Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f99367e-70d3-3992-ab13-ec5beb9ca160.roa
File:                     8f99367e-70d3-3992-ab13-ec5beb9ca160.roa (raw, json)
Hash identifier:          nfegRcTYeBXzIJwUyqIPBm84/rV1OS0BD1GD8t9kn60=
Subject key identifier:   E6:F2:87:9D:1B:65:B6:D4:86:D2:78:5A:97:1C:91:25:9E:77:2A:DD
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840900D54E2C80F38BFC3B38480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f99367e-70d3-3992-ab13-ec5beb9ca160.roa
Signing time:             Thu 12 Jan 2023 12:00:00 +0000
ROA not before:           Thu 12 Jan 2023 12:00:00 +0000
ROA not after:            Fri 17 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        45.33.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:90:0d:54:e2:c8:0f:38:bf:c3:b3:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 12 12:00:00 2023 GMT
            Not After : Feb 17 05:00:00 2023 GMT
        Subject: CN=4a10c453-ff73-408b-adc9-2ebf76bf23df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:78:f0:e1:b5:ff:22:ef:0c:4f:84:02:5d:02:
                    60:5e:5e:f3:3c:91:3a:8e:1b:5f:45:41:69:31:c1:
                    a8:0d:6f:ba:1c:04:cf:a5:9f:3b:79:27:ad:36:40:
                    4c:1c:52:7e:53:6a:ae:b9:5f:af:60:98:50:5f:51:
                    b3:ed:87:1d:b8:5d:22:db:71:29:42:44:c0:51:ab:
                    19:fb:c0:b9:de:8d:b9:82:05:70:f2:7e:ae:85:70:
                    8f:d7:a7:2a:a6:de:7a:79:ad:4c:ac:fe:6b:91:10:
                    83:93:64:aa:73:ea:5b:68:45:69:4f:cc:82:a6:c5:
                    f2:fa:32:b6:da:36:e6:a4:36:36:f4:97:ae:85:e0:
                    26:9e:c0:06:e7:ba:da:48:bc:ae:45:ff:ab:8f:d2:
                    65:4f:18:60:8d:c4:b7:63:4a:b8:f9:1a:34:a6:2e:
                    25:2a:e3:64:60:81:f1:8e:85:13:7f:98:4c:3c:93:
                    dc:7c:7c:77:57:99:58:e6:44:c5:af:11:5a:0a:79:
                    28:b0:82:92:19:17:e3:5b:78:96:cf:c6:da:9b:95:
                    d0:aa:f4:3a:8a:9f:0e:cb:29:d0:d0:ee:e1:5f:c8:
                    d5:6e:10:e0:b6:e7:66:8a:c2:52:02:44:05:03:a0:
                    d3:96:cb:c2:fa:0f:5f:dd:2f:9e:87:54:64:4a:6c:
                    fc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F2:87:9D:1B:65:B6:D4:86:D2:78:5A:97:1C:91:25:9E:77:2A:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f99367e-70d3-3992-ab13-ec5beb9ca160.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.33.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:43:92:e2:77:cb:fa:4d:32:70:ac:f4:df:11:76:f9:08:bc:
         2e:83:f8:d4:4f:17:c9:cb:3d:da:09:67:ea:53:0b:54:a7:1b:
         a1:b1:9a:57:62:79:87:f0:5d:51:56:03:bb:fe:39:de:61:5d:
         bd:62:19:3b:a5:ce:00:77:f7:c3:65:a3:28:e3:38:18:b6:a5:
         d7:71:f3:fd:7d:f2:f9:6d:a7:d0:d0:50:39:3d:c8:12:f0:75:
         93:37:42:a2:c9:11:bc:8c:63:d8:f4:c9:53:1c:9b:cd:91:76:
         86:a1:34:45:7f:bd:96:a0:cd:44:de:05:d6:b2:46:ed:c3:ee:
         9f:c7:bf:d1:a8:b4:bb:b3:f3:16:4b:e7:85:9e:09:d7:bc:65:
         fc:8d:8e:e0:87:74:e1:bd:31:ec:8d:02:3a:db:ec:f0:a4:77:
         8f:7d:f5:53:59:67:a2:06:e7:d1:92:1f:08:d0:2c:18:90:df:
         b7:37:51:4d:90:95:b5:be:b9:c5:b6:a1:90:9c:de:9c:03:3c:
         5a:a3:2c:b5:18:db:31:4d:0c:5b:fe:35:f2:2e:b4:74:44:cd:
         e3:f6:d0:ff:cb:e2:b4:2b:49:f1:eb:21:44:d5:4c:f1:bb:40:
         78:5c:35:94:03:b8:28:36:72:55:fe:be:9b:87:99:a3:f1:f7:
         74:18:e3:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWECQDVTiyA84v8OzhIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDExMjEyMDAwMFoXDTIzMDIxNzA1MDAwMFowLzEtMCsGA1UEAxMk
NGExMGM0NTMtZmY3My00MDhiLWFkYzktMmViZjc2YmYyM2RmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3jw4bX/Iu8MT4QCXQJgXl7zPJE6jhtfRUFp
McGoDW+6HATPpZ87eSetNkBMHFJ+U2quuV+vYJhQX1Gz7YcduF0i23EpQkTAUasZ
+8C53o25ggVw8n6uhXCP16cqpt56ea1MrP5rkRCDk2Sqc+pbaEVpT8yCpsXy+jK2
2jbmpDY29JeuheAmnsAG57raSLyuRf+rj9JlTxhgjcS3Y0q4+Ro0pi4lKuNkYIHx
joUTf5hMPJPcfHx3V5lY5kTFrxFaCnkosIKSGRfjW3iWz8bam5XQqvQ6ip8OyynQ
0O7hX8jVbhDgtudmisJSAkQFA6DTlsvC+g9f3S+eh1RkSmz8DwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFObyh50bZbbUhtJ4WpcckSWedyrdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOGY5OTM2N2UtNzBkMy0z
OTkyLWFiMTMtZWM1YmViOWNhMTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLSGgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEpDkuJ3y/pNMnCs9N8RdvkIvC6D+NRPF8nLPdoJZ+pTC1SnG6Gxmldi
eYfwXVFWA7v+Od5hXb1iGTulzgB398NloyjjOBi2pddx8/198vltp9DQUDk9yBLw
dZM3QqLJEbyMY9j0yVMcm82RdoahNEV/vZagzUTeBdayRu3D7p/Hv9GotLuz8xZL
54WeCde8ZfyNjuCHdOG9MeyNAjrb7PCkd4999VNZZ6IG59GSHwjQLBiQ37c3UU2Q
lbW+ucW2oZCc3pwDPFqjLLUY2zFNDFv+NfIutHREzeP20P/L4rQrSfHrIUTVTPG7
QHhcNZQDuCg2clX+vpuHmaPx93QY46A=
-----END CERTIFICATE-----