Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a6f0e2bc-a819-3d76-996b-55aac238c1d9.roa
File:                     a6f0e2bc-a819-3d76-996b-55aac238c1d9.roa (raw, json)
Hash identifier:          aRzbn+xBftYKPsbff6ZaE5wrE54rKefqf1/8gJF4x3E=
Subject key identifier:   C5:B6:43:19:81:F9:57:B2:94:C4:42:8D:1F:20:1C:39:BC:74:5E:3F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE3FEFC5B5556F73361942AC8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a6f0e2bc-a819-3d76-996b-55aac238c1d9.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.206.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e3:fe:fc:5b:55:56:f7:33:61:94:2a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=cc0bb719-4f47-41db-8c94-b141d9ee1154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c8:84:cc:cb:6d:e2:bd:e5:57:a9:6d:d5:06:
                    64:14:a7:cb:fb:c0:af:a8:ba:99:5c:e8:97:bc:82:
                    6b:7b:d0:a3:90:fb:dd:51:13:3f:2a:9b:22:75:01:
                    6b:31:e0:89:53:f6:41:05:1a:e5:42:bd:fd:0e:c1:
                    7e:8a:07:6e:49:9b:90:df:1e:3e:f2:65:a7:c1:2d:
                    9c:23:5b:4d:35:35:4b:01:56:fc:65:bb:85:bd:ad:
                    40:6c:29:1d:b5:37:74:50:78:15:96:f7:0c:1e:0d:
                    72:0b:3e:5f:01:23:11:4c:d2:dc:58:c2:0b:3d:9f:
                    33:0f:77:f1:e9:f1:b2:b9:e5:40:d0:b3:a4:ad:e8:
                    74:6d:fc:dc:56:1d:09:75:f9:b8:a9:a6:cd:9c:3d:
                    fa:b8:c1:ff:25:1b:0f:b7:87:f5:94:a7:95:4d:c1:
                    7d:12:1d:62:9f:e4:4b:ba:d7:1f:81:e1:87:9a:0e:
                    fb:66:b6:ff:d9:15:9c:2a:bb:a9:b0:b9:0c:ee:1c:
                    17:2a:b7:55:8d:bc:21:90:cb:ed:70:4d:6e:32:f7:
                    df:7d:2b:85:4c:99:2d:b8:08:e9:b2:42:b3:79:c8:
                    8d:72:b6:7a:07:c7:77:1d:de:17:cb:30:8f:c8:53:
                    33:bc:78:9f:4e:da:0d:c3:5a:11:78:0a:2d:51:e3:
                    13:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B6:43:19:81:F9:57:B2:94:C4:42:8D:1F:20:1C:39:BC:74:5E:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a6f0e2bc-a819-3d76-996b-55aac238c1d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.206.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:d3:0c:c8:0e:37:cf:82:44:02:ad:3d:7c:c2:1f:f9:0a:0d:
         1e:22:6b:3b:e6:86:86:7d:8f:0a:da:1d:8b:90:d9:53:e6:f0:
         cc:c7:86:d6:eb:5b:53:e8:fe:91:12:08:b2:81:b4:ea:4b:f5:
         d2:67:e6:b6:07:bf:c7:72:87:24:cd:34:c6:bd:7f:14:50:89:
         b9:5b:e3:9a:ba:2c:52:60:fd:72:32:fc:d5:62:f2:c0:63:d0:
         65:9e:c8:22:a1:8e:12:6e:22:d0:39:b8:78:a7:6c:6d:a7:3a:
         00:89:e6:ff:68:08:e7:37:bf:0b:dd:25:d0:1b:d0:d8:f2:1b:
         18:b0:e1:5c:39:d3:30:1d:ba:90:96:76:55:2f:ba:19:33:c8:
         7d:1b:64:a3:41:56:6d:59:b3:0f:10:2c:c6:60:9d:f2:55:4b:
         c6:36:70:95:8b:b5:d5:45:ca:55:08:8f:0c:7d:55:61:8b:95:
         62:72:60:7b:38:79:1e:11:59:eb:9d:ba:c1:69:51:04:c0:1d:
         f9:d3:30:8c:a0:87:9d:28:10:28:f4:ac:ec:ae:1f:1c:88:f9:
         09:43:45:dc:45:2f:e1:1c:00:2a:95:3a:72:18:fd:22:0b:84:
         17:2c:ae:a0:14:74:59:22:01:ad:63:f2:73:d9:3e:06:39:c1:
         02:0a:b9:59
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzj/vxbVVb3M2GUKsgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDIxMTA1MDAwMFoXDTIyMDMxODA0MDAwMFowLzEtMCsGA1UEAxMk
Y2MwYmI3MTktNGY0Ny00MWRiLThjOTQtYjE0MWQ5ZWUxMTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsiEzMtt4r3lV6lt1QZkFKfL+8CvqLqZXOiX
vIJre9CjkPvdURM/KpsidQFrMeCJU/ZBBRrlQr39DsF+igduSZuQ3x4+8mWnwS2c
I1tNNTVLAVb8ZbuFva1AbCkdtTd0UHgVlvcMHg1yCz5fASMRTNLcWMILPZ8zD3fx
6fGyueVA0LOkreh0bfzcVh0Jdfm4qabNnD36uMH/JRsPt4f1lKeVTcF9Eh1in+RL
utcfgeGHmg77Zrb/2RWcKrupsLkM7hwXKrdVjbwhkMvtcE1uMvfffSuFTJktuAjp
skKzeciNcrZ6B8d3Hd4XyzCPyFMzvHifTtoNw1oReAotUeMThQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMW2QxmB+VeylMRCjR8gHDm8dF4/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYTZmMGUyYmMtYTgxOS0z
ZDc2LTk5NmItNTVhYWMyMzhjMWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEM4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAj9MMyA43z4JEAq09fMIf+QoNHiJrO+aGhn2PCtodi5DZU+bwzMeG1utb
U+j+kRIIsoG06kv10mfmtge/x3KHJM00xr1/FFCJuVvjmrosUmD9cjL81WLywGPQ
ZZ7IIqGOEm4i0Dm4eKdsbac6AInm/2gI5ze/C90l0BvQ2PIbGLDhXDnTMB26kJZ2
VS+6GTPIfRtko0FWbVmzDxAsxmCd8lVLxjZwlYu11UXKVQiPDH1VYYuVYnJgezh5
HhFZ6526wWlRBMAd+dMwjKCHnSgQKPSs7K4fHIj5CUNF3EUv4RwAKpU6chj9IguE
FyyuoBR0WSIBrWPyc9k+BjnBAgq5WQ==
-----END CERTIFICATE-----