c:e2:ba:c9:20:af:33:89:b4:f3:
                    d3:f4:1a:07:5d:6e:36:4d:77:26:5e:02:f7:cd:8c:
                    4b:7c:19:92:52:df:de:7f:93:e4:88:15:5e:b8:15:
                    e1:31:dc:8a:36:6a:4b:a2:7c:94:2b:f4:f1:55:57:
                    76:86:b6:b6:80:00:6b:2d:57:aa:87:e0:b8:c6:a7:
                    28:ec:09:10:3b:24:f3:de:72:9f:a7:a6:f3:91:3d:
                    d0:33:1d:eb:c8:5d:e6:83:82:ba:7a:01:ad:96:47:
                    10:fb:af:7a:1f:a8:e0:5d:5a:45:f1:a1:0c:9d:0d:
                    b4:1d:4a:f6:21:41:23:c8:1c:8a:08:db:cd:ee:f5:
                    c0:a3:85:6f:2f:25:eb:53:e0:a9:cd:75:e0:a2:ba:
                    b9:6d:9c:27:44:e1:5d:1a:32:dd:27:21:fa:20:c8:
                    11:09:d5:fb:03:16:6a:b9:1a:cc:57:d3:4c:6d:9a:
                    b6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A2:4B:87:EB:FD:E1:D0:E7:51:C4:74:35:B2:2B:6C:AB:D5:F4:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/77774836-51a3-3940-a94d-421b95de0c22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.67.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:59:c9:8c:90:5f:1c:30:5a:94:27:34:59:11:f2:12:2e:a2:
         13:f6:26:0b:6b:b1:c8:c4:0c:b4:c9:8d:67:02:2f:db:6a:10:
         34:7d:c3:7a:49:71:3d:c5:3e:bf:7b:9d:86:20:dc:10:e3:b6:
         a2:4a:84:72:60:ef:ac:2f:1f:02:bb:5e:46:7e:73:0b:79:b8:
         a8:36:72:1e:64:51:e5:d4:d7:11:70:95:92:8f:e0:89:d6:5d:
         b3:72:b7:a5:37:a9:ae:fb:59:ae:8d:8f:77:f6:58:73:0b:5a:
         e0:34:8f:52:74:e2:f4:ea:6d:0e:c3:92:52:e0:39:4c:76:c0:
         14:e8:4d:b9:d3:b1:44:b8:5b:13:c7:65:30:50:b1:9c:a9:f2:
         0e:ff:e9:bd:b0:06:0e:c6:50:83:ce:b7:fc:65:0f:bc:24:dd:
         e4:af:c1:2b:3c:2a:85:15:41:7d:bb:d2:5c:00:fb:e3:1f:8d:
         13:0e:c9:d9:e9:5b:c0:97:a2:75:1d:db:87:e5:56:c6:19:73:
         20:6d:7b:08:33:b6:5b:78:70:0d:b4:bd:e1:0d:5e:a8:cc:6a:
         44:c8:8d:3d:9f:17:da:ad:53:aa:77:60:43:8a:22:25:04:65:
         6b:ba:18:b8:d9:a5:50:80:62:a5:f4:19:e1:ce:43:34:fc:38:
         59:c2:48:51
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3vgbgvy4Sm1/B4RYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDUxNjEyMDAwMFoXDTIyMDYyMTA0MDAwMFowLzEtMCsGA1UEAxMk
YmQ0MDE4ODYtYTFmYi00ZjU5LTk1ZmMtZDdlMTBkODliZGYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgokE8rgZB3I3GJqzM9XGPdkssiObBOEjPXwU
HBfPjFrD/QLhTuGcITGFsyFH+IG3p30zGufw6MvMMaAbPdiGo1edR/tUwnAF1gjg
V+5QKQziuskgrzOJtPPT9BoHXW42TXcmXgL3zYxLfBmSUt/ef5PkiBVeuBXhMdyK
NmpLonyUK/TxVVd2hra2gABrLVeqh+C4xqco7AkQOyTz3nKfp6bzkT3QMx3ryF3m
g4K6egGtlkcQ+696H6jgXVpF8aEMnQ20HUr2IUEjyByKCNvN7vXAo4VvLyXrU+Cp
zXXgorq5bZwnROFdGjLdJyH6IMgRCdX7AxZquRrMV9NMbZq2NQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOWiS4fr/eHQ51HEdDWyK2yr1fSCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNzc3NzQ4MzYtNTFhMy0z
OTQwLWE5NGQtNDIxYjk1ZGUwYzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOEMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAeFnJjJBfHDBalCc0WRHyEi6iE/YmC2uxyMQMtMmNZwIv22oQNH3Deklx
PcU+v3udhiDcEOO2okqEcmDvrC8fArteRn5zC3m4qDZyHmRR5dTXEXCVko/gidZd
s3K3pTeprvtZro2Pd/ZYcwta4DSPUnTi9OptDsOSUuA5THbAFOhNudOxRLhbE8dl
MFCxnKnyDv/pvbAGDsZQg863/GUPvCTd5K/BKzwqhRVBfbvSXAD74x+NEw7J2elb
wJeidR3bh+VWxhlzIG17CDO2W3hwDbS94Q1eqMxqRMiNPZ8X2q1TqndgQ4oiJQRl
a7oYuNmlUIBipfQZ4c5DNPw4WcJIUQ==
-----END CERTIFICATE-----