Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/93d13eab-b46d-3625-82f0-880900c6de4c.roa
File:                     93d13eab-b46d-3625-82f0-880900c6de4c.roa (raw, json)
Hash identifier:          DyHgGaaYn5J95R5gvR3RxtcTWGBTuBMeT0DR3NUgZQE=
Subject key identifier:   AA:32:37:1D:60:E6:F7:70:58:EB:95:24:2D:8C:8E:57:58:E6:F3:BE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D32FA6429E11E1F5BD1097000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/93d13eab-b46d-3625-82f0-880900c6de4c.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        75.3.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:32:fa:64:29:e1:1e:1f:5b:d1:09:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=6bdbec36-ed6c-42d0-8e8e-274a6c362cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:03:3c:db:8e:92:2b:9c:f9:ba:d7:b5:35:6d:
                    7d:b9:45:57:c7:02:d5:bb:4c:22:5c:2d:8c:db:f9:
                    89:37:bc:7b:2c:a9:60:89:4c:b4:62:ba:e9:7b:3d:
                    56:6e:64:25:e5:cb:2a:af:06:a4:d3:5d:a1:a0:06:
                    55:09:58:e2:32:22:8d:89:4b:89:76:f0:67:47:5d:
                    03:7f:88:47:00:b8:9d:4c:a7:d7:4d:0f:97:8f:ba:
                    28:15:42:4d:a4:a2:06:27:20:7a:6d:fe:37:60:4f:
                    90:11:85:61:49:c5:25:a1:a7:af:fa:b5:e3:2d:9a:
                    3d:f0:bf:c1:c5:c7:ba:1e:f7:f8:96:94:e3:3d:c1:
                    4a:56:11:d8:ed:9c:95:61:52:7c:d6:d6:c1:b1:9e:
                    c1:af:34:02:b9:9d:3c:c3:19:85:73:a3:39:ad:d0:
                    82:7d:36:ef:06:32:8f:68:13:04:33:89:b1:11:a6:
                    ea:25:6a:bb:72:41:c7:67:f4:e8:2f:5b:80:f7:5d:
                    1e:b8:e9:7c:0d:cc:57:c3:4f:39:55:d5:dc:a2:0f:
                    b3:5b:9f:67:40:26:8e:bf:80:c7:17:33:0e:f9:67:
                    bd:34:a4:42:64:0e:dc:82:71:9a:23:61:b3:a3:b1:
                    5b:82:d5:aa:80:fe:2f:d3:b4:2c:af:43:b5:ec:3c:
                    f9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:32:37:1D:60:E6:F7:70:58:EB:95:24:2D:8C:8E:57:58:E6:F3:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/93d13eab-b46d-3625-82f0-880900c6de4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.3.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:86:77:48:7e:c3:02:71:5c:20:d1:0c:47:8f:47:1a:70:89:
         9c:93:2d:3e:d6:3a:10:7d:52:65:89:d9:38:1f:66:e5:5f:68:
         cb:71:dc:09:fc:47:86:88:93:0b:3d:46:14:59:1d:ba:2a:e3:
         87:b3:3e:d5:78:e2:cd:d4:e1:fc:24:4e:61:dd:4a:dc:5f:02:
         77:7a:50:56:50:9e:66:f9:a3:2a:d0:2e:94:55:62:99:c8:17:
         bf:4b:79:9a:7d:16:9d:62:9c:5c:65:6a:89:7f:ee:3a:14:79:
         b0:44:52:8b:b1:93:73:8e:44:26:ee:68:17:4a:88:23:e5:4f:
         dc:ae:d9:dc:7e:05:c2:ad:a2:e2:2b:f8:56:4c:a4:26:56:51:
         4e:e6:ca:6d:5c:2a:ab:c2:0c:f9:42:1d:8c:62:77:c7:bd:5b:
         b5:c6:45:91:22:7f:41:f0:70:bc:4d:39:2e:ea:0a:4a:76:0c:
         68:30:8e:d3:bb:a9:2f:0f:5f:6f:ed:ea:5f:e7:1b:49:70:45:
         99:4b:50:2c:f2:fa:cc:0b:65:5f:18:d5:44:98:a6:4b:8a:90:
         a1:11:ed:61:64:fc:26:14:98:b6:96:ae:6d:4d:52:13:0b:2f:
         8a:08:26:6a:39:3f:a8:95:aa:30:ce:cb:4f:93:93:9b:e2:73:
         c0:ee:75:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0y+mQp4R4fW9EJcAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
NmJkYmVjMzYtZWQ2Yy00MmQwLThlOGUtMjc0YTZjMzYyY2ZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAM8246SK5z5ute1NW19uUVXxwLVu0wiXC2M
2/mJN7x7LKlgiUy0Yrrpez1WbmQl5csqrwak012hoAZVCVjiMiKNiUuJdvBnR10D
f4hHALidTKfXTQ+Xj7ooFUJNpKIGJyB6bf43YE+QEYVhScUloaev+rXjLZo98L/B
xce6Hvf4lpTjPcFKVhHY7ZyVYVJ81tbBsZ7BrzQCuZ08wxmFc6M5rdCCfTbvBjKP
aBMEM4mxEabqJWq7ckHHZ/ToL1uA910euOl8DcxXw085VdXcog+zW59nQCaOv4DH
FzMO+We9NKRCZA7cgnGaI2Gzo7FbgtWqgP4v07Qsr0O17Dz5swIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKoyNx1g5vdwWOuVJC2MjldY5vO+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOTNkMTNlYWItYjQ2ZC0z
NjI1LTgyZjAtODgwOTAwYzZkZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSwMAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABqGd0h+wwJxXCDRDEePRxpwiZyTLT7WOhB9UmWJ2TgfZuVfaMtx3An8
R4aIkws9RhRZHboq44ezPtV44s3U4fwkTmHdStxfAnd6UFZQnmb5oyrQLpRVYpnI
F79LeZp9Fp1inFxlaol/7joUebBEUouxk3OORCbuaBdKiCPlT9yu2dx+BcKtouIr
+FZMpCZWUU7mym1cKqvCDPlCHYxid8e9W7XGRZEif0HwcLxNOS7qCkp2DGgwjtO7
qS8PX2/t6l/nG0lwRZlLUCzy+swLZV8Y1USYpkuKkKER7WFk/CYUmLaWrm1NUhML
L4oIJmo5P6iVqjDOy0+Tk5vic8DudY0=
-----END CERTIFICATE-----