Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e8b24683-6744-361d-a3f5-705e812dac4d.roa
File:                     e8b24683-6744-361d-a3f5-705e812dac4d.roa (raw, json)
Hash identifier:          FZDXXmphczKh79oT9mzUK1x0/F5o7okZ211LBzhXSkg=
Subject key identifier:   43:15:7B:FB:3C:2E:68:E7:58:F2:64:C1:37:E4:B9:02:5C:FA:A5:F6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F3D16CF3EDE5430F58C2CD600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e8b24683-6744-361d-a3f5-705e812dac4d.roa
Signing time:             Tue 13 Sep 2022 12:00:00 +0000
ROA not before:           Tue 13 Sep 2022 12:00:00 +0000
ROA not after:            Wed 19 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        204.45.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:3d:16:cf:3e:de:54:30:f5:8c:2c:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 13 12:00:00 2022 GMT
            Not After : Oct 19 04:00:00 2022 GMT
        Subject: CN=1eef60ba-ee49-47a6-8e72-8af6f54d5503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:d8:9d:fa:04:16:13:a0:dc:13:9a:47:63:
                    18:a3:59:c5:25:6c:3f:af:d5:60:e7:85:3a:a7:91:
                    0f:54:11:ac:f7:4c:16:c4:6c:83:65:bf:d8:ea:b5:
                    85:91:ce:96:2a:c3:15:4f:53:74:4f:6f:a0:2e:4d:
                    c7:13:4f:cc:fa:bf:f4:30:86:94:36:b1:e7:38:e5:
                    a2:f0:e9:fc:6b:76:57:e1:61:53:df:20:cf:cd:34:
                    94:f1:72:8a:c0:98:5b:76:1b:41:4c:87:9c:e5:fc:
                    9c:67:6e:c5:26:2b:bb:dd:3c:3c:47:78:51:e2:34:
                    42:05:44:5c:86:f6:8f:7a:eb:ba:e1:f6:b8:84:c7:
                    80:7c:36:06:ed:f2:17:db:b4:11:3a:bb:a3:55:99:
                    3d:a1:05:14:a1:2e:24:58:52:8e:28:20:6f:14:2e:
                    06:8e:11:79:56:e1:ae:f5:01:0e:d0:c6:0d:a1:76:
                    7b:0b:c9:7d:53:03:03:a4:41:ee:d0:66:d6:ee:8b:
                    10:73:69:34:05:87:1c:c3:8e:2f:6b:3f:60:6b:4a:
                    d9:09:80:86:21:a6:c6:fd:7c:2c:2f:e2:70:27:23:
                    5c:eb:9a:0d:3e:23:eb:5e:a7:d6:00:16:bf:83:1d:
                    c0:6d:41:38:2c:9f:b3:7c:0e:e9:51:e5:e8:37:6b:
                    ec:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:15:7B:FB:3C:2E:68:E7:58:F2:64:C1:37:E4:B9:02:5C:FA:A5:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e8b24683-6744-361d-a3f5-705e812dac4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.45.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:91:cb:4d:7c:32:f4:02:82:3d:98:3e:20:dd:aa:ae:2d:b5:
         4e:14:ed:29:64:1e:ca:09:42:2b:fb:4a:1d:2c:04:e5:87:29:
         45:3d:61:29:36:62:61:a1:95:c6:e8:3c:9f:a9:83:25:5e:89:
         8a:ec:7d:89:70:48:b2:13:27:2d:0f:25:72:dc:91:09:49:d6:
         37:7e:91:42:9a:d9:5a:41:51:15:ac:c1:a3:0b:8a:a5:a0:69:
         52:b1:7a:3f:0f:07:67:c5:bb:44:65:99:2a:bd:04:d9:b2:96:
         97:1e:74:8b:3e:4f:fb:da:22:0a:8c:f0:28:a0:e9:9b:54:6e:
         ed:e2:2e:54:0b:ae:99:c1:2b:e5:22:c7:bc:95:41:79:b7:0d:
         0e:9b:79:b7:44:0e:57:72:5c:22:7d:cf:b1:f8:17:fd:23:28:
         2a:69:1f:e8:b5:7c:90:bc:86:33:6a:09:a8:0e:f6:14:b4:08:
         63:56:91:cd:77:5e:69:6b:7e:71:d8:ae:c8:08:5f:48:35:e9:
         4c:28:80:82:20:20:71:fe:8a:9e:4d:d9:14:e3:2d:aa:a3:8a:
         eb:7b:35:3d:64:50:64:b4:4c:05:2c:97:12:57:b5:97:7c:88:
         52:58:59:bf:8e:6e:1e:85:1d:b3:35:69:41:90:73:d5:1f:95:
         30:c8:94:0f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD89Fs8+3lQw9Yws1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDkxMzEyMDAwMFoXDTIyMTAxOTA0MDAwMFowLzEtMCsGA1UEAxMk
MWVlZjYwYmEtZWU0OS00N2E2LThlNzItOGFmNmY1NGQ1NTAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVvYnfoEFhOg3BOaR2MYo1nFJWw/r9Vg54U6
p5EPVBGs90wWxGyDZb/Y6rWFkc6WKsMVT1N0T2+gLk3HE0/M+r/0MIaUNrHnOOWi
8On8a3ZX4WFT3yDPzTSU8XKKwJhbdhtBTIec5fycZ27FJiu73Tw8R3hR4jRCBURc
hvaPeuu64fa4hMeAfDYG7fIX27QROrujVZk9oQUUoS4kWFKOKCBvFC4GjhF5VuGu
9QEO0MYNoXZ7C8l9UwMDpEHu0GbW7osQc2k0BYccw44vaz9ga0rZCYCGIabG/Xws
L+JwJyNc65oNPiPrXqfWABa/gx3AbUE4LJ+zfA7pUeXoN2vsKQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEMVe/s8LmjnWPJkwTfkuQJc+qX2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZThiMjQ2ODMtNjc0NC0z
NjFkLWEzZjUtNzA1ZTgxMmRhYzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzC0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACJHLTXwy9AKCPZg+IN2qri21ThTtKWQeyglCK/tKHSwE5YcpRT1hKTZi
YaGVxug8n6mDJV6Jiux9iXBIshMnLQ8lctyRCUnWN36RQprZWkFRFazBowuKpaBp
UrF6Pw8HZ8W7RGWZKr0E2bKWlx50iz5P+9oiCozwKKDpm1Ru7eIuVAuumcEr5SLH
vJVBebcNDpt5t0QOV3JcIn3PsfgX/SMoKmkf6LV8kLyGM2oJqA72FLQIY1aRzXde
aWt+cdiuyAhfSDXpTCiAgiAgcf6Knk3ZFOMtqqOK63s1PWRQZLRMBSyXEle1l3yI
UlhZv45uHoUdszVpQZBz1R+VMMiUDw==
-----END CERTIFICATE-----