Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b06c87f2-c9ff-307f-9629-3c4cb475939b.roa
File:                     b06c87f2-c9ff-307f-9629-3c4cb475939b.roa (raw, json)
Hash identifier:          2yRyM2UXOlxzC0jZQFCncVZk3r9MxqALiVK6cfVKrsk=
Subject key identifier:   C1:CC:14:73:94:EB:06:BA:94:0A:D2:73:9B:84:7A:60:75:38:B2:68
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D55E747699E37E58FC412BC80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b06c87f2-c9ff-307f-9629-3c4cb475939b.roa
Signing time:             Wed 23 Mar 2022 04:00:00 +0000
ROA not before:           Wed 23 Mar 2022 04:00:00 +0000
ROA not after:            Wed 27 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.148.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:55:e7:47:69:9e:37:e5:8f:c4:12:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 23 04:00:00 2022 GMT
            Not After : Apr 27 04:00:00 2022 GMT
        Subject: CN=bc101861-5fc8-4f15-bf79-e25147ddee6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:75:e1:99:44:d1:e0:b0:3e:4d:ec:90:b1:c2:
                    66:92:47:6d:52:7a:ce:0c:1b:e9:73:d4:78:19:db:
                    8a:2c:fd:bc:02:1c:e1:15:c9:6e:ad:2e:70:e3:12:
                    b1:2b:ad:4f:55:2a:40:50:06:2c:15:e1:20:e5:6d:
                    13:75:80:45:5b:95:73:0f:6a:1f:bf:f4:70:8b:b0:
                    01:4f:df:04:ba:9a:23:cf:ad:f3:11:9f:ce:e2:0d:
                    98:19:91:cd:cd:4a:73:89:a8:26:6b:f9:db:a3:06:
                    5d:08:fb:0a:56:d7:3e:a2:e8:5e:9c:9b:4e:2e:ff:
                    e1:2c:71:3e:b1:17:a3:a5:47:15:3f:8c:84:57:df:
                    c0:a6:bf:71:08:c3:c9:d9:00:81:ca:b1:37:58:64:
                    5f:87:01:70:40:9e:ba:95:61:d3:ab:0c:db:e8:f4:
                    a2:43:98:a5:b8:67:f7:0f:23:90:e1:18:7e:57:6c:
                    a0:45:5c:77:85:c1:8b:f4:e0:ad:61:5e:01:9e:ab:
                    c0:3b:b3:48:ed:a1:0f:d7:bf:e3:a7:23:a2:a3:96:
                    90:8b:4f:06:7a:0f:08:c2:f2:35:5c:e3:c6:46:9e:
                    4d:7c:df:f6:6a:76:b5:4f:74:56:15:7c:b2:26:43:
                    cd:50:72:af:75:17:a1:34:3c:2d:65:e1:cc:7e:8a:
                    cf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CC:14:73:94:EB:06:BA:94:0A:D2:73:9B:84:7A:60:75:38:B2:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b06c87f2-c9ff-307f-9629-3c4cb475939b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.148.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:53:20:f3:c4:f6:38:5f:0f:80:6e:ef:37:63:cb:cf:ca:2c:
         50:45:57:89:5e:be:61:e0:21:de:56:58:37:7f:9f:84:aa:d8:
         97:cb:9f:c7:3e:c1:b6:d5:8b:57:55:87:52:0f:72:79:cc:83:
         63:dc:0e:02:b7:31:75:16:7c:4b:73:04:8a:35:f4:74:a6:62:
         68:eb:69:7a:f5:2d:13:d0:3c:e0:0d:1a:95:0a:77:e6:fd:84:
         a8:e4:be:0e:a9:ba:4e:48:4a:ca:a9:b8:17:8c:1b:86:07:a5:
         62:b3:46:fa:97:c3:5b:4e:d2:88:1e:50:39:96:1a:99:3e:42:
         4d:9f:e8:0e:c5:75:61:c6:0c:af:4f:3c:5d:fe:66:a7:5c:f4:
         2b:2d:e2:47:3b:f7:27:6e:ba:a7:cd:06:71:a3:54:72:dd:19:
         1a:cd:1d:d5:d0:6a:60:27:58:68:33:49:5c:cc:d2:ba:6c:ce:
         2c:64:e3:66:e7:6d:78:20:81:7d:5c:e1:bc:4f:8f:9b:2f:17:
         47:d2:1d:63:7a:79:bf:e9:b9:ce:b7:52:b6:50:d1:f9:30:67:
         e1:30:0c:a3:6e:d1:fc:17:67:da:3f:21:bd:c7:8d:55:37:a7:
         48:23:60:93:6f:f7:cb:c8:c5:76:3c:11:e1:dd:1f:10:64:44:
         cc:cb:51:d1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD1V50dpnjflj8QSvIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMyMzA0MDAwMFoXDTIyMDQyNzA0MDAwMFowLzEtMCsGA1UEAxMk
YmMxMDE4NjEtNWZjOC00ZjE1LWJmNzktZTI1MTQ3ZGRlZTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHXhmUTR4LA+TeyQscJmkkdtUnrODBvpc9R4
GduKLP28AhzhFclurS5w4xKxK61PVSpAUAYsFeEg5W0TdYBFW5VzD2ofv/Rwi7AB
T98Eupojz63zEZ/O4g2YGZHNzUpziagma/nbowZdCPsKVtc+ouhenJtOLv/hLHE+
sRejpUcVP4yEV9/Apr9xCMPJ2QCByrE3WGRfhwFwQJ66lWHTqwzb6PSiQ5iluGf3
DyOQ4Rh+V2ygRVx3hcGL9OCtYV4BnqvAO7NI7aEP17/jpyOio5aQi08Geg8IwvI1
XOPGRp5NfN/2ana1T3RWFXyyJkPNUHKvdRehNDwtZeHMforPLwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMHMFHOU6wa6lArSc5uEemB1OLJoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjA2Yzg3ZjItYzlmZi0z
MDdmLTk2MjktM2M0Y2I0NzU5MzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEJQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPlMg88T2OF8PgG7vN2PLz8osUEVXiV6+YeAh3lZYN3+fhKrYl8ufxz7B
ttWLV1WHUg9yecyDY9wOArcxdRZ8S3MEijX0dKZiaOtpevUtE9A84A0alQp35v2E
qOS+Dqm6TkhKyqm4F4wbhgelYrNG+pfDW07SiB5QOZYamT5CTZ/oDsV1YcYMr088
Xf5mp1z0Ky3iRzv3J266p80GcaNUct0ZGs0d1dBqYCdYaDNJXMzSumzOLGTjZudt
eCCBfVzhvE+Pmy8XR9IdY3p5v+m5zrdStlDR+TBn4TAMo27R/Bdn2j8hvceNVTen
SCNgk2/3y8jFdjwR4d0fEGREzMtR0Q==
-----END CERTIFICATE-----