Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b833b82f-e8b6-34b2-b2c3-d509cc6074c2.roa
File:                     b833b82f-e8b6-34b2-b2c3-d509cc6074c2.roa (raw, json)
Hash identifier:          pMnp4vGMNKeI+GEKvO9o9FzQocX9+PJi0W8V4bOQ2RU=
Subject key identifier:   47:77:6D:36:BE:77:AB:09:06:40:7E:DA:1D:1F:1A:5E:DE:26:B4:BF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE52FB54F0B5EBA6A6B029580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b833b82f-e8b6-34b2-b2c3-d509cc6074c2.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        167.2.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e5:2f:b5:4f:0b:5e:ba:6a:6b:02:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=b453f7eb-2214-46da-8046-d73788d5c369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9f:3c:e7:f3:8e:74:0e:36:c9:b9:2c:91:ca:
                    ba:4b:7d:d7:c9:a7:6c:db:c6:9b:28:db:e1:5c:f8:
                    37:c7:27:90:fc:53:e0:59:9d:a5:b8:e9:35:88:9d:
                    98:87:a4:e1:e9:43:9e:ae:b7:94:a5:bf:d8:c5:30:
                    d6:1f:38:8e:89:dd:97:26:db:4c:2a:a0:93:65:9d:
                    a8:30:6f:cf:91:f9:9d:ca:2d:d6:b3:50:3f:51:2b:
                    72:3b:37:0e:68:2c:2e:02:47:77:4a:df:30:79:ff:
                    6b:10:17:42:a1:f2:93:2a:58:fe:35:9a:ab:74:45:
                    ce:7d:c7:1b:fc:ea:18:13:f8:87:f0:9b:76:ae:16:
                    ee:91:91:e7:e6:74:4a:32:7e:d6:ac:98:6f:37:63:
                    bf:b7:13:22:98:13:31:ef:72:44:1f:a1:d3:2a:cb:
                    24:4a:a0:5d:fa:55:00:a0:56:65:19:e7:aa:c6:c4:
                    87:eb:52:ed:ff:27:8d:58:59:e3:88:00:0b:66:96:
                    51:0e:63:5a:79:42:7f:41:ea:8a:8d:c7:58:90:c2:
                    0c:f3:93:0b:97:1d:90:00:29:03:37:f4:89:e6:27:
                    98:05:72:79:60:49:bc:6a:ae:30:ac:43:db:58:cf:
                    fd:66:7a:ac:12:4f:54:5c:91:6f:1e:a5:e7:f2:ca:
                    c5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:77:6D:36:BE:77:AB:09:06:40:7E:DA:1D:1F:1A:5E:DE:26:B4:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b833b82f-e8b6-34b2-b2c3-d509cc6074c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.2.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:c8:fb:8d:f9:77:85:eb:7b:70:4b:c9:fb:4d:fa:24:2b:d3:
         8b:1c:47:34:1f:06:ff:bd:40:20:3f:39:78:45:80:62:d4:2e:
         07:91:0b:3e:f5:56:1f:57:eb:cd:ed:c8:46:29:c0:ed:0d:e1:
         3b:ae:7a:1b:df:08:74:26:fa:f3:88:7f:59:3a:37:e7:ed:19:
         9e:34:0f:39:a3:c3:93:ec:8a:73:1c:1d:f7:7a:6e:bd:8e:14:
         fe:29:5a:90:f0:75:6f:bd:8c:f2:ea:e0:c8:30:48:1c:0b:65:
         a4:16:e0:7c:e1:00:f3:e7:3e:ec:7f:e2:30:a1:47:48:fe:46:
         b6:d5:f3:5e:43:3a:a7:b1:21:37:e7:df:e7:4a:4d:76:6b:fd:
         d5:38:fb:17:33:84:c9:de:98:b4:9a:66:03:ac:ff:39:0e:96:
         0c:ef:af:56:8c:f0:b2:ed:be:32:a7:c7:0b:dd:44:e0:22:48:
         6b:fb:6b:eb:c0:92:96:d2:e2:09:96:04:54:b0:d3:e9:54:55:
         a4:89:9d:fb:f5:82:bc:da:dc:1b:b4:75:36:a5:21:d1:c9:26:
         77:8b:7c:ff:48:09:72:c6:3b:72:c4:66:6f:87:a4:1f:e2:4d:
         4c:86:ce:05:09:49:29:2b:d0:cc:89:a6:53:ad:c4:e6:8e:e3:
         ff:d0:4f:fb
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzlL7VPC166amsClYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDIxMTA1MDAwMFoXDTIyMDMxODA0MDAwMFowLzEtMCsGA1UEAxMk
YjQ1M2Y3ZWItMjIxNC00NmRhLTgwNDYtZDczNzg4ZDVjMzY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ885/OOdA42ybkskcq6S33Xyads28abKNvh
XPg3xyeQ/FPgWZ2luOk1iJ2Yh6Th6UOerreUpb/YxTDWHziOid2XJttMKqCTZZ2o
MG/Pkfmdyi3Ws1A/UStyOzcOaCwuAkd3St8wef9rEBdCofKTKlj+NZqrdEXOfccb
/OoYE/iH8Jt2rhbukZHn5nRKMn7WrJhvN2O/txMimBMx73JEH6HTKsskSqBd+lUA
oFZlGeeqxsSH61Lt/yeNWFnjiAALZpZRDmNaeUJ/QeqKjcdYkMIM85MLlx2QACkD
N/SJ5ieYBXJ5YEm8aq4wrEPbWM/9ZnqsEk9UXJFvHqXn8srF/QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEd3bTa+d6sJBkB+2h0fGl7eJrS/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjgzM2I4MmYtZThiNi0z
NGIyLWIyYzMtZDUwOWNjNjA3NGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApwIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEABMj7jfl3het7cEvJ+036JCvTixxHNB8G/71AID85eEWAYtQuB5ELPvVW
H1frze3IRinA7Q3hO656G98IdCb684h/WTo35+0ZnjQPOaPDk+yKcxwd93puvY4U
/ilakPB1b72M8urgyDBIHAtlpBbgfOEA8+c+7H/iMKFHSP5GttXzXkM6p7EhN+ff
50pNdmv91Tj7FzOEyd6YtJpmA6z/OQ6WDO+vVozwsu2+MqfHC91E4CJIa/tr68CS
ltLiCZYEVLDT6VRVpImd+/WCvNrcG7R1NqUh0ckmd4t8/0gJcsY7csRmb4ekH+JN
TIbOBQlJKSvQzImmU63E5o7j/9BP+w==
-----END CERTIFICATE-----