Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b24021ec-84da-36ba-ac7b-d40cf32038d5.roa
File:                     b24021ec-84da-36ba-ac7b-d40cf32038d5.roa (raw, json)
Hash identifier:          AsbPrsKqIi6iPtwvUUVBHAFdSCanZUpVibc0J17lx6s=
Subject key identifier:   4A:AB:91:0A:B8:6D:1E:BF:3B:D6:49:FC:3E:56:5F:34:3C:81:E2:39
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DA6C6BB1BA991B0886A403E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b24021ec-84da-36ba-ac7b-d40cf32038d5.roa
Signing time:             Wed 20 Apr 2022 12:00:00 +0000
ROA not before:           Wed 20 Apr 2022 12:00:00 +0000
ROA not after:            Thu 26 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.79.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a6:c6:bb:1b:a9:91:b0:88:6a:40:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 20 12:00:00 2022 GMT
            Not After : May 26 04:00:00 2022 GMT
        Subject: CN=4df3418f-3594-4476-9924-9ec527c3af4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:78:4c:0b:6a:2f:66:ac:cf:83:8d:e6:4c:e4:
                    f9:89:24:2b:de:02:72:82:5a:f1:8e:15:fc:df:42:
                    0b:68:dd:84:e9:93:54:49:48:17:41:1d:7f:97:18:
                    b0:23:44:7b:c6:95:cb:1d:d6:d0:9a:18:06:9d:2a:
                    57:4a:21:71:56:65:50:60:87:5e:b6:2d:5e:35:77:
                    7d:ca:43:c0:e6:1f:6f:53:50:e5:a6:a0:3a:b6:70:
                    ae:b9:8c:26:0f:5c:a0:8b:4a:bc:8d:7b:f7:aa:7f:
                    ba:30:93:60:0e:5f:f3:77:e0:0a:b5:23:cc:92:23:
                    81:88:fd:04:ea:aa:4a:58:20:2a:dc:6c:72:33:a5:
                    1d:4c:c3:a2:71:41:db:a9:14:c3:37:2a:49:05:8a:
                    fc:cb:1d:17:45:9f:c7:eb:fe:cf:f9:d0:51:0b:ee:
                    ce:e6:2a:40:5f:1e:79:46:de:72:33:3c:f5:97:b8:
                    39:fe:57:32:2e:ff:88:ae:ae:5f:3b:aa:83:63:13:
                    c3:89:5b:35:d4:aa:5b:54:19:68:f5:71:9e:0d:bd:
                    12:01:6c:58:9a:2b:e8:bb:6e:39:dd:20:84:85:58:
                    26:ab:ea:38:ce:52:a8:5c:3f:8e:1a:2f:7e:c5:43:
                    4f:1f:f4:3e:58:24:fe:db:2d:8a:94:12:ec:8a:ce:
                    4d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AB:91:0A:B8:6D:1E:BF:3B:D6:49:FC:3E:56:5F:34:3C:81:E2:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b24021ec-84da-36ba-ac7b-d40cf32038d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.79.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ce:7a:8d:cb:68:39:03:20:f4:40:fd:bf:de:88:85:e6:3f:
         0a:24:8c:5d:25:0d:e4:fd:0e:82:65:cd:0b:62:ab:8b:68:88:
         d0:0b:cf:f2:01:c5:4b:92:07:0e:90:fe:b5:36:5e:65:9c:be:
         57:09:30:21:66:4a:aa:44:9e:f3:46:be:a6:e4:67:bf:86:fe:
         fa:f7:eb:69:11:3c:9d:32:af:19:15:5d:8b:9e:bf:33:4a:4b:
         4f:c7:09:6b:22:21:d4:ca:e5:35:99:b2:75:9f:fc:77:2e:5d:
         56:61:dc:83:77:07:65:60:cb:ca:e0:7d:0d:d6:8f:2a:57:2f:
         83:f6:03:17:07:93:57:d8:6b:99:3e:cc:2d:d1:0c:5f:91:99:
         a8:35:6a:99:d4:e7:54:4a:a8:03:ab:ce:7a:ac:25:e3:ca:4d:
         9c:93:3a:52:43:22:26:8d:70:31:d2:48:9b:a1:63:9c:ac:a4:
         41:bc:13:a7:79:90:f3:da:c2:42:9f:e6:20:e5:82:65:04:7e:
         56:e2:6d:e9:96:f0:62:48:37:3a:63:c0:df:f2:d9:6d:25:44:
         bf:1f:01:9b:55:ce:6b:c1:19:9a:59:0f:a6:d8:7b:a1:b6:4c:
         c4:dd:00:88:06:06:e4:cd:fa:8a:82:2d:a0:f3:0c:4a:27:6d:
         93:be:43:61
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2mxrsbqZGwiGpAPoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDQyMDEyMDAwMFoXDTIyMDUyNjA0MDAwMFowLzEtMCsGA1UEAxMk
NGRmMzQxOGYtMzU5NC00NDc2LTk5MjQtOWVjNTI3YzNhZjRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXhMC2ovZqzPg43mTOT5iSQr3gJyglrxjhX8
30ILaN2E6ZNUSUgXQR1/lxiwI0R7xpXLHdbQmhgGnSpXSiFxVmVQYIdeti1eNXd9
ykPA5h9vU1DlpqA6tnCuuYwmD1ygi0q8jXv3qn+6MJNgDl/zd+AKtSPMkiOBiP0E
6qpKWCAq3GxyM6UdTMOicUHbqRTDNypJBYr8yx0XRZ/H6/7P+dBRC+7O5ipAXx55
Rt5yMzz1l7g5/lcyLv+Irq5fO6qDYxPDiVs11KpbVBlo9XGeDb0SAWxYmivou245
3SCEhVgmq+o4zlKoXD+OGi9+xUNPH/Q+WCT+2y2KlBLsis5NFwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEqrkQq4bR6/O9ZJ/D5WXzQ8geI5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjI0MDIxZWMtODRkYS0z
NmJhLWFjN2ItZDQwY2YzMjAzOGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEE8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAhM56jctoOQMg9ED9v96IheY/CiSMXSUN5P0OgmXNC2Kri2iI0AvP8gHF
S5IHDpD+tTZeZZy+VwkwIWZKqkSe80a+puRnv4b++vfraRE8nTKvGRVdi56/M0pL
T8cJayIh1MrlNZmydZ/8dy5dVmHcg3cHZWDLyuB9DdaPKlcvg/YDFweTV9hrmT7M
LdEMX5GZqDVqmdTnVEqoA6vOeqwl48pNnJM6UkMiJo1wMdJIm6FjnKykQbwTp3mQ
89rCQp/mIOWCZQR+VuJt6ZbwYkg3OmPA3/LZbSVEvx8Bm1XOa8EZmlkPpth7obZM
xN0AiAYG5M36ioItoPMMSidtk75DYQ==
-----END CERTIFICATE-----