Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d2d1c99-5954-308f-9d7f-0a04a8f1a175.roa
File:                     7d2d1c99-5954-308f-9d7f-0a04a8f1a175.roa (raw, json)
Hash identifier:          0bEG3tNM6oxsGm9UwfIZCOyZRQ3q4JkF1KDJ+MZlgEM=
Subject key identifier:   3C:90:A2:69:C4:03:43:DD:3C:E6:30:EA:08:24:A3:C9:03:38:E2:BF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D2F6E585A3CA78648A39A4C60
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d2d1c99-5954-308f-9d7f-0a04a8f1a175.roa
Signing time:             Thu 10 Mar 2022 05:00:00 +0000
ROA not before:           Thu 10 Mar 2022 05:00:00 +0000
ROA not after:            Thu 14 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.121.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2f:6e:58:5a:3c:a7:86:48:a3:9a:4c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 10 05:00:00 2022 GMT
            Not After : Apr 14 04:00:00 2022 GMT
        Subject: CN=de97baf5-299a-43f0-b348-ddaf462c58ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cb:0a:62:c6:75:0e:b4:ad:82:78:f6:41:c4:
                    11:c9:f5:38:4d:cb:b7:34:d8:02:ce:f2:e2:74:f9:
                    a4:da:45:8b:47:23:e8:45:95:4c:25:4c:18:5e:e8:
                    22:e8:0c:4a:8e:b8:4e:9d:df:3c:a1:a2:3b:fe:27:
                    3c:d5:47:6a:40:ee:d8:09:c3:dc:ba:07:30:24:95:
                    e4:1e:19:75:b9:53:9b:a5:2d:25:49:f0:dc:6b:f3:
                    29:f2:c8:44:44:24:2d:34:a3:da:7d:6d:65:9c:6f:
                    d9:8a:d9:e5:4f:6f:ee:8b:1b:bb:5e:84:f2:75:aa:
                    a0:27:af:c2:0d:84:40:08:40:3f:34:a5:7e:73:cf:
                    9d:4f:af:7a:06:e3:8b:83:c4:1a:64:89:68:de:af:
                    e1:1f:0b:c7:91:56:ab:a4:67:39:69:48:a0:5c:d3:
                    76:96:c6:66:56:00:11:3e:fc:8c:aa:1d:15:c3:a4:
                    67:af:34:a4:4f:1f:53:08:70:cc:81:8f:00:cb:0a:
                    a2:d8:4f:eb:98:5e:73:b8:a1:61:56:1c:b9:c5:ae:
                    d1:df:27:3c:ea:a8:a5:e1:98:cc:1d:3b:ee:3f:a2:
                    b5:5d:9a:db:33:76:0b:40:10:f6:54:e1:d2:cb:44:
                    ce:32:66:05:d2:05:ac:00:91:a2:c4:18:cd:b4:e9:
                    9a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:90:A2:69:C4:03:43:DD:3C:E6:30:EA:08:24:A3:C9:03:38:E2:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d2d1c99-5954-308f-9d7f-0a04a8f1a175.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.121.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:48:05:ad:7d:1b:d9:a8:18:a1:77:64:ce:ba:5d:1b:a7:2d:
         3d:92:84:25:dc:df:d9:82:75:42:bb:7e:e3:64:f2:b0:5c:c3:
         a6:95:23:a3:75:3e:40:24:ad:f9:f7:d7:0c:e9:c4:6b:20:c6:
         6b:b8:79:a2:04:c9:c2:c8:7c:7d:a6:0b:28:ed:d0:aa:ea:8d:
         9f:1c:cb:e0:35:d9:d1:ce:16:18:4a:58:8c:d6:b1:e4:86:57:
         7a:fe:2f:ed:11:c7:3c:d1:75:74:2c:e8:5f:8e:27:ae:7e:36:
         61:49:5a:83:24:df:cb:00:00:62:6a:7a:ed:b4:79:da:15:aa:
         10:75:3b:73:ce:83:43:2e:d7:32:6b:f9:64:67:cc:a5:6b:38:
         7b:20:0f:ba:df:0a:a6:16:4b:59:0c:27:84:90:a1:d5:8b:72:
         95:64:74:43:38:04:a9:1e:90:33:03:19:5d:83:2e:e2:5b:01:
         e6:b8:a2:cf:fd:7f:53:c1:bf:29:45:fb:d9:c7:27:8e:7e:a6:
         bc:70:9a:4f:5c:25:3b:e1:17:56:95:37:b5:69:aa:b2:4e:00:
         d8:13:21:5d:c9:a4:9d:a5:a4:3e:a9:cd:26:06:00:18:14:2e:
         85:94:a0:c3:7c:d2:99:8c:82:1e:9e:97:db:ea:f4:94:0e:70:
         f3:ee:a7:c7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0vblhaPKeGSKOaTGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMxMDA1MDAwMFoXDTIyMDQxNDA0MDAwMFowLzEtMCsGA1UEAxMk
ZGU5N2JhZjUtMjk5YS00M2YwLWIzNDgtZGRhZjQ2MmM1OGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMsKYsZ1DrStgnj2QcQRyfU4Tcu3NNgCzvLi
dPmk2kWLRyPoRZVMJUwYXugi6AxKjrhOnd88oaI7/ic81UdqQO7YCcPcugcwJJXk
Hhl1uVObpS0lSfDca/Mp8shERCQtNKPafW1lnG/ZitnlT2/uixu7XoTydaqgJ6/C
DYRACEA/NKV+c8+dT696BuOLg8QaZIlo3q/hHwvHkVarpGc5aUigXNN2lsZmVgAR
PvyMqh0Vw6RnrzSkTx9TCHDMgY8Aywqi2E/rmF5zuKFhVhy5xa7R3yc86qil4ZjM
HTvuP6K1XZrbM3YLQBD2VOHSy0TOMmYF0gWsAJGixBjNtOmaywIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDyQomnEA0PdPOYw6ggko8kDOOK/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvN2QyZDFjOTktNTk1NC0z
MDhmLTlkN2YtMGEwNGE4ZjFhMTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEHkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAH0gFrX0b2agYoXdkzrpdG6ctPZKEJdzf2YJ1Qrt+42TysFzDppUjo3U+
QCSt+ffXDOnEayDGa7h5ogTJwsh8faYLKO3QquqNnxzL4DXZ0c4WGEpYjNax5IZX
ev4v7RHHPNF1dCzoX44nrn42YUlagyTfywAAYmp67bR52hWqEHU7c86DQy7XMmv5
ZGfMpWs4eyAPut8KphZLWQwnhJCh1YtylWR0QzgEqR6QMwMZXYMu4lsB5riiz/1/
U8G/KUX72ccnjn6mvHCaT1wlO+EXVpU3tWmqsk4A2BMhXcmknaWkPqnNJgYAGBQu
hZSgw3zSmYyCHp6X2+r0lA5w8+6nxw==
-----END CERTIFICATE-----