Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/81331ec1-6507-37a7-8cd3-f1387c4c656f.roa
File:                     81331ec1-6507-37a7-8cd3-f1387c4c656f.roa (raw, json)
Hash identifier:          SedttgYoYhHOdA7mUjul+md6TMqV67+XmjBzDXdYc+M=
Subject key identifier:   B5:70:5E:1C:AB:4C:D6:C4:D7:FB:E5:0F:C5:4C:4B:4D:E2:CC:5C:2D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858405C7E0817A8B9F6C168DBFC40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/81331ec1-6507-37a7-8cd3-f1387c4c656f.roa
Signing time:             Sun 25 Dec 2022 12:00:00 +0000
ROA not before:           Sun 25 Dec 2022 12:00:00 +0000
ROA not after:            Mon 30 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        168.157.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:5c:7e:08:17:a8:b9:f6:c1:68:db:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 25 12:00:00 2022 GMT
            Not After : Jan 30 05:00:00 2023 GMT
        Subject: CN=be1bb509-e3a1-4e14-95ce-e603204e0c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fa:76:41:78:50:cb:b9:f6:18:54:02:82:bc:
                    27:e8:92:1b:91:cc:f3:e1:db:eb:0a:ad:d1:f7:23:
                    b4:5e:8d:4d:04:23:92:b2:3a:a5:c5:d4:66:1a:10:
                    fe:87:ca:0a:28:89:6c:d1:20:7c:fa:77:0a:b1:f1:
                    55:40:97:2e:f4:61:2d:e9:97:e4:56:4c:2e:0e:12:
                    38:d1:3b:bf:5a:a2:88:55:e3:1f:19:75:bd:c6:a6:
                    da:93:b5:35:e3:0f:06:2c:ec:a8:39:21:dc:f4:fa:
                    fe:95:f1:42:b1:e2:7a:bf:2d:20:e0:b8:b3:f9:fe:
                    43:44:ba:04:ce:32:e3:67:cf:e9:9a:d8:3e:1a:1c:
                    11:36:1f:e0:70:d0:dc:e0:08:47:72:f2:46:c9:ea:
                    18:31:da:63:cc:f9:f3:84:0a:c3:b3:71:0c:31:90:
                    ee:87:e1:40:64:bc:53:6e:67:62:95:27:c9:f1:7c:
                    6f:a7:73:ae:df:2c:c0:fe:b9:e9:34:35:2a:dd:8f:
                    b2:da:5b:33:c8:d8:59:d0:2c:b6:58:ff:a9:0b:79:
                    7d:61:22:e9:9d:1f:34:46:ba:dd:6e:e4:e1:73:27:
                    f5:8d:3f:6a:31:8d:0f:4e:75:fb:15:b7:13:97:de:
                    9d:3c:11:0d:fc:50:42:5e:84:2e:d2:63:ba:ea:35:
                    9d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:70:5E:1C:AB:4C:D6:C4:D7:FB:E5:0F:C5:4C:4B:4D:E2:CC:5C:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/81331ec1-6507-37a7-8cd3-f1387c4c656f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.157.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:93:b9:58:51:01:7b:0a:58:41:de:f7:5a:bd:a9:b5:d2:6c:
         9b:ce:77:04:b3:de:24:ee:4b:de:13:6b:4a:dc:dd:b6:11:e0:
         b2:a4:c4:cf:66:a2:3b:71:28:2e:49:d2:c9:83:c5:53:1c:6c:
         e2:7c:85:f8:7d:a4:81:6a:75:5e:92:62:cc:8d:8a:77:5d:b8:
         5f:d9:9f:56:79:95:c7:c0:ae:35:e5:71:10:7b:4d:2b:52:bd:
         47:7a:b3:1d:73:de:9a:de:3d:c6:84:5c:84:cc:95:ac:2a:ba:
         6a:b4:d5:99:f6:30:2f:5d:97:77:c8:b1:97:a7:cd:2c:81:09:
         4d:99:ad:b5:e0:b9:51:bc:bf:0e:ae:76:a2:81:d4:12:dc:01:
         bb:9c:d1:31:c6:8d:63:e5:73:99:ee:20:d9:aa:75:81:93:95:
         2b:e6:89:67:4c:51:0b:a8:e7:15:24:e7:64:f6:8a:81:c0:0e:
         48:fe:54:d0:60:ff:19:a0:3c:4b:af:15:13:23:b3:99:7b:b4:
         b6:7e:8c:46:e9:63:2b:75:ff:b0:0a:7d:88:59:74:e3:4f:d6:
         e4:66:da:3b:09:37:21:02:f7:ad:5c:47:f1:f5:77:38:6f:91:
         57:53:2a:07:7f:a5:0e:2a:c4:55:15:16:c1:05:e4:2c:a1:cc:
         44:11:d9:9d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBcfggXqLn2wWjb/EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIyNTEyMDAwMFoXDTIzMDEzMDA1MDAwMFowLzEtMCsGA1UEAxMk
YmUxYmI1MDktZTNhMS00ZTE0LTk1Y2UtZTYwMzIwNGUwYzhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/p2QXhQy7n2GFQCgrwn6JIbkczz4dvrCq3R
9yO0Xo1NBCOSsjqlxdRmGhD+h8oKKIls0SB8+ncKsfFVQJcu9GEt6ZfkVkwuDhI4
0Tu/WqKIVeMfGXW9xqbak7U14w8GLOyoOSHc9Pr+lfFCseJ6vy0g4Liz+f5DRLoE
zjLjZ8/pmtg+GhwRNh/gcNDc4AhHcvJGyeoYMdpjzPnzhArDs3EMMZDuh+FAZLxT
bmdilSfJ8Xxvp3Ou3yzA/rnpNDUq3Y+y2lszyNhZ0Cy2WP+pC3l9YSLpnR80Rrrd
buThcyf1jT9qMY0PTnX7FbcTl96dPBEN/FBCXoQu0mO66jWdQwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLVwXhyrTNbE1/vlD8VMS03izFwtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvODEzMzFlYzEtNjUwNy0z
N2E3LThjZDMtZjEzODdjNGM2NTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqJ0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAM5O5WFEBewpYQd73Wr2ptdJsm853BLPeJO5L3hNrStzdthHgsqTEz2ai
O3EoLknSyYPFUxxs4nyF+H2kgWp1XpJizI2Kd124X9mfVnmVx8CuNeVxEHtNK1K9
R3qzHXPemt49xoRchMyVrCq6arTVmfYwL12Xd8ixl6fNLIEJTZmtteC5Uby/Dq52
ooHUEtwBu5zRMcaNY+Vzme4g2ap1gZOVK+aJZ0xRC6jnFSTnZPaKgcAOSP5U0GD/
GaA8S68VEyOzmXu0tn6MRuljK3X/sAp9iFl040/W5GbaOwk3IQL3rVxH8fV3OG+R
V1MqB3+lDirEVRUWwQXkLKHMRBHZnQ==
-----END CERTIFICATE-----