Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e4e62e34-7724-35af-ba0d-0e2632c7a395.roa
File:                     e4e62e34-7724-35af-ba0d-0e2632c7a395.roa (raw, json)
Hash identifier:          0/2hPcB303nudSPtf+yDeIBZDAfO2LiFBw0gO+3rfQk=
Subject key identifier:   D9:EE:4A:CE:E9:8E:C6:71:E7:12:6A:5E:AD:A5:DA:97:2C:EC:BF:42
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858408341E541E77CF0A83B437A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e4e62e34-7724-35af-ba0d-0e2632c7a395.roa
Signing time:             Sun 08 Jan 2023 12:00:00 +0000
ROA not before:           Sun 08 Jan 2023 12:00:00 +0000
ROA not after:            Mon 13 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        16.26.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:83:41:e5:41:e7:7c:f0:a8:3b:43:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  8 12:00:00 2023 GMT
            Not After : Feb 13 05:00:00 2023 GMT
        Subject: CN=1cd660cf-da76-4907-a0de-e280a68ce2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:25:07:97:ba:36:1a:5f:3b:b1:26:61:86:5b:
                    d4:09:6f:6c:de:17:ee:48:3d:da:dc:8c:b1:f8:0c:
                    0f:00:70:f4:96:c6:6c:80:b9:c6:9e:45:3e:ae:ed:
                    09:fd:50:5c:4c:09:db:25:4d:16:17:74:07:59:a9:
                    ac:80:56:37:05:77:7c:5d:79:6a:c9:da:74:09:25:
                    48:18:d9:73:ed:20:62:fa:18:1d:ec:07:2a:69:a9:
                    99:ac:2f:6f:ea:5d:28:01:b8:da:25:8e:8f:01:8f:
                    79:7f:07:26:25:24:4a:01:5a:6f:a1:ab:66:5d:ef:
                    4e:43:15:43:2e:38:41:93:e4:2b:6b:03:db:a4:d6:
                    a4:1f:a3:a0:92:92:00:3f:91:8f:b1:2d:d2:23:2e:
                    8d:6f:d9:b9:b1:7a:77:df:89:09:8e:c7:84:df:39:
                    dc:3f:5e:f2:d1:d8:ca:18:fa:0e:95:29:07:9f:98:
                    85:dc:66:16:a3:c5:27:b7:ae:a2:b9:c3:5d:82:3e:
                    55:55:28:cd:01:df:ae:04:c8:0b:a3:da:73:83:66:
                    b7:45:74:33:8b:97:55:c2:35:4b:79:56:3f:ca:d4:
                    68:8b:a6:6a:1d:14:01:04:be:dc:0f:a6:14:a5:ad:
                    74:70:85:38:8e:a3:48:5e:3b:94:5e:12:d5:45:4a:
                    76:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EE:4A:CE:E9:8E:C6:71:E7:12:6A:5E:AD:A5:DA:97:2C:EC:BF:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e4e62e34-7724-35af-ba0d-0e2632c7a395.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.26.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:c7:93:24:d5:db:9e:4f:6b:97:78:fa:02:6c:85:91:86:c0:
         85:01:61:7a:6f:2f:3e:db:38:b8:d6:f2:8e:cb:b8:d5:38:66:
         19:3a:5f:ce:c9:63:3e:93:0f:57:c9:1a:b5:5f:97:71:15:eb:
         8f:b2:49:ca:0f:36:3d:fb:be:0a:75:66:3b:61:15:fb:05:9a:
         65:b7:06:c9:0d:a2:15:d4:8a:c6:77:05:da:6b:b6:64:64:76:
         33:d7:4e:67:f3:09:d9:90:06:c6:26:15:68:5f:78:9a:9e:3c:
         31:0d:a6:09:9e:4c:4e:6c:60:95:1c:6e:1a:08:3e:16:20:30:
         49:13:96:59:65:c5:9b:2d:5a:12:c2:b9:1d:d2:c8:1f:9f:4b:
         37:2c:3c:76:ea:ad:65:4a:bb:4c:d5:d2:66:ff:eb:9b:58:89:
         0a:54:88:bf:d4:e0:43:32:6c:23:da:10:66:a6:a9:4e:ef:b2:
         1d:b6:b1:bd:f9:22:d6:7a:37:a1:ae:41:65:83:4d:d5:66:f4:
         31:bb:67:3e:fe:20:f5:08:5b:c0:5d:31:69:a4:b0:2e:8c:19:
         bb:94:f7:dc:ff:01:59:51:08:57:8d:e3:a9:76:a6:c1:2b:bf:
         ba:43:b1:08:a2:64:ad:30:b5:ce:37:73:e6:c3:54:0b:5c:2a:
         6c:ff:e4:5f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECDQeVB53zwqDtDegAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEwODEyMDAwMFoXDTIzMDIxMzA1MDAwMFowLzEtMCsGA1UEAxMk
MWNkNjYwY2YtZGE3Ni00OTA3LWEwZGUtZTI4MGE2OGNlMmQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCUHl7o2Gl87sSZhhlvUCW9s3hfuSD3a3Iyx
+AwPAHD0lsZsgLnGnkU+ru0J/VBcTAnbJU0WF3QHWamsgFY3BXd8XXlqydp0CSVI
GNlz7SBi+hgd7AcqaamZrC9v6l0oAbjaJY6PAY95fwcmJSRKAVpvoatmXe9OQxVD
LjhBk+QrawPbpNakH6OgkpIAP5GPsS3SIy6Nb9m5sXp334kJjseE3zncP17y0djK
GPoOlSkHn5iF3GYWo8Unt66iucNdgj5VVSjNAd+uBMgLo9pzg2a3RXQzi5dVwjVL
eVY/ytRoi6ZqHRQBBL7cD6YUpa10cIU4jqNIXjuUXhLVRUp2kwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNnuSs7pjsZx5xJqXq2l2pcs7L9CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZTRlNjJlMzQtNzcyNC0z
NWFmLWJhMGQtMGUyNjMyYzdhMzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEBowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACseTJNXbnk9rl3j6AmyFkYbAhQFhem8vPts4uNbyjsu41ThmGTpfzslj
PpMPV8katV+XcRXrj7JJyg82Pfu+CnVmO2EV+wWaZbcGyQ2iFdSKxncF2mu2ZGR2
M9dOZ/MJ2ZAGxiYVaF94mp48MQ2mCZ5MTmxglRxuGgg+FiAwSROWWWXFmy1aEsK5
HdLIH59LNyw8duqtZUq7TNXSZv/rm1iJClSIv9TgQzJsI9oQZqapTu+yHbaxvfki
1no3oa5BZYNN1Wb0MbtnPv4g9QhbwF0xaaSwLowZu5T33P8BWVEIV43jqXamwSu/
ukOxCKJkrTC1zjdz5sNUC1wqbP/kXw==
-----END CERTIFICATE-----