Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/80f97c2d-71c7-3497-88a5-413cf002f2b1.roa
File:                     80f97c2d-71c7-3497-88a5-413cf002f2b1.roa (raw, json)
Hash identifier:          Ufp1sNPKIJP1IjjGJL9PTcDgfSj8K/mlApKUfp3FA84=
Subject key identifier:   65:F7:7D:F4:20:0D:80:FF:A3:B8:0E:D4:B6:37:55:74:69:F3:60:1D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F86C469130D7B01E43A89C580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/80f97c2d-71c7-3497-88a5-413cf002f2b1.roa
Signing time:             Mon 10 Oct 2022 15:51:07 +0000
ROA not before:           Mon 10 Oct 2022 15:51:07 +0000
ROA not after:            Mon 14 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        194.21.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:86:c4:69:13:0d:7b:01:e4:3a:89:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 10 15:51:07 2022 GMT
            Not After : Nov 14 05:00:00 2022 GMT
        Subject: CN=096bf460-1276-42ef-abac-50391bab8434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cd:c0:fb:11:1c:6a:b8:cf:30:08:5b:e2:d7:
                    ff:3a:68:ce:f3:05:4d:92:f4:84:96:d0:32:cc:93:
                    3c:38:0e:b3:a4:57:f8:6a:5d:72:48:fc:39:a2:d8:
                    ef:b8:fe:35:a9:22:7d:14:cf:5e:54:66:df:5c:46:
                    6f:e4:81:d7:5b:10:da:11:41:4d:71:18:3f:91:85:
                    76:57:12:59:5c:46:bc:f4:7f:97:c3:ab:13:03:e4:
                    dc:61:01:0a:c2:45:95:ee:b1:d3:1c:bc:15:28:90:
                    f0:ea:ba:b4:65:41:f6:fb:45:50:9c:bc:07:bd:4b:
                    3a:56:62:65:20:26:e2:d8:89:40:aa:d4:18:79:8a:
                    d4:02:62:63:2c:4c:72:a8:0f:0f:82:28:e1:90:be:
                    aa:8e:d8:71:45:4a:ca:3e:ea:bc:95:17:5b:98:1d:
                    e9:21:77:17:6f:1d:10:bb:e5:5e:78:41:41:fa:5c:
                    b4:cb:a6:57:45:fa:fc:62:2e:93:69:5c:1c:71:d2:
                    20:ca:82:29:58:81:90:40:b4:c0:55:f0:2c:09:93:
                    b8:87:1e:66:2a:25:f5:77:21:9e:db:af:3f:7f:4a:
                    86:cd:0b:5e:18:eb:64:63:8a:1f:62:3f:db:4c:23:
                    d7:94:b0:f5:6b:18:46:48:f9:00:2f:7b:ef:f6:5b:
                    0b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F7:7D:F4:20:0D:80:FF:A3:B8:0E:D4:B6:37:55:74:69:F3:60:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/80f97c2d-71c7-3497-88a5-413cf002f2b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.21.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:2c:91:9f:51:b8:ef:8d:35:c7:c2:e7:83:40:fd:84:1b:26:
         ce:1f:70:78:48:a6:a7:f6:09:22:8d:e9:37:0c:7c:a2:a1:64:
         63:4d:8e:72:64:fe:3a:b9:3a:9a:d3:86:34:04:c7:f3:11:5c:
         d4:cd:ec:35:44:0f:03:3c:1e:b5:c4:c0:e0:3b:65:92:8c:1b:
         49:ae:d7:1b:7e:d0:c0:0e:ee:f4:a8:ae:22:80:df:53:33:32:
         7d:5d:05:8d:41:8a:17:dc:cf:55:35:da:f2:06:cf:83:dc:5d:
         cc:12:ab:9a:2d:7a:0e:8e:f3:ed:0e:e3:b9:cf:9b:98:c8:e7:
         a0:db:56:3d:2d:81:e5:10:75:61:e9:99:4d:5b:25:2d:a4:64:
         c9:b2:a5:f7:68:9c:35:80:29:9c:c7:12:d9:6a:e4:dd:ee:3c:
         69:17:9f:5a:bf:f8:af:b5:55:0a:41:4c:fc:81:b3:c2:0c:2c:
         1f:e2:6e:c4:5a:07:33:81:68:20:84:83:da:a7:9b:33:81:0c:
         0b:0f:0c:84:e6:dd:9d:26:64:cb:48:33:6b:a8:4e:ba:f9:bc:
         ab:60:11:a2:77:b1:3a:93:03:c4:e2:c3:82:ed:b0:ff:2f:ed:
         a7:f5:bb:11:93:70:66:cc:d3:46:82:1c:83:43:4d:eb:7f:b5:
         5c:b5:94:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD+GxGkTDXsB5DqJxYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAxMDE1NTEwN1oXDTIyMTExNDA1MDAwMFowLzEtMCsGA1UEAxMk
MDk2YmY0NjAtMTI3Ni00MmVmLWFiYWMtNTAzOTFiYWI4NDM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgc3A+xEcarjPMAhb4tf/OmjO8wVNkvSEltAy
zJM8OA6zpFf4al1ySPw5otjvuP41qSJ9FM9eVGbfXEZv5IHXWxDaEUFNcRg/kYV2
VxJZXEa89H+Xw6sTA+TcYQEKwkWV7rHTHLwVKJDw6rq0ZUH2+0VQnLwHvUs6VmJl
ICbi2IlAqtQYeYrUAmJjLExyqA8PgijhkL6qjthxRUrKPuq8lRdbmB3pIXcXbx0Q
u+VeeEFB+ly0y6ZXRfr8Yi6TaVwccdIgyoIpWIGQQLTAVfAsCZO4hx5mKiX1dyGe
268/f0qGzQteGOtkY4ofYj/bTCPXlLD1axhGSPkAL3vv9lsLmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGX3ffQgDYD/o7gO1LY3VXRp82AdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvODBmOTdjMmQtNzFjNy0z
NDk3LTg4YTUtNDEzY2YwMDJmMmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGwhXAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGoskZ9RuO+NNcfC54NA/YQbJs4fcHhIpqf2CSKN6TcMfKKhZGNNjnJk
/jq5OprThjQEx/MRXNTN7DVEDwM8HrXEwOA7ZZKMG0mu1xt+0MAO7vSoriKA31Mz
Mn1dBY1Bihfcz1U12vIGz4PcXcwSq5oteg6O8+0O47nPm5jI56DbVj0tgeUQdWHp
mU1bJS2kZMmypfdonDWAKZzHEtlq5N3uPGkXn1q/+K+1VQpBTPyBs8IMLB/ibsRa
BzOBaCCEg9qnmzOBDAsPDITm3Z0mZMtIM2uoTrr5vKtgEaJ3sTqTA8Tiw4LtsP8v
7af1uxGTcGbM00aCHINDTet/tVy1lIw=
-----END CERTIFICATE-----