Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/baea3c8d-c11a-3bb5-9aaf-0924be54ec80.roa
File:                     baea3c8d-c11a-3bb5-9aaf-0924be54ec80.roa (raw, json)
Hash identifier:          YaK9e6MMrew340NfCvGBdUrHX+WxfWy9IQxQjKnzAkA=
Subject key identifier:   E7:CC:7E:DD:5C:C1:B5:A5:F0:3E:83:BD:5D:BC:72:4F:54:72:41:56
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858409057FB8E72C221DFE5010100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/baea3c8d-c11a-3bb5-9aaf-0924be54ec80.roa
Signing time:             Thu 12 Jan 2023 12:00:00 +0000
ROA not before:           Thu 12 Jan 2023 12:00:00 +0000
ROA not after:            Fri 17 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        204.168.0.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:90:57:fb:8e:72:c2:21:df:e5:01:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 12 12:00:00 2023 GMT
            Not After : Feb 17 05:00:00 2023 GMT
        Subject: CN=4be4d688-9d7a-46b6-8e22-f75addf70104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:22:b2:2d:34:a6:ef:67:cb:1e:6f:97:92:ff:
                    d0:6a:e5:a9:85:d9:c6:3b:cb:a9:2c:98:a2:f4:20:
                    e0:4f:0d:b8:2c:c7:19:b4:bb:57:41:ca:a7:34:63:
                    42:7b:21:8b:6b:14:eb:ad:b2:13:72:d4:a3:2e:77:
                    66:26:6b:14:c3:5f:2d:fa:61:cd:77:57:05:31:6d:
                    21:ce:48:07:f9:bb:02:46:73:f9:dd:df:48:14:54:
                    6f:20:3d:f3:ed:c9:9f:06:ff:20:df:ea:97:7a:08:
                    41:b3:0e:42:87:13:65:28:39:c3:21:15:78:a6:72:
                    8b:4c:8b:61:50:61:5b:8a:be:42:60:ba:fe:c8:52:
                    be:d5:70:45:b7:52:1e:ff:58:84:db:8a:a7:4c:26:
                    06:3e:d5:75:da:0e:0b:79:e9:2a:6b:1e:d3:3a:5d:
                    66:20:01:be:96:dd:64:b5:68:be:24:52:c5:38:0e:
                    20:83:97:06:de:3b:27:75:2f:68:23:97:96:6f:ba:
                    ab:9e:fe:1f:2c:f9:c3:0c:20:27:dc:86:14:48:3c:
                    18:79:c8:c6:e5:3f:31:40:7b:95:91:db:3f:b0:1a:
                    a2:41:d1:65:cb:b0:4d:ae:c6:f6:fb:4c:8c:8e:17:
                    35:a2:4d:57:86:16:88:dc:2e:56:ca:f7:ff:43:ef:
                    7e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CC:7E:DD:5C:C1:B5:A5:F0:3E:83:BD:5D:BC:72:4F:54:72:41:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/baea3c8d-c11a-3bb5-9aaf-0924be54ec80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.168.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:ad:13:c7:eb:b1:04:e6:68:65:f6:44:45:bb:ee:c1:22:96:
         17:4e:5a:9e:55:ba:d0:d7:f9:e9:87:86:93:79:a5:21:ef:e9:
         b8:fd:7f:96:32:38:19:ee:53:34:02:22:c3:49:34:7e:0a:82:
         b0:54:33:0e:aa:c4:ff:d7:3a:0d:93:03:1f:ac:b7:3a:e7:4b:
         c3:b4:42:49:bb:a3:e5:d0:56:56:4b:4c:43:a1:48:8a:17:fa:
         26:44:a7:9b:af:f5:97:ff:f0:81:21:a9:fe:5f:62:e0:75:a5:
         d9:73:bc:e0:f4:84:98:ee:b2:ec:ff:15:e3:34:03:77:c8:a5:
         e4:90:41:36:a2:64:20:cf:d8:7e:21:24:08:32:eb:bf:fb:ca:
         a7:51:52:a6:46:f5:20:58:ae:07:d5:44:50:55:91:87:d5:f4:
         b7:73:f4:6f:fb:4a:a0:d3:77:42:c2:10:25:13:ff:81:fe:81:
         3e:49:22:95:76:cb:fa:be:3d:48:fd:61:e3:b8:b4:59:b7:9b:
         e0:7a:51:eb:63:ba:e9:95:8c:35:3a:db:a3:7a:88:9f:c2:a9:
         5a:ee:26:c0:c3:2c:1f:7b:88:60:66:62:ff:c5:13:93:22:80:
         dc:58:d4:db:c9:74:9b:6f:b3:b9:80:f3:da:33:5b:c1:f5:09:
         a5:c2:e8:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWECQV/uOcsIh3+UBAQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDExMjEyMDAwMFoXDTIzMDIxNzA1MDAwMFowLzEtMCsGA1UEAxMk
NGJlNGQ2ODgtOWQ3YS00NmI2LThlMjItZjc1YWRkZjcwMTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCKyLTSm72fLHm+Xkv/QauWphdnGO8upLJii
9CDgTw24LMcZtLtXQcqnNGNCeyGLaxTrrbITctSjLndmJmsUw18t+mHNd1cFMW0h
zkgH+bsCRnP53d9IFFRvID3z7cmfBv8g3+qXeghBsw5ChxNlKDnDIRV4pnKLTIth
UGFbir5CYLr+yFK+1XBFt1Ie/1iE24qnTCYGPtV12g4Leekqax7TOl1mIAG+lt1k
tWi+JFLFOA4gg5cG3jsndS9oI5eWb7qrnv4fLPnDDCAn3IYUSDwYecjG5T8xQHuV
kds/sBqiQdFly7BNrsb2+0yMjhc1ok1XhhaI3C5Wyvf/Q+9+uwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOfMft1cwbWl8D6DvV28ck9UckFWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYmFlYTNjOGQtYzExYS0z
YmI1LTlhYWYtMDkyNGJlNTRlYzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzKgAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG+tE8frsQTmaGX2REW77sEilhdOWp5VutDX+emHhpN5pSHv6bj9f5Yy
OBnuUzQCIsNJNH4KgrBUMw6qxP/XOg2TAx+stzrnS8O0Qkm7o+XQVlZLTEOhSIoX
+iZEp5uv9Zf/8IEhqf5fYuB1pdlzvOD0hJjusuz/FeM0A3fIpeSQQTaiZCDP2H4h
JAgy67/7yqdRUqZG9SBYrgfVRFBVkYfV9Ldz9G/7SqDTd0LCECUT/4H+gT5JIpV2
y/q+PUj9YeO4tFm3m+B6UetjuumVjDU626N6iJ/CqVruJsDDLB97iGBmYv/FE5Mi
gNxY1NvJdJtvs7mA89ozW8H1CaXC6A8=
-----END CERTIFICATE-----