Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da05da05-0648-3fe9-91a6-4a69b4370dba.roa
File:                     da05da05-0648-3fe9-91a6-4a69b4370dba.roa (raw, json)
Hash identifier:          ISelHJg5+sx1Ap7ZM7g1ouXMKAnBnIf+NE2S/8UiUrU=
Subject key identifier:   DA:94:0E:16:DD:99:EA:BC:C8:03:C4:F4:AC:5D:A0:40:DD:D1:88:AC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858405C5153BD3FD3254BDFD71000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da05da05-0648-3fe9-91a6-4a69b4370dba.roa
Signing time:             Sun 25 Dec 2022 12:00:00 +0000
ROA not before:           Sun 25 Dec 2022 12:00:00 +0000
ROA not after:            Mon 30 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        161.228.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:5c:51:53:bd:3f:d3:25:4b:df:d7:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 25 12:00:00 2022 GMT
            Not After : Jan 30 05:00:00 2023 GMT
        Subject: CN=837da172-08df-4208-ae2e-a6db06ca0c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:12:85:29:63:3a:4e:7e:58:27:2e:93:bc:26:
                    a1:54:5f:7a:6e:4f:87:7a:2c:20:57:1d:13:2d:22:
                    64:c6:3c:f1:96:4f:48:60:b8:93:a1:a2:7a:9c:02:
                    0e:02:a2:63:db:de:02:b3:28:c5:1b:4a:16:62:a5:
                    1b:90:2c:02:7b:0d:65:c4:ba:45:bd:23:fc:b4:8b:
                    e2:13:56:db:37:37:21:47:79:2f:bb:3e:03:60:bd:
                    76:c2:62:68:0c:30:aa:f9:65:28:3f:b5:87:9e:bc:
                    a9:8f:be:2a:a8:a2:93:8a:89:71:2f:01:92:6e:03:
                    bf:61:67:0c:72:3e:74:6a:ba:e8:34:89:d5:aa:d8:
                    52:ff:97:fd:49:54:76:5c:c1:26:90:0a:e3:18:51:
                    96:3e:d0:49:14:5e:4c:11:dd:2f:a8:d7:7b:f9:67:
                    92:37:92:13:d1:bc:fa:2c:ec:97:28:83:66:f3:19:
                    52:01:9f:c6:4e:33:cb:12:be:55:c8:ee:34:a1:c5:
                    ca:cc:2f:62:c9:3a:69:40:60:32:a7:82:e7:7a:ab:
                    dd:27:44:60:26:d8:59:a6:6c:d8:33:76:ad:2a:4d:
                    48:21:fa:3c:80:a0:ee:72:8a:40:a0:88:48:43:d3:
                    a0:37:23:5c:bb:1b:5e:13:91:c1:9e:ff:51:31:91:
                    52:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:94:0E:16:DD:99:EA:BC:C8:03:C4:F4:AC:5D:A0:40:DD:D1:88:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da05da05-0648-3fe9-91a6-4a69b4370dba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.228.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:9a:0e:8f:e0:be:84:56:f9:ef:73:27:3e:a2:2c:26:c2:bb:
         04:36:aa:a9:25:0c:7c:43:ef:48:97:f4:eb:2e:78:09:a8:c7:
         ad:2b:4f:b7:c8:0b:a5:01:23:b1:3b:1e:e1:77:25:31:47:d4:
         06:5e:4c:d4:0c:ed:51:db:f3:25:1b:48:fb:3c:b3:a8:9e:51:
         0f:8f:70:33:b1:35:a3:4a:be:a3:02:08:9c:55:dd:39:1a:17:
         4a:c5:97:81:bc:c0:07:55:ba:61:9c:5f:6f:09:91:f0:42:13:
         17:70:37:a5:da:51:5d:4b:f1:a9:06:b5:8e:98:7f:20:e7:ae:
         b8:e6:e3:88:b6:f7:07:3c:79:89:4a:91:a2:58:77:b4:77:0d:
         22:d4:9c:83:63:28:de:e2:bd:fd:6b:f1:2f:02:0b:e8:e2:66:
         f0:3a:6e:05:a9:52:ef:97:67:30:c2:ef:f8:d2:a8:64:ad:e2:
         65:45:84:b8:d0:96:23:6c:7b:de:f2:a1:72:25:6b:34:f7:58:
         18:a9:cf:00:2b:b7:58:89:e3:6f:d3:e5:20:0e:64:47:86:fb:
         ab:15:bd:4c:dc:43:54:22:5f:ef:be:04:31:91:bd:dd:e8:94:
         d8:52:a6:97:d9:1f:c0:d6:23:1f:65:d3:8a:14:ea:f0:d6:d1:
         40:d4:67:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBcUVO9P9MlS9/XEAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIyNTEyMDAwMFoXDTIzMDEzMDA1MDAwMFowLzEtMCsGA1UEAxMk
ODM3ZGExNzItMDhkZi00MjA4LWFlMmUtYTZkYjA2Y2EwYzUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRKFKWM6Tn5YJy6TvCahVF96bk+HeiwgVx0T
LSJkxjzxlk9IYLiToaJ6nAIOAqJj294CsyjFG0oWYqUbkCwCew1lxLpFvSP8tIvi
E1bbNzchR3kvuz4DYL12wmJoDDCq+WUoP7WHnrypj74qqKKTiolxLwGSbgO/YWcM
cj50arroNInVqthS/5f9SVR2XMEmkArjGFGWPtBJFF5MEd0vqNd7+WeSN5IT0bz6
LOyXKINm8xlSAZ/GTjPLEr5VyO40ocXKzC9iyTppQGAyp4LneqvdJ0RgJthZpmzY
M3atKk1IIfo8gKDucopAoIhIQ9OgNyNcuxteE5HBnv9RMZFSOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNqUDhbdmeq8yAPE9KxdoEDd0YisMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZGEwNWRhMDUtMDY0OC0z
ZmU5LTkxYTYtNGE2OWI0MzcwZGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGoeTAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACCaDo/gvoRW+e9zJz6iLCbCuwQ2qqklDHxD70iX9OsueAmox60rT7fI
C6UBI7E7HuF3JTFH1AZeTNQM7VHb8yUbSPs8s6ieUQ+PcDOxNaNKvqMCCJxV3Tka
F0rFl4G8wAdVumGcX28JkfBCExdwN6XaUV1L8akGtY6YfyDnrrjm44i29wc8eYlK
kaJYd7R3DSLUnINjKN7ivf1r8S8CC+jiZvA6bgWpUu+XZzDC7/jSqGSt4mVFhLjQ
liNse97yoXIlazT3WBipzwArt1iJ42/T5SAOZEeG+6sVvUzcQ1QiX+++BDGRvd3o
lNhSppfZH8DWIx9l04oU6vDW0UDUZwg=
-----END CERTIFICATE-----