Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b8dad247-b871-39c8-8bdb-c03e5ee55fb2.roa
File:                     b8dad247-b871-39c8-8bdb-c03e5ee55fb2.roa (raw, json)
Hash identifier:          lUVSTZk5Klx6DyQzVOxtyWw4IcVyYuUmuHOxAI5do9c=
Subject key identifier:   B6:96:87:53:ED:6D:FC:1B:35:8F:4E:DB:B8:52:01:59:09:58:28:37
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F4CFF08290D7204CBBC422000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b8dad247-b871-39c8-8bdb-c03e5ee55fb2.roa
Signing time:             Mon 19 Sep 2022 15:15:07 +0000
ROA not before:           Mon 19 Sep 2022 15:15:07 +0000
ROA not after:            Tue 25 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        143.227.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:4c:ff:08:29:0d:72:04:cb:bc:42:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 19 15:15:07 2022 GMT
            Not After : Oct 25 04:00:00 2022 GMT
        Subject: CN=1c05c166-2db5-4bd2-8d63-b314fd7aaf27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:32:0f:ee:09:7b:42:95:16:cb:26:85:eb:96:
                    85:b9:91:a4:81:46:81:86:04:a0:b3:90:30:13:bd:
                    2c:c6:a3:b9:9a:b5:59:87:99:f6:fc:2e:df:02:ae:
                    3c:db:03:c8:08:3f:5a:87:9b:f4:02:b0:28:ed:4e:
                    fc:d8:c9:f8:90:f0:07:b1:e9:f4:93:70:4e:a9:39:
                    a6:c3:48:4b:36:1a:4c:c3:b1:28:42:34:27:64:53:
                    bf:a4:6c:21:1e:ed:56:76:7c:3e:d8:e4:be:b4:96:
                    d5:92:37:d7:0f:02:5c:1b:fa:f1:e5:db:aa:31:1b:
                    16:31:99:76:42:33:92:58:9e:e6:97:4a:b1:21:cf:
                    58:35:7a:0b:3c:6b:5c:ce:70:9a:70:39:1d:3f:9f:
                    36:97:bf:05:7d:66:c7:a1:8d:71:88:b7:ba:f6:cd:
                    c9:4d:b9:46:41:29:92:77:1d:b3:29:3a:91:82:20:
                    42:a5:e2:a8:c8:f6:ce:1c:89:f5:62:6f:85:f8:33:
                    a5:b2:13:ed:35:02:df:e5:ae:8e:d4:39:ec:af:9b:
                    bd:55:dc:1f:bc:95:3d:f3:6d:7d:4e:f4:77:5e:0a:
                    6a:ed:d7:11:a3:ff:6b:1a:7b:13:83:ea:13:dc:4c:
                    c8:e3:89:6d:0d:c3:c9:ae:22:e9:18:b6:8e:c8:12:
                    a9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:96:87:53:ED:6D:FC:1B:35:8F:4E:DB:B8:52:01:59:09:58:28:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b8dad247-b871-39c8-8bdb-c03e5ee55fb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.227.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:5f:50:7e:51:70:01:dc:d3:8d:50:31:54:8f:a3:e3:eb:5a:
         ff:76:fc:3f:ec:0c:50:64:b4:62:31:85:f5:f5:43:97:14:85:
         f8:0c:90:3b:55:01:9b:b1:ae:6a:15:d0:f5:29:1e:3a:dc:10:
         b0:86:44:f9:cb:89:f7:9d:95:92:32:22:a6:44:96:a8:80:ab:
         fa:17:bc:60:7f:d6:da:53:c5:f1:d1:dc:a8:63:ae:8b:ea:2f:
         1a:4e:bc:a4:2f:04:04:27:6b:f5:dc:66:61:e9:44:af:7b:0f:
         f7:2b:02:93:81:af:96:6d:ba:d8:cb:0f:94:50:56:23:2c:85:
         0d:e1:06:6d:7b:81:cc:3b:86:d7:fe:20:92:9a:97:c4:3b:86:
         65:96:ba:5e:b5:c5:83:9b:32:90:7b:7c:23:f0:1b:09:0e:49:
         2c:8c:d1:21:f6:91:2f:12:50:2a:50:72:ec:51:a9:a3:fd:2c:
         15:f3:ac:2d:1d:96:19:f7:06:76:95:da:5e:88:18:ea:5e:96:
         cf:05:22:39:9f:42:b0:9e:60:c9:3f:2c:4f:aa:bf:99:b8:70:
         06:97:75:04:dc:06:87:56:0e:9a:bf:6b:bb:18:b5:b0:59:5d:
         37:d4:aa:4f:5d:ff:a5:6f:6c:ec:2a:6c:f0:d0:01:7d:22:db:
         d1:66:9e:08
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9M/wgpDXIEy7xCIAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDkxOTE1MTUwN1oXDTIyMTAyNTA0MDAwMFowLzEtMCsGA1UEAxMk
MWMwNWMxNjYtMmRiNS00YmQyLThkNjMtYjMxNGZkN2FhZjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjIP7gl7QpUWyyaF65aFuZGkgUaBhgSgs5Aw
E70sxqO5mrVZh5n2/C7fAq482wPICD9ah5v0ArAo7U782Mn4kPAHsen0k3BOqTmm
w0hLNhpMw7EoQjQnZFO/pGwhHu1Wdnw+2OS+tJbVkjfXDwJcG/rx5duqMRsWMZl2
QjOSWJ7ml0qxIc9YNXoLPGtcznCacDkdP582l78FfWbHoY1xiLe69s3JTblGQSmS
dx2zKTqRgiBCpeKoyPbOHIn1Ym+F+DOlshPtNQLf5a6O1Dnsr5u9VdwfvJU98219
TvR3Xgpq7dcRo/9rGnsTg+oT3EzI44ltDcPJriLpGLaOyBKpKQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLaWh1PtbfwbNY9O27hSAVkJWCg3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjhkYWQyNDctYjg3MS0z
OWM4LThiZGItYzAzZTVlZTU1ZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj+MwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEADV9QflFwAdzTjVAxVI+j4+ta/3b8P+wMUGS0YjGF9fVDlxSF+AyQO1UB
m7GuahXQ9SkeOtwQsIZE+cuJ952VkjIipkSWqICr+he8YH/W2lPF8dHcqGOui+ov
Gk68pC8EBCdr9dxmYelEr3sP9ysCk4Gvlm262MsPlFBWIyyFDeEGbXuBzDuG1/4g
kpqXxDuGZZa6XrXFg5sykHt8I/AbCQ5JLIzRIfaRLxJQKlBy7FGpo/0sFfOsLR2W
GfcGdpXaXogY6l6WzwUiOZ9CsJ5gyT8sT6q/mbhwBpd1BNwGh1YOmr9ruxi1sFld
N9SqT13/pW9s7Cps8NABfSLb0WaeCA==
-----END CERTIFICATE-----