Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f39f6041-2d09-3251-ab6e-1f5130b410b9.roa
File:                     f39f6041-2d09-3251-ab6e-1f5130b410b9.roa (raw, json)
Hash identifier:          2wNS7BFQ70tkr0PiPYfM9JWwURTYGIoK3TtWO2iK5Lg=
Subject key identifier:   E8:E2:38:36:AA:BC:47:F9:A0:F1:0D:A6:43:89:08:07:22:E2:5B:F9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA8B00BC48EC5C538EBAC4940
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f39f6041-2d09-3251-ab6e-1f5130b410b9.roa
Signing time:             Fri 21 Oct 2022 16:30:08 +0000
ROA not before:           Fri 21 Oct 2022 16:30:08 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        162.87.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a8:b0:0b:c4:8e:c5:c5:38:eb:ac:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 21 16:30:08 2022 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=77b3e383-67c5-41ab-abb5-273d25b916d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:35:57:4b:0f:38:b9:d6:6c:5c:49:eb:94:d3:
                    a1:55:24:80:5c:60:40:2b:9d:35:6a:60:1b:31:eb:
                    7e:df:de:3b:4c:52:a0:18:84:4e:f0:0e:cc:5c:9e:
                    0c:5c:59:6f:30:f6:ec:1d:f1:c7:e5:15:73:67:2a:
                    3b:b1:80:ba:0e:9d:39:2f:ae:5b:b4:53:87:a9:4a:
                    5f:5b:27:40:e5:42:86:94:f6:95:78:0e:48:63:c7:
                    ab:d1:4e:40:a0:01:49:ab:5a:36:38:35:af:15:c4:
                    f5:25:27:f6:25:54:b1:39:90:83:e6:36:24:6c:6d:
                    6a:ec:e1:42:d9:50:ff:ed:f8:8c:0a:df:49:64:6e:
                    eb:89:2c:f4:29:5d:07:57:71:98:1b:07:bb:e5:ca:
                    c9:0b:ba:d7:c1:cd:c4:4b:a3:83:3d:59:4a:b4:6e:
                    11:6e:c8:c3:81:32:15:c5:4d:65:5b:de:c7:62:38:
                    49:02:67:fe:25:b0:b1:59:88:77:9d:d8:6f:94:28:
                    f4:5a:92:59:ac:27:43:1f:05:69:d3:ce:6a:e3:ad:
                    5f:00:81:47:8c:12:5a:d5:5d:b6:8e:05:4f:fd:50:
                    57:6f:70:0f:08:ff:78:36:d6:1a:83:db:4d:0a:3d:
                    ae:1c:2a:ca:34:d2:7f:af:9b:16:33:f4:8b:fe:9d:
                    5d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E2:38:36:AA:BC:47:F9:A0:F1:0D:A6:43:89:08:07:22:E2:5B:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f39f6041-2d09-3251-ab6e-1f5130b410b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.87.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:6c:19:4e:e2:2b:64:48:71:95:4c:8f:44:f5:3c:96:5b:55:
         5f:e2:c6:ed:33:95:bc:37:45:0d:be:04:ca:e4:ee:71:91:a0:
         25:f4:c0:3d:b4:d6:58:5b:22:88:a0:ae:cf:c7:e7:f3:0d:1d:
         d6:ae:31:79:08:50:d7:79:b8:40:6a:96:1b:e4:5f:de:5e:07:
         4a:69:bb:8a:19:43:67:ca:d1:fd:bb:ec:0d:be:c7:20:ce:92:
         c7:a4:e2:fa:19:2f:18:e5:a8:17:52:06:79:b6:e9:a4:80:2a:
         91:08:cd:51:41:54:0c:01:52:72:90:16:93:46:18:87:00:cb:
         a5:81:fe:ce:9b:61:0d:a1:b5:b3:06:d7:51:55:cf:3f:0a:e4:
         00:82:94:fb:12:12:75:30:59:dc:c3:97:2f:db:c6:b3:71:eb:
         a0:58:0f:71:e8:f7:6f:d7:ee:a3:a7:82:1b:42:42:cb:7a:1f:
         86:dd:ea:ff:60:0b:2f:45:af:e5:57:1e:5d:c6:91:dc:aa:62:
         df:42:fc:d9:72:33:1b:e4:98:52:ed:57:34:1f:a9:48:2e:a9:
         68:bf:4c:b0:5e:20:2a:d9:d2:ca:96:b1:78:e2:1b:76:74:67:
         0f:af:ef:32:e4:d7:8e:79:5a:a1:fb:5b:e4:94:08:41:6d:42:
         72:ff:82:37
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+osAvEjsXFOOusSUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAyMTE2MzAwOFoXDTIyMTEyNjA1MDAwMFowLzEtMCsGA1UEAxMk
NzdiM2UzODMtNjdjNS00MWFiLWFiYjUtMjczZDI1YjkxNmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzVXSw84udZsXEnrlNOhVSSAXGBAK501amAb
Met+3947TFKgGIRO8A7MXJ4MXFlvMPbsHfHH5RVzZyo7sYC6Dp05L65btFOHqUpf
WydA5UKGlPaVeA5IY8er0U5AoAFJq1o2ODWvFcT1JSf2JVSxOZCD5jYkbG1q7OFC
2VD/7fiMCt9JZG7riSz0KV0HV3GYGwe75crJC7rXwc3ES6ODPVlKtG4RbsjDgTIV
xU1lW97HYjhJAmf+JbCxWYh3ndhvlCj0WpJZrCdDHwVp085q461fAIFHjBJa1V22
jgVP/VBXb3APCP94NtYag9tNCj2uHCrKNNJ/r5sWM/SL/p1d/QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOjiODaqvEf5oPENpkOJCAci4lv5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjM5ZjYwNDEtMmQwOS0z
MjUxLWFiNmUtMWY1MTMwYjQxMGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAolcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAT2wZTuIrZEhxlUyPRPU8lltVX+LG7TOVvDdFDb4EyuTucZGgJfTAPbTW
WFsiiKCuz8fn8w0d1q4xeQhQ13m4QGqWG+Rf3l4HSmm7ihlDZ8rR/bvsDb7HIM6S
x6Ti+hkvGOWoF1IGebbppIAqkQjNUUFUDAFScpAWk0YYhwDLpYH+zpthDaG1swbX
UVXPPwrkAIKU+xISdTBZ3MOXL9vGs3HroFgPcej3b9fuo6eCG0JCy3ofht3q/2AL
L0Wv5VceXcaR3Kpi30L82XIzG+SYUu1XNB+pSC6paL9MsF4gKtnSypaxeOIbdnRn
D6/vMuTXjnlaoftb5JQIQW1Ccv+CNw==
-----END CERTIFICATE-----