Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb3c3207-5515-36ff-8c90-7925b793d528.roa
File:                     cb3c3207-5515-36ff-8c90-7925b793d528.roa (raw, json)
Hash identifier:          mPkNhffeNKtWl3pau8FIIxuIkewuppXJbZw/O12xvd4=
Subject key identifier:   2E:F7:80:27:34:1A:76:F6:E1:84:CC:69:39:58:A8:A7:4F:91:A7:47
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858403ABB07B944352E906E25DF40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb3c3207-5515-36ff-8c90-7925b793d528.roa
Signing time:             Tue 13 Dec 2022 12:00:00 +0000
ROA not before:           Tue 13 Dec 2022 12:00:00 +0000
ROA not after:            Wed 18 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        15.252.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3a:bb:07:b9:44:35:2e:90:6e:25:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 13 12:00:00 2022 GMT
            Not After : Jan 18 05:00:00 2023 GMT
        Subject: CN=ad044ada-efd9-4bb7-a306-49a2ec04f09e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3a:03:36:d5:9c:aa:27:e4:7c:8e:45:8a:3c:
                    c5:e0:07:d9:cd:a1:e5:fa:b2:01:b4:f8:5d:e5:d6:
                    c8:6e:8a:b3:e3:56:03:3c:ff:24:2e:24:74:e2:0d:
                    a0:7f:b4:7e:e2:f1:3a:58:35:aa:53:44:d5:16:f2:
                    67:aa:40:f0:32:ac:a2:6e:19:b8:52:47:8a:12:09:
                    16:54:4c:e7:db:68:78:f3:24:39:d8:69:25:61:bf:
                    1a:c3:47:8a:41:25:96:fc:ee:c6:f0:91:21:8a:48:
                    c8:a6:ac:6d:d9:33:a1:64:ab:04:de:e6:25:75:21:
                    9f:dd:37:15:ce:d4:45:fa:25:56:ea:ed:73:e2:5a:
                    9c:4f:62:5b:3f:7b:e7:3f:0d:f7:1a:b1:2d:ec:e2:
                    d0:7c:bc:0b:be:1b:f0:08:ea:6f:2c:9e:3b:14:ad:
                    f6:66:e6:ef:60:65:1b:76:7d:e1:7b:ad:ab:04:16:
                    30:a6:44:4a:6f:3e:9e:e5:e0:db:ef:8e:ea:96:db:
                    94:f1:ca:cf:0d:19:c7:8b:d7:dc:f9:1d:df:4d:db:
                    50:2f:e3:1b:69:11:5d:17:53:ee:83:e9:05:bf:1b:
                    85:a3:18:92:f3:53:1a:91:ba:b2:51:c4:ae:f7:ac:
                    6d:96:3a:81:88:b9:b4:a4:6b:ab:27:b5:a3:28:4e:
                    18:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F7:80:27:34:1A:76:F6:E1:84:CC:69:39:58:A8:A7:4F:91:A7:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb3c3207-5515-36ff-8c90-7925b793d528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.252.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:76:f4:f3:6d:1f:20:f8:5c:9c:8f:d9:04:6f:22:71:84:8b:
         05:91:d0:91:f4:32:07:f9:e0:02:90:d3:5f:59:2f:7d:9e:98:
         45:19:5c:87:22:e8:ab:49:5a:ae:0c:69:38:3f:73:f5:52:e4:
         b2:f3:3f:08:2c:dd:05:ae:84:ad:e5:d3:0e:df:b3:25:ca:e4:
         a8:e2:89:15:60:f3:8c:13:20:71:04:9c:b8:e8:b7:30:89:7d:
         7f:3c:eb:91:73:96:e9:70:c4:cf:fe:96:53:29:8f:21:7c:dd:
         50:d7:b9:2b:15:6e:88:3c:e9:07:07:fe:10:16:92:ca:2b:43:
         4e:8f:b5:86:ce:6b:22:e5:34:5b:65:37:6e:66:7c:1f:5c:7c:
         ca:03:e8:d7:82:56:0d:2d:c8:c3:e0:34:1f:dc:19:3d:a0:2a:
         00:c2:3c:0e:46:11:c1:95:2f:e8:62:8d:19:40:ba:9a:5f:3e:
         6c:c8:c2:7d:bc:d4:af:80:35:6c:95:79:fa:fc:d1:74:90:03:
         c6:3f:07:be:f3:bf:d1:18:fa:d8:94:88:c9:ec:27:bb:34:bb:
         a1:99:d7:99:df:c1:67:19:36:d6:67:a0:3e:f0:41:18:3a:08:
         02:49:49:3f:ac:85:af:ba:ce:a2:34:83:81:bc:77:ac:09:d0:
         88:84:7a:4d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA6uwe5RDUukG4l30AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxMzEyMDAwMFoXDTIzMDExODA1MDAwMFowLzEtMCsGA1UEAxMk
YWQwNDRhZGEtZWZkOS00YmI3LWEzMDYtNDlhMmVjMDRmMDllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzoDNtWcqifkfI5FijzF4AfZzaHl+rIBtPhd
5dbIboqz41YDPP8kLiR04g2gf7R+4vE6WDWqU0TVFvJnqkDwMqyibhm4UkeKEgkW
VEzn22h48yQ52GklYb8aw0eKQSWW/O7G8JEhikjIpqxt2TOhZKsE3uYldSGf3TcV
ztRF+iVW6u1z4lqcT2JbP3vnPw33GrEt7OLQfLwLvhvwCOpvLJ47FK32ZubvYGUb
dn3he62rBBYwpkRKbz6e5eDb747qltuU8crPDRnHi9fc+R3fTdtQL+MbaRFdF1Pu
g+kFvxuFoxiS81MakbqyUcSu96xtljqBiLm0pGurJ7WjKE4Y1QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFC73gCc0Gnb24YTMaTlYqKdPkadHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvY2IzYzMyMDctNTUxNS0z
NmZmLThjOTAtNzkyNWI3OTNkNTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD/wwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAl3b0820fIPhcnI/ZBG8icYSLBZHQkfQyB/ngApDTX1kvfZ6YRRlchyLo
q0largxpOD9z9VLksvM/CCzdBa6EreXTDt+zJcrkqOKJFWDzjBMgcQScuOi3MIl9
fzzrkXOW6XDEz/6WUymPIXzdUNe5KxVuiDzpBwf+EBaSyitDTo+1hs5rIuU0W2U3
bmZ8H1x8ygPo14JWDS3Iw+A0H9wZPaAqAMI8DkYRwZUv6GKNGUC6ml8+bMjCfbzU
r4A1bJV5+vzRdJADxj8HvvO/0Rj62JSIyewnuzS7oZnXmd/BZxk21megPvBBGDoI
AklJP6yFr7rOojSDgbx3rAnQiIR6TQ==
-----END CERTIFICATE-----