Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f33ba519-1392-3ff1-8231-0d2c5c325b5a.roa
File:                     f33ba519-1392-3ff1-8231-0d2c5c325b5a.roa (raw, json)
Hash identifier:          aN0JBMMBBDNKdIzB8lH1D9xTAPLW23BvtRiZgvy8XoQ=
Subject key identifier:   B7:33:06:43:31:90:31:BE:B2:15:B1:57:48:07:35:E8:C5:47:23:90
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858408665ECB51093D8F599FFDD80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f33ba519-1392-3ff1-8231-0d2c5c325b5a.roa
Signing time:             Mon 09 Jan 2023 12:00:00 +0000
ROA not before:           Mon 09 Jan 2023 12:00:00 +0000
ROA not after:            Tue 14 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        80.241.160.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:86:65:ec:b5:10:93:d8:f5:99:ff:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  9 12:00:00 2023 GMT
            Not After : Feb 14 05:00:00 2023 GMT
        Subject: CN=b6e19334-c859-49c0-aafb-e7325af16d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c5:6a:fc:e6:85:5a:24:f7:0d:90:62:d7:28:
                    39:7b:e0:e2:5b:cd:d3:f8:4a:74:db:66:56:27:27:
                    a9:24:f2:67:8e:48:97:e1:04:fd:15:06:19:18:cd:
                    85:97:1b:5c:1d:ed:d8:96:a9:4b:f1:7f:60:8b:d8:
                    ad:35:37:16:c8:ec:b3:56:d8:59:57:ca:79:f6:e9:
                    55:fb:0b:44:18:7a:e3:94:a6:94:4f:59:63:0c:27:
                    f2:70:9e:8e:03:a4:f5:65:0b:90:41:a4:9f:92:91:
                    b9:26:04:df:78:e2:9c:f8:f7:73:2f:6d:ad:54:a5:
                    86:38:36:cb:31:4a:eb:6e:29:4c:c2:d3:b8:35:a0:
                    43:7c:91:01:ce:40:10:02:e7:55:40:8c:4d:9a:81:
                    49:00:8b:6a:6b:68:7f:a9:45:b9:28:a3:1d:30:e0:
                    68:7f:a2:49:2b:63:3e:1a:81:3b:7d:aa:06:64:1e:
                    08:ac:a4:14:0e:c1:0f:a5:0c:fe:74:85:a2:b9:d5:
                    d7:6a:0e:d9:12:a7:a1:ff:bf:40:c3:c4:ca:33:fe:
                    3b:6c:f3:41:cb:24:d4:fc:56:1f:f5:7d:5b:e9:2c:
                    b6:d2:c9:f6:06:d4:8f:70:d4:da:f8:22:52:f1:76:
                    ee:1f:45:b9:d7:a1:d8:0c:83:83:7b:39:b2:f3:2b:
                    f6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:33:06:43:31:90:31:BE:B2:15:B1:57:48:07:35:E8:C5:47:23:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f33ba519-1392-3ff1-8231-0d2c5c325b5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.241.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:dd:5f:20:f6:63:98:a7:95:0a:00:2a:1b:77:00:d0:c9:ba:
         87:5f:3d:66:3e:94:da:b8:46:a5:e4:45:84:10:f1:18:21:bc:
         d2:c5:62:53:bf:c6:b6:44:49:dd:b6:ae:2f:b1:f0:23:76:cc:
         8b:c0:b5:0f:eb:50:23:ed:0e:d1:e1:57:8d:ac:73:55:70:b2:
         68:a9:35:fa:ed:7a:dd:bb:ab:e5:60:aa:d2:e1:6c:58:bd:5c:
         9f:54:89:75:a7:41:aa:d2:9c:b5:00:33:7e:73:44:b9:df:af:
         4b:58:3b:b6:ed:b4:4b:a9:38:ad:85:13:9c:58:87:31:4c:f3:
         c7:be:4f:94:73:43:b8:02:c6:5c:e3:05:c2:ec:7f:5a:f1:c7:
         8a:63:15:2d:a6:9c:72:94:d6:a7:c1:73:8d:53:47:f7:cf:17:
         07:47:18:ae:34:39:35:bc:47:1a:3a:92:e0:38:4a:0d:12:45:
         85:0d:a3:55:83:76:53:43:c9:1d:26:d4:d2:cf:d0:21:c9:67:
         8d:1f:43:07:67:c2:bb:5d:98:1a:7c:fb:ec:f8:8c:5d:b4:1e:
         15:e9:1e:a7:46:c1:d8:5e:5b:82:5b:b1:2e:1e:66:c9:74:03:
         d3:24:a0:1c:b5:cd:da:88:b0:bf:cb:5d:ef:51:8d:3d:83:47:
         1b:c2:0a:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWECGZey1EJPY9Zn/3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEwOTEyMDAwMFoXDTIzMDIxNDA1MDAwMFowLzEtMCsGA1UEAxMk
YjZlMTkzMzQtYzg1OS00OWMwLWFhZmItZTczMjVhZjE2ZDdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8Vq/OaFWiT3DZBi1yg5e+DiW83T+Ep022ZW
JyepJPJnjkiX4QT9FQYZGM2FlxtcHe3YlqlL8X9gi9itNTcWyOyzVthZV8p59ulV
+wtEGHrjlKaUT1ljDCfycJ6OA6T1ZQuQQaSfkpG5JgTfeOKc+PdzL22tVKWGODbL
MUrrbilMwtO4NaBDfJEBzkAQAudVQIxNmoFJAItqa2h/qUW5KKMdMOBof6JJK2M+
GoE7faoGZB4IrKQUDsEPpQz+dIWiudXXag7ZEqeh/79Aw8TKM/47bPNByyTU/FYf
9X1b6Sy20sn2BtSPcNTa+CJS8XbuH0W516HYDIODezmy8yv25QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLczBkMxkDG+shWxV0gHNejFRyOQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjMzYmE1MTktMTM5Mi0z
ZmYxLTgyMzEtMGQyYzVjMzI1YjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUPGgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAbdXyD2Y5inlQoAKht3ANDJuodfPWY+lNq4RqXkRYQQ8RghvNLFYlO/
xrZESd22ri+x8CN2zIvAtQ/rUCPtDtHhV42sc1VwsmipNfrtet27q+VgqtLhbFi9
XJ9UiXWnQarSnLUAM35zRLnfr0tYO7bttEupOK2FE5xYhzFM88e+T5RzQ7gCxlzj
BcLsf1rxx4pjFS2mnHKU1qfBc41TR/fPFwdHGK40OTW8Rxo6kuA4Sg0SRYUNo1WD
dlNDyR0m1NLP0CHJZ40fQwdnwrtdmBp8++z4jF20HhXpHqdGwdheW4JbsS4eZsl0
A9MkoBy1zdqIsL/LXe9RjT2DRxvCCns=
-----END CERTIFICATE-----