Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ee349d5b-369e-3690-abd5-2d74ffa86876.roa
File:                     ee349d5b-369e-3690-abd5-2d74ffa86876.roa (raw, json)
Hash identifier:          MBdl5OE/2nEdfWbCcvHOuCt++vnOGcWIGQSD5PSkBEI=
Subject key identifier:   9C:47:E2:90:A9:33:25:39:9A:91:27:41:C0:FB:1A:FB:66:E0:CF:3B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584088D73AC5C38E3C40ACDCDD00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ee349d5b-369e-3690-abd5-2d74ffa86876.roa
Signing time:             Tue 10 Jan 2023 12:00:00 +0000
ROA not before:           Tue 10 Jan 2023 12:00:00 +0000
ROA not after:            Wed 15 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        151.150.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:88:d7:3a:c5:c3:8e:3c:40:ac:dc:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 10 12:00:00 2023 GMT
            Not After : Feb 15 05:00:00 2023 GMT
        Subject: CN=8de41cf7-9ebe-4f89-bdef-99cf2643055d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d5:f6:c2:c7:60:76:e5:17:7b:10:e7:fc:31:
                    6d:40:4e:49:e7:b7:9c:b1:08:49:9f:66:bb:a0:80:
                    4b:af:5e:88:ff:06:f1:54:55:1b:8f:ea:4a:1e:42:
                    ae:00:08:02:32:ca:21:1c:8d:a9:5d:fb:3e:78:23:
                    d7:fa:19:72:36:58:6d:92:d8:fd:fb:16:08:d5:ae:
                    d7:92:59:12:c4:bd:cc:25:76:27:4d:c8:fa:e4:e5:
                    63:a1:14:31:26:c0:d0:c9:ba:08:87:4c:73:7e:8a:
                    5d:34:b4:d2:9a:d9:0c:c5:86:fa:fc:5d:96:a7:e5:
                    58:79:f7:40:7f:2e:05:07:71:4f:60:51:90:b9:f0:
                    10:e7:b9:3c:bf:f9:69:95:4c:66:48:e8:96:eb:86:
                    d1:56:82:47:be:4d:a1:85:9d:9f:be:24:90:e4:73:
                    61:94:a4:f6:6f:a3:6d:2d:25:e7:d7:b4:e3:39:4e:
                    98:ed:61:ba:bd:7b:2c:80:a9:34:36:90:15:6d:bb:
                    06:4e:a9:f0:e0:11:e0:a9:b3:0a:50:a2:f5:55:51:
                    18:93:3f:77:a7:9b:aa:89:d6:de:63:f9:18:5d:33:
                    59:b0:3e:cf:9d:d0:a8:7f:29:2a:ab:ee:57:ee:a0:
                    e8:61:57:85:f3:35:4a:37:c8:39:e4:b3:f1:aa:61:
                    f8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:47:E2:90:A9:33:25:39:9A:91:27:41:C0:FB:1A:FB:66:E0:CF:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ee349d5b-369e-3690-abd5-2d74ffa86876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.150.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:43:7b:9c:e6:07:16:62:28:f8:52:3b:c8:b0:97:09:ec:3a:
         c4:b3:b2:01:44:db:e1:d4:b7:6b:8b:f0:01:1b:34:51:8b:0d:
         97:eb:f3:fe:81:99:34:c7:57:48:8e:df:5a:48:bc:bf:87:6d:
         cc:72:22:10:ee:49:fc:0c:79:d2:8f:88:ae:8d:6b:70:e3:39:
         8b:36:cd:0f:8c:79:52:c5:37:3b:25:9c:94:b2:9a:2f:c2:84:
         a8:8e:dd:fa:94:2a:09:e0:1b:10:4f:15:bd:19:3b:f0:ee:0a:
         13:db:db:21:d2:00:ec:ba:eb:4a:c4:ab:63:0c:65:56:f9:87:
         cb:dc:df:9d:67:dc:b3:b9:b4:89:0e:b7:85:ea:ed:1d:94:9a:
         f5:95:94:d5:4c:a6:d2:65:3f:ee:59:fa:80:d9:26:ca:c3:d0:
         0a:f4:ff:1a:0e:3b:4f:27:b8:9b:0e:2b:27:a7:51:64:52:d4:
         7d:dd:aa:cd:a8:58:18:ee:01:b6:04:a3:7e:31:28:5b:f3:8a:
         69:6b:af:ad:b9:23:c2:d1:6d:c8:fd:71:d9:03:de:2b:56:bf:
         ac:88:8a:4c:74:11:69:d5:b0:0f:49:eb:85:6f:38:d4:01:c1:
         2b:cd:fa:cb:1d:db:1c:1d:0e:89:16:08:66:9b:38:93:3d:f4:
         4e:e0:4f:bf
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECI1zrFw448QKzc3QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDExMDEyMDAwMFoXDTIzMDIxNTA1MDAwMFowLzEtMCsGA1UEAxMk
OGRlNDFjZjctOWViZS00Zjg5LWJkZWYtOTljZjI2NDMwNTVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNX2wsdgduUXexDn/DFtQE5J57ecsQhJn2a7
oIBLr16I/wbxVFUbj+pKHkKuAAgCMsohHI2pXfs+eCPX+hlyNlhtktj9+xYI1a7X
klkSxL3MJXYnTcj65OVjoRQxJsDQyboIh0xzfopdNLTSmtkMxYb6/F2Wp+VYefdA
fy4FB3FPYFGQufAQ57k8v/lplUxmSOiW64bRVoJHvk2hhZ2fviSQ5HNhlKT2b6Nt
LSXn17TjOU6Y7WG6vXssgKk0NpAVbbsGTqnw4BHgqbMKUKL1VVEYkz93p5uqidbe
Y/kYXTNZsD7PndCofykqq+5X7qDoYVeF8zVKN8g55LPxqmH4wwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJxH4pCpMyU5mpEnQcD7Gvtm4M87MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZWUzNDlkNWItMzY5ZS0z
NjkwLWFiZDUtMmQ3NGZmYTg2ODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAl5YwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAG0N7nOYHFmIo+FI7yLCXCew6xLOyAUTb4dS3a4vwARs0UYsNl+vz/oGZ
NMdXSI7fWki8v4dtzHIiEO5J/Ax50o+Iro1rcOM5izbND4x5UsU3OyWclLKaL8KE
qI7d+pQqCeAbEE8VvRk78O4KE9vbIdIA7LrrSsSrYwxlVvmHy9zfnWfcs7m0iQ63
hertHZSa9ZWU1Uym0mU/7ln6gNkmysPQCvT/Gg47Tye4mw4rJ6dRZFLUfd2qzahY
GO4BtgSjfjEoW/OKaWuvrbkjwtFtyP1x2QPeK1a/rIiKTHQRadWwD0nrhW841AHB
K836yx3bHB0OiRYIZps4kz30TuBPvw==
-----END CERTIFICATE-----