Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f70bb686-343c-3b40-a85e-0c7c4a5e6ee9.roa
File:                     f70bb686-343c-3b40-a85e-0c7c4a5e6ee9.roa (raw, json)
Hash identifier:          PDEwgtzMZpqn+QQGM7y5HA8K74kCYJ+Q/SSZg5mmgmo=
Subject key identifier:   26:82:60:F0:4F:A5:20:AB:04:CF:FA:B6:3B:7D:F1:FB:C1:9E:2D:F3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E5A8D65C4169D3A7BE8C1C540
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f70bb686-343c-3b40-a85e-0c7c4a5e6ee9.roa
Signing time:             Fri 24 Jun 2022 20:03:07 +0000
ROA not before:           Fri 24 Jun 2022 20:03:07 +0000
ROA not after:            Sat 30 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.26.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:5a:8d:65:c4:16:9d:3a:7b:e8:c1:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 24 20:03:07 2022 GMT
            Not After : Jul 30 04:00:00 2022 GMT
        Subject: CN=ac663d23-7619-4249-87a5-1e46c054e50c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:27:81:d7:4b:55:03:67:8b:75:a4:9f:a2:ea:
                    7e:51:ab:27:fc:1e:18:06:59:58:c4:26:fa:67:32:
                    83:a7:ed:5b:9e:d4:e9:20:9b:fb:4d:23:18:75:a8:
                    49:fc:34:a8:1b:59:77:37:42:07:fa:69:a9:92:1c:
                    7c:6c:ba:12:8c:32:c8:5d:72:39:24:30:ad:cf:18:
                    c1:5c:53:a5:0b:d8:b5:d1:a6:fd:1c:a6:26:14:6c:
                    7b:f2:c1:8c:eb:47:bd:a9:e5:0a:73:b2:e2:92:6d:
                    8f:59:47:00:ea:3e:92:75:a7:81:72:fa:e0:73:2e:
                    91:f9:69:b1:60:80:2c:a4:57:41:2a:73:35:74:ed:
                    23:0c:8f:4e:fd:af:20:c6:b0:f2:71:b5:db:c7:88:
                    d2:9d:d4:97:f1:a8:be:1f:43:1d:1b:a1:3a:49:7d:
                    9d:0e:62:b9:2e:da:ab:5c:24:1f:3c:56:e7:22:2f:
                    1c:c8:a6:7a:dc:d9:6c:6a:d5:4b:e7:90:ff:73:a9:
                    a5:b2:7c:b8:40:85:52:06:28:df:e5:eb:75:af:18:
                    75:ce:09:a9:00:ac:7a:bb:a9:34:77:56:cb:9b:e2:
                    b4:db:26:0d:93:c9:52:fd:b7:b9:3b:c6:65:52:df:
                    57:dc:aa:95:6c:b0:22:9e:cd:98:d2:49:ea:b6:e9:
                    a7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:82:60:F0:4F:A5:20:AB:04:CF:FA:B6:3B:7D:F1:FB:C1:9E:2D:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f70bb686-343c-3b40-a85e-0c7c4a5e6ee9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.26.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:e9:be:c6:8a:d0:bf:47:72:db:60:36:a3:fb:e5:86:47:ee:
         df:66:08:6e:2e:a1:cf:d3:7a:f1:01:ad:bb:46:8d:7a:a8:69:
         1c:e2:b5:60:8a:e8:65:9f:15:14:f2:da:ed:dd:b7:73:89:ee:
         7a:14:d4:ee:28:8b:de:5a:8e:75:ee:0e:1a:dc:f6:a6:ec:b7:
         35:04:73:4e:66:83:42:a4:e7:17:2c:d4:2d:e8:07:a9:83:cb:
         cb:80:50:f1:bf:3d:8c:5b:28:67:ba:46:82:4d:b4:f7:8f:3b:
         7f:b4:4e:f2:76:23:c8:ed:9f:89:f8:24:c1:41:47:b2:b2:47:
         6d:f7:71:48:08:29:30:f3:43:db:25:2a:f1:dc:b3:4d:bf:88:
         d4:ab:ad:a8:c8:1e:0e:ee:57:64:6a:ec:0a:d6:5f:1d:4b:51:
         7c:6c:7f:d7:c5:f1:98:fe:51:44:47:05:0e:f7:24:4a:e9:96:
         d9:c0:8f:bf:4b:24:c2:7f:08:78:91:21:1c:a1:fd:f8:30:25:
         cf:bf:c1:89:91:c5:ff:e2:0e:95:e2:22:d6:6d:9e:3e:ec:e4:
         1c:d2:fb:55:e7:0b:40:61:f8:2a:d0:86:ef:3b:76:68:99:15:
         34:b2:f0:5a:65:fa:8c:d3:04:14:34:92:87:f2:85:52:8f:61:
         76:fe:4f:06
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5ajWXEFp06e+jBxUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYyNDIwMDMwN1oXDTIyMDczMDA0MDAwMFowLzEtMCsGA1UEAxMk
YWM2NjNkMjMtNzYxOS00MjQ5LTg3YTUtMWU0NmMwNTRlNTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCeB10tVA2eLdaSfoup+Uasn/B4YBllYxCb6
ZzKDp+1bntTpIJv7TSMYdahJ/DSoG1l3N0IH+mmpkhx8bLoSjDLIXXI5JDCtzxjB
XFOlC9i10ab9HKYmFGx78sGM60e9qeUKc7Likm2PWUcA6j6SdaeBcvrgcy6R+Wmx
YIAspFdBKnM1dO0jDI9O/a8gxrDycbXbx4jSndSX8ai+H0MdG6E6SX2dDmK5Ltqr
XCQfPFbnIi8cyKZ63NlsatVL55D/c6mlsny4QIVSBijf5et1rxh1zgmpAKx6u6k0
d1bLm+K02yYNk8lS/be5O8ZlUt9X3KqVbLAins2Y0knqtumnUQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCaCYPBPpSCrBM/6tjt98fvBni3zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjcwYmI2ODYtMzQzYy0z
YjQwLWE4NWUtMGM3YzRhNWU2ZWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEBowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAXem+xorQv0dy22A2o/vlhkfu32YIbi6hz9N68QGtu0aNeqhpHOK1YIro
ZZ8VFPLa7d23c4nuehTU7iiL3lqOde4OGtz2puy3NQRzTmaDQqTnFyzULegHqYPL
y4BQ8b89jFsoZ7pGgk209487f7RO8nYjyO2fifgkwUFHsrJHbfdxSAgpMPND2yUq
8dyzTb+I1KutqMgeDu5XZGrsCtZfHUtRfGx/18XxmP5RREcFDvckSumW2cCPv0sk
wn8IeJEhHKH9+DAlz7/BiZHF/+IOleIi1m2ePuzkHNL7VecLQGH4KtCG7zt2aJkV
NLLwWmX6jNMEFDSSh/KFUo9hdv5PBg==
-----END CERTIFICATE-----