Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba6e2f13-11a0-3ca8-bf22-b18868aa8f03.roa
File:                     ba6e2f13-11a0-3ca8-bf22-b18868aa8f03.roa (raw, json)
Hash identifier:          hx40aQQpAPK822i99zgu7oPJYqruAPAcUJiWbAhP5KQ=
Subject key identifier:   49:7F:5E:BA:CA:68:57:0B:17:C7:F5:4F:FC:9A:BB:E3:7C:AC:4E:C6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E92C3F8BD77FAC5FB86D0ADC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba6e2f13-11a0-3ca8-bf22-b18868aa8f03.roa
Signing time:             Thu 14 Jul 2022 21:12:08 +0000
ROA not before:           Thu 14 Jul 2022 21:12:08 +0000
ROA not after:            Fri 19 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        45.33.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:92:c3:f8:bd:77:fa:c5:fb:86:d0:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 14 21:12:08 2022 GMT
            Not After : Aug 19 04:00:00 2022 GMT
        Subject: CN=ce34ff0b-9143-45a1-bffd-30f1d326d68d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2e:1b:d0:29:07:f0:f8:e2:42:d8:6b:f1:7a:
                    5b:09:e3:53:27:f4:81:9c:9f:b6:7b:63:36:f7:8a:
                    29:fc:05:cc:6f:dd:42:52:78:d8:83:4f:a8:a3:04:
                    42:60:50:44:7d:39:93:48:63:1d:74:00:f6:ee:95:
                    f0:b0:35:b3:62:81:60:34:94:26:63:32:85:82:9e:
                    14:39:a8:4b:4c:cb:f8:3c:6d:b0:f3:bd:7c:fa:e4:
                    72:9d:09:3c:93:d0:09:7b:e4:e2:05:c1:bd:9d:e6:
                    38:ed:fa:0d:cc:77:01:a5:a0:2a:d7:24:65:ec:ad:
                    ab:34:83:00:b3:0a:10:5d:e4:5f:e7:4b:69:4b:17:
                    fd:66:3f:7d:f4:31:10:16:8e:8a:01:f6:b4:0d:06:
                    6f:fd:1e:65:35:64:e7:4f:fe:f1:0d:da:53:e8:46:
                    a8:a1:66:cf:f3:cd:ef:95:fd:85:0b:9d:f0:c7:df:
                    a0:b1:00:f6:ca:2f:2e:8f:2c:37:0a:7b:39:f2:62:
                    be:bc:64:93:d4:ba:67:02:c8:f1:7a:e1:38:59:c0:
                    dc:d0:6b:69:d7:6f:29:08:5f:8f:0c:76:a9:4b:77:
                    56:83:ac:36:39:8a:25:78:d9:85:63:35:e8:0a:93:
                    e5:18:ec:29:84:31:3d:f3:33:9c:ee:c4:7d:63:86:
                    ee:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:7F:5E:BA:CA:68:57:0B:17:C7:F5:4F:FC:9A:BB:E3:7C:AC:4E:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba6e2f13-11a0-3ca8-bf22-b18868aa8f03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.33.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:4a:35:8c:93:74:e2:82:ee:39:f4:e9:e1:8e:93:d3:69:e8:
         72:3b:28:c6:57:50:44:ea:1d:12:f1:12:6a:64:d1:d5:10:bd:
         8f:fc:0d:75:c2:e7:69:3d:aa:d1:44:6e:a8:5d:9b:49:c0:df:
         94:bc:08:5a:0c:2a:76:3e:5f:31:9b:77:ce:cf:cb:e1:f7:87:
         ee:2b:08:ab:a8:39:7d:ee:45:97:57:ad:25:29:d0:a2:a9:66:
         c4:77:d7:05:61:f8:4a:af:65:b8:3f:75:04:83:27:04:4e:16:
         39:e2:e4:1c:e6:b6:05:ae:00:d1:08:f9:fd:d0:fc:e7:c4:0d:
         a6:59:ab:c2:b6:5d:f4:a6:05:45:33:2d:f9:96:20:53:93:a9:
         df:90:4d:36:1c:ef:e5:e8:ac:de:5c:39:f1:ee:71:67:cd:c9:
         71:dd:cb:ac:58:aa:f7:72:0e:4d:67:a5:a9:9e:0e:12:99:75:
         f1:c1:37:ec:ba:d8:55:36:b9:2f:29:a4:a4:23:24:17:d8:96:
         53:31:d6:77:bd:b5:4e:2e:49:37:9d:94:6d:6f:66:5c:95:b9:
         c2:29:07:bd:ae:88:77:81:1e:93:4d:67:6d:47:8b:65:98:d7:
         85:ff:25:80:ed:63:b8:d4:3f:9b:c9:ae:dc:29:c5:93:1d:bb:
         a9:ee:24:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD6Sw/i9d/rF+4bQrcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcxNDIxMTIwOFoXDTIyMDgxOTA0MDAwMFowLzEtMCsGA1UEAxMk
Y2UzNGZmMGItOTE0My00NWExLWJmZmQtMzBmMWQzMjZkNjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki4b0CkH8PjiQthr8XpbCeNTJ/SBnJ+2e2M2
94op/AXMb91CUnjYg0+oowRCYFBEfTmTSGMddAD27pXwsDWzYoFgNJQmYzKFgp4U
OahLTMv4PG2w8718+uRynQk8k9AJe+TiBcG9neY47foNzHcBpaAq1yRl7K2rNIMA
swoQXeRf50tpSxf9Zj999DEQFo6KAfa0DQZv/R5lNWTnT/7xDdpT6EaooWbP883v
lf2FC53wx9+gsQD2yi8ujyw3Cns58mK+vGST1LpnAsjxeuE4WcDc0Gtp128pCF+P
DHapS3dWg6w2OYoleNmFYzXoCpPlGOwphDE98zOc7sR9Y4bunwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEl/XrrKaFcLF8f1T/yau+N8rE7GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYmE2ZTJmMTMtMTFhMC0z
Y2E4LWJmMjItYjE4ODY4YWE4ZjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLSGgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKRKNYyTdOKC7jn06eGOk9Np6HI7KMZXUETqHRLxEmpk0dUQvY/8DXXC
52k9qtFEbqhdm0nA35S8CFoMKnY+XzGbd87Py+H3h+4rCKuoOX3uRZdXrSUp0KKp
ZsR31wVh+EqvZbg/dQSDJwROFjni5BzmtgWuANEI+f3Q/OfEDaZZq8K2XfSmBUUz
LfmWIFOTqd+QTTYc7+XorN5cOfHucWfNyXHdy6xYqvdyDk1npameDhKZdfHBN+y6
2FU2uS8ppKQjJBfYllMx1ne9tU4uSTedlG1vZlyVucIpB72uiHeBHpNNZ21Hi2WY
14X/JYDtY7jUP5vJrtwpxZMdu6nuJA8=
-----END CERTIFICATE-----