Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b38709eb-197a-3837-afc5-5a98a74e244a.roa
File:                     b38709eb-197a-3837-afc5-5a98a74e244a.roa (raw, json)
Hash identifier:          jqVUrK9uqNVy5x5tRgGLBnmsWuT/O6vstH2gGJpWU+o=
Subject key identifier:   FF:16:F5:44:C5:06:BB:83:AB:37:88:B3:41:5F:BD:BF:AF:EC:A2:EA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FEA17150265E77A07EBF73860
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b38709eb-197a-3837-afc5-5a98a74e244a.roa
Signing time:             Mon 14 Nov 2022 12:00:00 +0000
ROA not before:           Mon 14 Nov 2022 12:00:00 +0000
ROA not after:            Tue 20 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        76.162.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ea:17:15:02:65:e7:7a:07:eb:f7:38:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 14 12:00:00 2022 GMT
            Not After : Dec 20 05:00:00 2022 GMT
        Subject: CN=4e2c2f78-338a-46d9-914f-baec828c882a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7e:37:8b:1e:c2:87:b8:95:a5:44:8f:4e:86:
                    e6:43:72:b9:f6:eb:5c:47:81:89:34:b8:f2:74:c7:
                    f5:b0:35:c4:df:69:c4:46:46:6a:18:29:bc:d7:2a:
                    dd:c7:f9:f9:eb:86:8a:e9:40:59:fe:95:07:61:0b:
                    3f:e2:2e:a5:e5:28:88:ef:04:77:b4:06:56:37:70:
                    82:c6:58:ed:1d:c9:db:e7:48:c0:ba:d1:1e:d5:5c:
                    7e:ba:fd:e2:93:85:94:39:0b:b1:68:ab:4e:16:98:
                    8f:18:ab:48:fa:0a:b9:50:2f:ea:e0:aa:29:bb:f9:
                    dd:d7:f2:9d:26:20:d4:cb:a4:fc:59:02:97:d8:3c:
                    98:e8:9d:88:73:d2:32:1c:c0:43:a8:0d:f5:76:7d:
                    fa:13:eb:0d:96:96:5d:bf:ef:18:cd:1b:d1:b4:1d:
                    2a:27:4d:3b:04:5d:ed:8e:63:69:28:d2:01:40:fc:
                    46:3a:53:04:4a:a5:54:0e:f8:e5:eb:22:2b:91:ff:
                    10:28:e3:88:46:73:78:6d:e0:2a:aa:a2:64:c5:d6:
                    9a:67:f5:a9:ea:51:10:1e:71:45:dc:e8:22:8a:84:
                    33:45:4a:dd:8d:15:2e:3b:da:ff:4b:4e:4d:e2:42:
                    a3:bd:7a:b9:43:46:35:47:fe:e1:e1:36:91:b0:17:
                    af:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:16:F5:44:C5:06:BB:83:AB:37:88:B3:41:5F:BD:BF:AF:EC:A2:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b38709eb-197a-3837-afc5-5a98a74e244a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.162.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:0d:18:db:11:3f:b3:6a:c0:21:02:bf:e6:e8:79:f9:b2:e7:
         ec:00:39:32:b0:9b:75:3f:37:a1:ae:c3:69:1f:47:66:d8:08:
         29:c3:2f:3f:ea:2e:0b:90:5d:7b:67:67:c8:51:ff:fd:ec:ca:
         aa:1a:71:7c:43:a8:2a:19:25:c0:2a:62:8c:7b:fd:c2:34:ad:
         5d:b5:31:6e:c5:72:32:03:40:de:38:b9:83:4d:88:09:fa:9c:
         08:f1:56:f1:13:20:08:6b:17:bf:dd:b8:71:f3:7f:75:65:3a:
         0a:8e:fc:4d:8d:d2:da:1e:70:9d:85:0f:d8:ec:fa:14:e9:c4:
         12:11:62:2f:5e:35:22:2e:64:6f:7c:b1:bc:be:0d:86:a6:d4:
         fc:98:4b:29:b2:f9:f9:63:b3:71:a8:5e:78:f5:e7:26:ef:65:
         75:dd:70:a6:2b:ff:a3:37:33:a8:9a:6d:15:7f:ad:af:c0:76:
         46:74:d4:f4:72:a9:a3:40:c1:b1:3f:22:4c:4c:ba:cd:fe:49:
         0c:4d:86:0f:77:01:f5:73:f6:1c:b8:56:5e:d9:9f:5f:fb:85:
         b2:52:f5:c8:c6:bf:3c:d4:52:b9:f5:27:5b:6f:fe:2b:f8:72:
         36:ac:4e:cf:c1:86:1a:c8:35:de:68:33:e0:8f:15:c5:99:06:
         2a:60:26:6a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/qFxUCZed6B+v3OGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTExNDEyMDAwMFoXDTIyMTIyMDA1MDAwMFowLzEtMCsGA1UEAxMk
NGUyYzJmNzgtMzM4YS00NmQ5LTkxNGYtYmFlYzgyOGM4ODJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX43ix7Ch7iVpUSPTobmQ3K59utcR4GJNLjy
dMf1sDXE32nERkZqGCm81yrdx/n564aK6UBZ/pUHYQs/4i6l5SiI7wR3tAZWN3CC
xljtHcnb50jAutEe1Vx+uv3ik4WUOQuxaKtOFpiPGKtI+gq5UC/q4Kopu/nd1/Kd
JiDUy6T8WQKX2DyY6J2Ic9IyHMBDqA31dn36E+sNlpZdv+8YzRvRtB0qJ007BF3t
jmNpKNIBQPxGOlMESqVUDvjl6yIrkf8QKOOIRnN4beAqqqJkxdaaZ/Wp6lEQHnFF
3OgiioQzRUrdjRUuO9r/S05N4kKjvXq5Q0Y1R/7h4TaRsBevCQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFP8W9UTFBruDqzeIs0Ffvb+v7KLqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjM4NzA5ZWItMTk3YS0z
ODM3LWFmYzUtNWE5OGE3NGUyNDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBTKIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAeQ0Y2xE/s2rAIQK/5uh5+bLn7AA5MrCbdT83oa7DaR9HZtgIKcMvP+ou
C5Bde2dnyFH//ezKqhpxfEOoKhklwCpijHv9wjStXbUxbsVyMgNA3ji5g02ICfqc
CPFW8RMgCGsXv924cfN/dWU6Co78TY3S2h5wnYUP2Oz6FOnEEhFiL141Ii5kb3yx
vL4NhqbU/JhLKbL5+WOzcaheePXnJu9ldd1wpiv/ozczqJptFX+tr8B2RnTU9HKp
o0DBsT8iTEy6zf5JDE2GD3cB9XP2HLhWXtmfX/uFslL1yMa/PNRSufUnW2/+K/hy
NqxOz8GGGsg13mgz4I8VxZkGKmAmag==
-----END CERTIFICATE-----