Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/77c72178-1e2e-3afc-9458-c01011f9ff18.roa
File:                     77c72178-1e2e-3afc-9458-c01011f9ff18.roa (raw, json)
Hash identifier:          UjysjgwmLYd5cftWnRA+4bQPCvQSY9nD8G/HkaiuKdw=
Subject key identifier:   A7:53:E9:A0:2B:6C:56:64:8C:2D:53:26:7A:E9:C6:4D:80:A8:EF:51
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EEF96D43A78C30764BDF64340
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/77c72178-1e2e-3afc-9458-c01011f9ff18.roa
Signing time:             Tue 16 Aug 2022 12:00:00 +0000
ROA not before:           Tue 16 Aug 2022 12:00:00 +0000
ROA not after:            Wed 21 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        152.24.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ef:96:d4:3a:78:c3:07:64:bd:f6:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 16 12:00:00 2022 GMT
            Not After : Sep 21 04:00:00 2022 GMT
        Subject: CN=286b2b96-3639-4ad9-ac43-50462bc85f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0e:33:e9:43:42:e6:5a:06:87:7a:86:72:3b:
                    5f:91:cb:0d:14:99:26:ab:df:f1:60:12:9d:0e:3a:
                    f4:99:d8:67:62:2b:fc:84:e2:6e:6c:0b:d3:7a:47:
                    d7:d0:7d:ea:1e:3b:b8:c9:ff:60:0a:02:da:4d:5b:
                    59:53:18:ad:a3:29:5e:8a:31:3b:1b:ef:2f:3b:6e:
                    58:ed:1a:bf:d5:bd:7d:f7:04:95:82:6b:63:58:3d:
                    f4:48:da:5a:17:30:27:37:0a:25:d0:88:15:42:62:
                    90:27:f0:a6:ce:71:b4:c6:bd:87:e6:f7:2a:84:d7:
                    77:39:61:da:d0:cc:ff:28:19:70:9d:de:97:05:63:
                    36:ab:9d:ae:32:76:56:15:25:94:69:30:92:e9:9b:
                    0a:2d:e2:b9:ac:ec:b8:6a:c3:5e:de:23:7b:3c:b2:
                    ae:eb:a7:97:df:06:b9:2b:e0:15:8d:1b:cf:10:91:
                    2f:f1:58:73:9a:bf:b6:e5:fb:45:67:87:b5:1c:ce:
                    59:26:a8:cb:64:c3:40:fb:ea:28:dd:7a:f3:23:1b:
                    93:7a:7a:4e:00:a3:1a:c8:f3:82:8e:f9:e5:47:42:
                    d8:ea:0d:97:82:c1:85:c8:b9:a0:1c:3b:6d:4b:2b:
                    b5:67:66:13:67:e4:4a:80:ea:05:b8:9f:a5:53:b5:
                    75:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:53:E9:A0:2B:6C:56:64:8C:2D:53:26:7A:E9:C6:4D:80:A8:EF:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/77c72178-1e2e-3afc-9458-c01011f9ff18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.24.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:3c:e7:b6:17:f8:78:66:32:8b:bf:8e:fc:65:34:8c:1b:61:
         e0:a4:22:5c:84:90:f2:55:54:1b:a0:2e:65:c7:f9:6a:6d:c1:
         5f:27:92:f9:1e:ea:9b:1d:97:46:a6:d0:ea:92:cb:50:8c:de:
         21:cb:b4:88:b4:b6:fa:f8:4c:40:11:ca:e4:be:a3:97:a2:3a:
         d7:e6:77:6e:3c:63:a6:f8:bd:63:c6:fe:b4:58:c7:16:57:e2:
         7f:c1:54:3d:e5:2e:44:60:39:99:4d:f1:1a:ac:a0:5f:5a:42:
         11:cc:8d:e2:1d:2f:5d:e6:13:78:b2:d3:3d:65:6e:62:5e:7f:
         5e:5b:87:b7:25:91:ad:53:64:71:66:80:0a:fe:e6:12:89:5e:
         82:4f:74:67:78:6a:9c:70:46:f6:e2:87:ed:0c:85:7e:3e:27:
         d9:bd:9c:26:df:e7:0a:d3:4a:ec:90:42:ef:97:27:43:f9:a6:
         e3:4f:0e:52:06:bb:44:b2:b5:53:e7:98:e1:c6:45:8f:f7:18:
         47:d5:df:b6:5f:08:4f:41:bf:cb:9c:ae:2f:9d:dd:1d:10:b1:
         a4:0a:d8:29:d6:d7:4c:09:0c:9b:2e:f0:e5:97:c4:d6:35:cb:
         da:d4:92:79:e1:ea:a9:7b:ce:08:87:d2:30:8a:82:9c:c6:2f:
         2e:f7:6d:f3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD7vltQ6eMMHZL32Q0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDgxNjEyMDAwMFoXDTIyMDkyMTA0MDAwMFowLzEtMCsGA1UEAxMk
Mjg2YjJiOTYtMzYzOS00YWQ5LWFjNDMtNTA0NjJiYzg1ZjYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA4z6UNC5loGh3qGcjtfkcsNFJkmq9/xYBKd
Djr0mdhnYiv8hOJubAvTekfX0H3qHju4yf9gCgLaTVtZUxitoyleijE7G+8vO25Y
7Rq/1b199wSVgmtjWD30SNpaFzAnNwol0IgVQmKQJ/CmznG0xr2H5vcqhNd3OWHa
0Mz/KBlwnd6XBWM2q52uMnZWFSWUaTCS6ZsKLeK5rOy4asNe3iN7PLKu66eX3wa5
K+AVjRvPEJEv8Vhzmr+25ftFZ4e1HM5ZJqjLZMNA++oo3XrzIxuTenpOAKMayPOC
jvnlR0LY6g2XgsGFyLmgHDttSyu1Z2YTZ+RKgOoFuJ+lU7V1CwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKdT6aArbFZkjC1TJnrpxk2AqO9RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNzdjNzIxNzgtMWUyZS0z
YWZjLTk0NTgtYzAxMDExZjlmZjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmBgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAfjznthf4eGYyi7+O/GU0jBth4KQiXISQ8lVUG6AuZcf5am3BXyeS+R7q
mx2XRqbQ6pLLUIzeIcu0iLS2+vhMQBHK5L6jl6I61+Z3bjxjpvi9Y8b+tFjHFlfi
f8FUPeUuRGA5mU3xGqygX1pCEcyN4h0vXeYTeLLTPWVuYl5/XluHtyWRrVNkcWaA
Cv7mEolegk90Z3hqnHBG9uKH7QyFfj4n2b2cJt/nCtNK7JBC75cnQ/mm408OUga7
RLK1U+eY4cZFj/cYR9Xftl8IT0G/y5yuL53dHRCxpArYKdbXTAkMmy7w5ZfE1jXL
2tSSeeHqqXvOCIfSMIqCnMYvLvdt8w==
-----END CERTIFICATE-----