Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f5fd84e2-3fda-30ab-ab3f-7ec0062b74c9.roa
File:                     f5fd84e2-3fda-30ab-ab3f-7ec0062b74c9.roa (raw, json)
Hash identifier:          YK9EamO/srOQnKlvOuM0FhBU2QvonQyev/9hrCcOA9U=
Subject key identifier:   5F:99:51:16:3C:83:A1:B3:39:69:6C:32:2F:D3:9F:92:81:2C:C3:07
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FAF2498B9DB3830D6B865A1C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f5fd84e2-3fda-30ab-ab3f-7ec0062b74c9.roa
Signing time:             Mon 24 Oct 2022 12:00:00 +0000
ROA not before:           Mon 24 Oct 2022 12:00:00 +0000
ROA not after:            Tue 29 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        40.168.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:af:24:98:b9:db:38:30:d6:b8:65:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 24 12:00:00 2022 GMT
            Not After : Nov 29 05:00:00 2022 GMT
        Subject: CN=ea0b345c-e644-48cf-b67a-59a58e436e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2d:03:3f:07:83:df:16:a1:34:83:3c:86:ea:
                    bc:18:e8:ae:67:a3:5a:9e:7d:78:c7:dd:0f:4e:34:
                    d0:b0:d5:a9:7c:49:38:f2:1b:ad:ca:a7:61:05:5f:
                    b3:62:7a:32:90:41:0f:c5:2c:b2:23:3c:54:14:21:
                    8a:cb:fd:0c:74:d8:ed:8f:60:c9:bf:4d:14:a1:a6:
                    3a:5b:96:c6:d5:86:d1:70:6d:f6:41:12:e8:75:f3:
                    0e:83:49:6c:6b:d4:4b:f0:70:e3:5c:fc:e7:f0:a3:
                    0b:3a:39:36:5e:c6:12:91:b3:ba:0f:73:3e:87:18:
                    84:58:8c:a3:b2:54:bd:6a:71:67:89:8f:0c:d3:aa:
                    c4:d0:f4:e0:1d:d5:39:e9:40:8f:19:25:69:5c:88:
                    31:68:03:fe:c8:a8:09:ed:f3:db:8e:d3:0b:1d:de:
                    8c:39:72:a2:49:d8:29:c1:03:5e:6f:89:60:37:b1:
                    9c:c6:b1:c8:57:52:2b:53:47:f2:ab:94:39:ea:ca:
                    1c:c9:0e:a7:88:e4:19:aa:bd:1a:55:46:9a:59:c4:
                    21:c5:11:1f:3b:66:7a:4e:c0:35:a3:7b:ef:6f:2c:
                    82:35:82:b8:07:79:17:48:90:08:c0:54:46:a1:44:
                    71:dc:30:fa:37:a4:58:91:98:da:64:62:6e:a2:5d:
                    9c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:99:51:16:3C:83:A1:B3:39:69:6C:32:2F:D3:9F:92:81:2C:C3:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f5fd84e2-3fda-30ab-ab3f-7ec0062b74c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.168.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:f3:23:2b:76:10:c0:77:1d:c2:43:d3:27:63:7c:48:7e:fd:
         cf:11:e4:1e:3c:89:98:5c:19:92:c2:4f:16:60:1e:26:81:e6:
         59:4f:65:2e:21:65:1d:af:01:4a:a0:cd:64:70:73:c6:ac:d0:
         22:96:97:c0:9a:3e:90:d7:7d:b5:d5:b8:6f:81:34:7f:63:b3:
         1d:92:6a:66:0b:54:f0:2e:f4:b4:9e:73:8e:23:09:d3:41:b3:
         d5:1b:e7:85:bf:84:77:1a:70:57:ec:80:c1:94:ed:1a:7b:76:
         da:f8:9c:af:6b:43:9b:b2:fd:a0:03:3e:36:69:7a:bd:8c:96:
         a0:b5:cf:a6:fe:74:50:ce:ea:02:5c:f8:42:e0:3b:70:5f:d9:
         ce:68:5e:48:67:6d:23:6d:8d:65:0c:ff:1f:5d:b6:b7:b8:98:
         b4:ff:15:f2:58:c9:9c:75:68:05:8f:f0:08:da:a1:5e:36:a3:
         27:f9:ec:e5:cb:f2:55:bb:ad:d4:10:cb:68:d1:0b:a0:dd:90:
         50:66:a3:bb:cd:d5:18:ab:4e:fa:b6:1b:e4:fc:96:31:7c:79:
         91:31:f6:c1:21:7b:e8:cb:a7:8b:74:f0:74:6a:09:39:25:96:
         45:7a:61:3e:29:94:91:f9:92:ae:73:01:e8:0b:53:ab:dd:8c:
         4f:8c:cf:02
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+vJJi52zgw1rhlocAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAyNDEyMDAwMFoXDTIyMTEyOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZWEwYjM0NWMtZTY0NC00OGNmLWI2N2EtNTlhNThlNDM2ZThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS0DPweD3xahNIM8huq8GOiuZ6Nann14x90P
TjTQsNWpfEk48hutyqdhBV+zYnoykEEPxSyyIzxUFCGKy/0MdNjtj2DJv00UoaY6
W5bG1YbRcG32QRLodfMOg0lsa9RL8HDjXPzn8KMLOjk2XsYSkbO6D3M+hxiEWIyj
slS9anFniY8M06rE0PTgHdU56UCPGSVpXIgxaAP+yKgJ7fPbjtMLHd6MOXKiSdgp
wQNeb4lgN7GcxrHIV1IrU0fyq5Q56socyQ6niOQZqr0aVUaaWcQhxREfO2Z6TsA1
o3vvbyyCNYK4B3kXSJAIwFRGoURx3DD6N6RYkZjaZGJuol2chwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFF+ZURY8g6GzOWlsMi/Tn5KBLMMHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjVmZDg0ZTItM2ZkYS0z
MGFiLWFiM2YtN2VjMDA2MmI3NGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKKgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEADfMjK3YQwHcdwkPTJ2N8SH79zxHkHjyJmFwZksJPFmAeJoHmWU9lLiFl
Ha8BSqDNZHBzxqzQIpaXwJo+kNd9tdW4b4E0f2OzHZJqZgtU8C70tJ5zjiMJ00Gz
1Rvnhb+EdxpwV+yAwZTtGnt22vicr2tDm7L9oAM+Nml6vYyWoLXPpv50UM7qAlz4
QuA7cF/ZzmheSGdtI22NZQz/H122t7iYtP8V8ljJnHVoBY/wCNqhXjajJ/ns5cvy
Vbut1BDLaNELoN2QUGaju83VGKtO+rYb5PyWMXx5kTH2wSF76Muni3TwdGoJOSWW
RXphPimUkfmSrnMB6AtTq92MT4zPAg==
-----END CERTIFICATE-----