Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d916b08-adfa-34a5-8e8b-184a1fde58f9.roa
File:                     7d916b08-adfa-34a5-8e8b-184a1fde58f9.roa (raw, json)
Hash identifier:          BaRrI7zsokScUoWBEhFSP6E1aR4edHLBoCl5Q9i+LyU=
Subject key identifier:   DA:AC:55:24:C1:F8:69:0B:75:83:58:2B:E5:7B:93:21:62:42:EB:F4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858408F2E29B64DC0B5D3087D6640
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d916b08-adfa-34a5-8e8b-184a1fde58f9.roa
Signing time:             Thu 12 Jan 2023 12:00:00 +0000
ROA not before:           Thu 12 Jan 2023 12:00:00 +0000
ROA not after:            Fri 17 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        75.47.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:8f:2e:29:b6:4d:c0:b5:d3:08:7d:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 12 12:00:00 2023 GMT
            Not After : Feb 17 05:00:00 2023 GMT
        Subject: CN=84f4ebad-c387-4271-9153-978bc6102d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:76:55:91:74:45:f2:0a:86:b2:e0:eb:0f:0d:
                    f4:5a:cf:f6:b2:20:6d:d1:03:16:91:9e:4b:a2:ac:
                    f0:66:0e:7a:d8:fa:72:01:e5:4b:26:49:de:72:88:
                    39:28:f2:dc:86:8f:e4:16:2e:61:8c:25:06:68:17:
                    f9:e5:fb:22:c0:5a:5e:03:8f:99:8c:7f:c5:3f:14:
                    26:4f:9a:d4:3a:80:2a:f4:ce:5d:93:d9:d9:89:15:
                    16:50:9e:19:cb:41:1c:d0:b2:bb:3e:a9:fd:49:2b:
                    73:48:a7:77:1a:d0:94:40:2b:05:af:54:42:04:1e:
                    85:cf:6f:db:d6:36:e7:79:11:c5:89:ff:cd:05:ea:
                    b8:d1:bb:ee:bb:9f:27:bd:44:b0:3a:24:dc:6e:ba:
                    68:b1:af:9a:03:48:9b:ec:a4:36:6b:11:60:bc:60:
                    69:f7:e0:0a:8b:c1:0b:ff:0c:ab:91:5f:53:27:75:
                    2f:f4:cc:5d:1e:03:ab:91:13:3e:25:1c:5d:ed:ba:
                    b0:df:57:62:53:fe:a1:6c:16:86:a7:3a:04:28:97:
                    ee:fa:7b:dd:7a:9c:64:bd:79:83:a2:70:52:a5:2b:
                    33:91:50:25:9a:4c:2c:20:5b:a5:86:76:35:7d:59:
                    27:c8:af:f6:49:c4:0d:be:31:7e:d0:0d:21:a1:9f:
                    aa:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AC:55:24:C1:F8:69:0B:75:83:58:2B:E5:7B:93:21:62:42:EB:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d916b08-adfa-34a5-8e8b-184a1fde58f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.47.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:9a:00:60:30:d7:25:28:fb:50:87:59:a0:01:f2:44:3d:95:
         99:03:13:81:84:f9:53:c7:10:fd:19:4f:a4:04:49:8f:73:d1:
         b6:b3:2c:5f:3b:a9:04:f1:34:c9:a5:a7:0f:6a:b2:97:3f:d0:
         4e:44:1b:4a:90:ee:e9:26:35:a2:69:1b:70:a4:92:b3:37:19:
         83:da:3b:18:de:e8:da:76:bf:c9:a6:33:e0:fd:6c:cc:fc:59:
         a5:c4:1d:9d:dc:58:81:db:e5:80:84:34:3d:ed:8d:9b:ce:64:
         40:b4:2b:28:e7:04:0c:93:72:0a:a6:e4:a1:58:3a:d3:55:b8:
         d6:b4:b9:60:9f:25:e9:36:0f:20:3d:d4:9b:09:c7:dd:01:b1:
         47:52:6e:62:74:be:86:43:53:05:8b:cb:c7:15:29:4e:b6:04:
         a5:45:4a:27:e8:70:80:fb:b0:ea:b0:97:41:d4:85:fd:7b:59:
         00:0c:4e:5e:ef:48:c6:07:a9:e7:da:2e:3f:46:d1:51:71:fc:
         e9:d8:2e:17:00:79:cd:e1:56:af:bd:53:74:ce:10:b9:4f:db:
         20:51:e2:d5:41:6d:f8:2d:2b:ff:72:52:97:01:c3:f0:35:8d:
         09:d1:6b:8f:c0:89:00:af:05:c5:2e:48:ad:7a:6f:87:b2:b7:
         bf:a0:0c:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWECPLim2TcC10wh9ZkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDExMjEyMDAwMFoXDTIzMDIxNzA1MDAwMFowLzEtMCsGA1UEAxMk
ODRmNGViYWQtYzM4Ny00MjcxLTkxNTMtOTc4YmM2MTAyZDUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnZVkXRF8gqGsuDrDw30Ws/2siBt0QMWkZ5L
oqzwZg562PpyAeVLJknecog5KPLcho/kFi5hjCUGaBf55fsiwFpeA4+ZjH/FPxQm
T5rUOoAq9M5dk9nZiRUWUJ4Zy0Ec0LK7Pqn9SStzSKd3GtCUQCsFr1RCBB6Fz2/b
1jbneRHFif/NBeq40bvuu58nvUSwOiTcbrposa+aA0ib7KQ2axFgvGBp9+AKi8EL
/wyrkV9TJ3Uv9MxdHgOrkRM+JRxd7bqw31diU/6hbBaGpzoEKJfu+nvdepxkvXmD
onBSpSszkVAlmkwsIFulhnY1fVknyK/2ScQNvjF+0A0hoZ+qnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNqsVSTB+GkLdYNYK+V7kyFiQuv0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvN2Q5MTZiMDgtYWRmYS0z
NGE1LThlOGItMTg0YTFmZGU1OGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSy+AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADGaAGAw1yUo+1CHWaAB8kQ9lZkDE4GE+VPHEP0ZT6QESY9z0bazLF87
qQTxNMmlpw9qspc/0E5EG0qQ7ukmNaJpG3CkkrM3GYPaOxje6Np2v8mmM+D9bMz8
WaXEHZ3cWIHb5YCEND3tjZvOZEC0KyjnBAyTcgqm5KFYOtNVuNa0uWCfJek2DyA9
1JsJx90BsUdSbmJ0voZDUwWLy8cVKU62BKVFSifocID7sOqwl0HUhf17WQAMTl7v
SMYHqefaLj9G0VFx/OnYLhcAec3hVq+9U3TOELlP2yBR4tVBbfgtK/9yUpcBw/A1
jQnRa4/AiQCvBcUuSK16b4eyt7+gDJ4=
-----END CERTIFICATE-----