Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e00870cf-fe69-39c6-9c24-10f357cb0eb5.roa
File:                     e00870cf-fe69-39c6-9c24-10f357cb0eb5.roa (raw, json)
Hash identifier:          ewYZ4jFovgBTJFuHEhGmh8O2EeAhOTtNbvceW8RVBhI=
Subject key identifier:   33:64:24:D5:91:0C:44:55:80:CA:60:C6:B9:96:5B:81:A7:1C:45:32
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840659864595F42334611BEB090
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e00870cf-fe69-39c6-9c24-10f357cb0eb5.roa
Signing time:             Wed 28 Dec 2022 12:00:00 +0000
ROA not before:           Wed 28 Dec 2022 12:00:00 +0000
ROA not after:            Thu 02 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        16.71.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:65:98:64:59:5f:42:33:46:11:be:b0:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 28 12:00:00 2022 GMT
            Not After : Feb  2 05:00:00 2023 GMT
        Subject: CN=1de13e6c-efe2-4bbb-a6aa-f3e4aef6edc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:91:be:fc:be:5b:15:44:a4:3d:e4:40:27:e3:
                    eb:3e:84:68:bb:15:ce:7e:cd:d1:b7:d4:a2:0d:4b:
                    76:33:9a:d9:86:87:f5:06:a9:e4:db:63:95:c1:96:
                    01:26:82:ea:2d:48:c0:61:71:58:f1:3c:0d:c5:b2:
                    33:06:b4:42:55:33:52:12:a7:ce:50:48:8f:29:96:
                    67:e5:4f:d6:e2:36:bd:55:92:30:f1:a5:b7:e3:dd:
                    bd:29:83:76:b5:05:e2:7d:22:ea:b2:19:2e:56:99:
                    9c:14:c6:08:35:9e:47:d4:04:92:20:6e:79:08:a4:
                    43:72:4e:0b:e9:49:be:f1:b0:91:d9:e8:40:9f:ba:
                    50:d5:15:76:d1:90:c7:c0:d0:2f:35:00:66:18:82:
                    2c:df:74:af:3b:9a:c3:2a:a5:18:5b:b5:40:39:ce:
                    76:85:78:19:39:9a:6c:b9:ba:4f:08:f1:d8:9b:a0:
                    b6:9b:32:60:16:4e:80:ac:0e:a8:a7:3c:e9:5e:3f:
                    7a:dc:1f:00:d4:ea:7f:86:26:37:56:d8:9c:f7:8c:
                    6b:06:62:47:d2:8e:53:41:2e:f1:95:7e:e1:f1:38:
                    d4:f9:a4:22:19:79:b3:9d:68:4f:62:f7:5b:12:34:
                    95:33:32:06:dd:72:59:27:f3:8e:67:d9:05:fe:ec:
                    e8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:64:24:D5:91:0C:44:55:80:CA:60:C6:B9:96:5B:81:A7:1C:45:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e00870cf-fe69-39c6-9c24-10f357cb0eb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.71.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:69:9d:ed:f4:ad:0b:e4:51:6a:16:4e:3d:03:de:14:cc:6a:
         68:fa:0c:27:64:d5:27:5e:c1:0f:90:7e:be:a3:7d:cb:03:40:
         53:64:a3:f3:28:44:db:f7:7e:5d:54:ce:52:59:28:83:4c:4b:
         d6:d2:2f:1b:1b:3b:09:9f:2b:90:5d:a1:17:2b:90:07:66:93:
         1d:86:e7:aa:89:06:95:1a:17:97:54:51:12:ed:eb:bc:ec:c6:
         63:ec:14:bc:d2:5d:fb:fd:6c:4f:8b:43:e7:de:7f:a4:4e:32:
         9e:05:4a:cb:04:f9:bb:1f:25:01:da:8d:17:c2:a0:28:d3:f3:
         ec:a1:09:cd:4c:08:2d:6e:3c:14:40:75:bf:c9:57:04:1c:3e:
         6f:4b:78:8f:3b:34:b6:30:f9:4c:99:2b:40:19:01:8d:8e:44:
         d9:54:84:f2:d8:a3:3d:d1:61:14:9c:d6:6d:8f:d9:3a:48:78:
         b8:25:52:ea:0c:26:3f:48:7a:a9:11:7e:85:6b:e6:da:b1:dc:
         bc:ee:23:57:f9:cd:8a:0b:c9:6e:f8:3b:6f:b5:5b:7a:a2:07:
         17:73:94:87:61:fd:92:f1:6b:6c:5d:57:c5:e9:da:b7:e1:f0:
         9a:9a:22:a9:16:99:4c:06:cb:ca:13:88:44:50:70:f5:96:1b:
         b7:0c:22:3f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBlmGRZX0IzRhG+sJAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIyODEyMDAwMFoXDTIzMDIwMjA1MDAwMFowLzEtMCsGA1UEAxMk
MWRlMTNlNmMtZWZlMi00YmJiLWE2YWEtZjNlNGFlZjZlZGM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZG+/L5bFUSkPeRAJ+PrPoRouxXOfs3Rt9Si
DUt2M5rZhof1Bqnk22OVwZYBJoLqLUjAYXFY8TwNxbIzBrRCVTNSEqfOUEiPKZZn
5U/W4ja9VZIw8aW34929KYN2tQXifSLqshkuVpmcFMYINZ5H1ASSIG55CKRDck4L
6Um+8bCR2ehAn7pQ1RV20ZDHwNAvNQBmGIIs33SvO5rDKqUYW7VAOc52hXgZOZps
ubpPCPHYm6C2mzJgFk6ArA6opzzpXj963B8A1Op/hiY3Vtic94xrBmJH0o5TQS7x
lX7h8TjU+aQiGXmznWhPYvdbEjSVMzIG3XJZJ/OOZ9kF/uzoDwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDNkJNWRDERVgMpgxrmWW4GnHEUyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZTAwODcwY2YtZmU2OS0z
OWM2LTljMjQtMTBmMzU3Y2IwZWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEEcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAbWmd7fStC+RRahZOPQPeFMxqaPoMJ2TVJ17BD5B+vqN9ywNAU2Sj8yhE
2/d+XVTOUlkog0xL1tIvGxs7CZ8rkF2hFyuQB2aTHYbnqokGlRoXl1RREu3rvOzG
Y+wUvNJd+/1sT4tD595/pE4yngVKywT5ux8lAdqNF8KgKNPz7KEJzUwILW48FEB1
v8lXBBw+b0t4jzs0tjD5TJkrQBkBjY5E2VSE8tijPdFhFJzWbY/ZOkh4uCVS6gwm
P0h6qRF+hWvm2rHcvO4jV/nNigvJbvg7b7VbeqIHF3OUh2H9kvFrbF1Xxenat+Hw
mpoiqRaZTAbLyhOIRFBw9ZYbtwwiPw==
-----END CERTIFICATE-----