Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b1535982-4629-3fa2-aee9-3b4c3d861c7a.roa
File:                     b1535982-4629-3fa2-aee9-3b4c3d861c7a.roa (raw, json)
Hash identifier:          q/sbe10/U9JgXfSZMcVzlZZmZSZXmW/tdhOGhDNd7Dk=
Subject key identifier:   C5:77:5B:ED:C3:3E:6D:C4:FB:E2:24:28:C5:69:F8:8B:18:32:D2:4C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840745B11C57E1FBFA64063AB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b1535982-4629-3fa2-aee9-3b4c3d861c7a.roa
Signing time:             Mon 02 Jan 2023 12:00:00 +0000
ROA not before:           Mon 02 Jan 2023 12:00:00 +0000
ROA not after:            Tue 07 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        149.187.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:74:5b:11:c5:7e:1f:bf:a6:40:63:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  2 12:00:00 2023 GMT
            Not After : Feb  7 05:00:00 2023 GMT
        Subject: CN=e3eeb165-3498-462c-bac6-7571c20db3f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:21:dc:15:bb:dd:7a:a4:9e:53:7a:b6:35:01:
                    de:a5:72:9a:5d:12:b0:8d:c9:fe:41:c7:70:b6:4c:
                    00:f7:ea:17:3e:90:05:36:87:ef:59:1c:08:00:35:
                    a4:e5:ee:a4:fc:f3:17:d4:82:ae:cc:a9:76:20:c9:
                    28:a4:fb:a5:9c:a8:66:65:af:e7:62:a4:ac:d6:8c:
                    ca:74:2c:28:a4:03:d6:ca:f8:53:34:ea:b7:e6:20:
                    ea:f5:11:51:5e:f4:bb:b3:56:f6:db:36:5b:25:55:
                    38:4d:79:a9:80:e7:c5:20:b2:11:b7:fb:1f:73:71:
                    9e:25:ef:8e:a2:41:8e:9e:cc:0e:ed:5f:5a:e0:7d:
                    c0:07:56:46:84:54:b7:61:20:c4:a4:bf:a8:66:52:
                    01:5e:7c:4b:29:e5:2b:57:b8:09:41:0f:32:f3:69:
                    cd:22:6c:35:80:87:9f:dc:57:30:00:2f:3c:a5:d3:
                    8c:b1:ff:11:bc:09:d1:43:4b:50:c1:d9:e1:76:d6:
                    15:a7:52:db:aa:ce:47:94:a5:b4:ec:08:99:1e:db:
                    2c:47:b1:2f:ff:c4:b4:e4:77:33:49:45:e3:78:37:
                    11:0e:c3:ae:1e:e5:27:5c:cb:59:00:2e:2b:f2:e8:
                    70:1e:5d:9d:d8:be:ed:ec:cf:a9:ff:9a:32:6b:d5:
                    7f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:77:5B:ED:C3:3E:6D:C4:FB:E2:24:28:C5:69:F8:8B:18:32:D2:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b1535982-4629-3fa2-aee9-3b4c3d861c7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.187.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:59:a8:fd:f8:94:51:b9:56:86:5e:b1:2d:d4:a1:ff:fd:58:
         13:77:14:79:02:cf:98:4f:87:a6:86:79:33:99:c2:40:f5:66:
         d9:d8:ea:a6:1d:b0:cb:bb:03:9e:8e:92:88:fd:15:0a:b8:6a:
         5a:92:09:8d:01:52:f3:99:3e:7c:45:e6:a1:52:fb:89:b5:b9:
         3c:60:1b:bc:2f:99:28:67:1b:b4:21:b5:23:0c:f6:50:1c:7f:
         f5:cd:32:bd:2c:70:1f:a3:28:7c:99:bb:70:03:07:54:1c:a3:
         3f:e4:aa:0e:17:72:f9:93:1b:42:ad:a6:5b:d1:76:68:94:21:
         ec:87:91:c6:49:5d:73:71:28:e8:eb:17:7a:3e:99:fb:fd:2b:
         90:b5:49:cf:ac:9a:f4:5d:00:4b:c7:1c:11:64:f1:7b:97:e6:
         3d:01:c7:51:1d:16:c7:94:69:1d:82:85:a6:b5:06:e1:90:85:
         05:68:b1:52:76:d4:55:bf:28:53:31:68:01:0a:db:90:ad:72:
         c7:2f:51:db:3b:6d:bd:4c:35:dd:b9:ca:c0:b3:77:5e:24:ef:
         38:7e:e4:5e:15:9d:d0:3c:6c:6e:c4:0c:ed:37:df:a4:4a:ce:
         41:75:a0:ed:97:32:55:88:8f:a6:cf:89:c2:cc:0a:f6:c2:fa:
         75:de:e3:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEB0WxHFfh+/pkBjqwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEwMjEyMDAwMFoXDTIzMDIwNzA1MDAwMFowLzEtMCsGA1UEAxMk
ZTNlZWIxNjUtMzQ5OC00NjJjLWJhYzYtNzU3MWMyMGRiM2YxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiHcFbvdeqSeU3q2NQHepXKaXRKwjcn+Qcdw
tkwA9+oXPpAFNofvWRwIADWk5e6k/PMX1IKuzKl2IMkopPulnKhmZa/nYqSs1ozK
dCwopAPWyvhTNOq35iDq9RFRXvS7s1b22zZbJVU4TXmpgOfFILIRt/sfc3GeJe+O
okGOnswO7V9a4H3AB1ZGhFS3YSDEpL+oZlIBXnxLKeUrV7gJQQ8y82nNImw1gIef
3FcwAC88pdOMsf8RvAnRQ0tQwdnhdtYVp1Lbqs5HlKW07AiZHtssR7Ev/8S05Hcz
SUXjeDcRDsOuHuUnXMtZAC4r8uhwHl2d2L7t7M+p/5oya9V/rwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMV3W+3DPm3E++IkKMVp+IsYMtJMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjE1MzU5ODItNDYyOS0z
ZmEyLWFlZTktM2I0YzNkODYxYzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHlbuAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIJZqP34lFG5VoZesS3Uof/9WBN3FHkCz5hPh6aGeTOZwkD1ZtnY6qYd
sMu7A56Okoj9FQq4alqSCY0BUvOZPnxF5qFS+4m1uTxgG7wvmShnG7QhtSMM9lAc
f/XNMr0scB+jKHyZu3ADB1Qcoz/kqg4XcvmTG0KtplvRdmiUIeyHkcZJXXNxKOjr
F3o+mfv9K5C1Sc+smvRdAEvHHBFk8XuX5j0Bx1EdFseUaR2Chaa1BuGQhQVosVJ2
1FW/KFMxaAEK25CtcscvUds7bb1MNd25ysCzd14k7zh+5F4VndA8bG7EDO0336RK
zkF1oO2XMlWIj6bPicLMCvbC+nXe45M=
-----END CERTIFICATE-----