Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/23990077-ba44-377c-954d-0d6caf7632a2.roa
File:                     23990077-ba44-377c-954d-0d6caf7632a2.roa (raw, json)
Hash identifier:          8CvCbLW7jPpLGLTupRg2OSjP8yVC9Ukysqur8uuuGNo=
Subject key identifier:   E0:02:36:4D:97:E1:75:E0:9A:8D:F4:17:E5:DC:A0:E0:18:5A:9D:AF
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D08585AE33695B6472B621C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/23990077-ba44-377c-954d-0d6caf7632a2.roa
Signing time:             Thu 24 Feb 2022 05:00:00 +0000
ROA not before:           Thu 24 Feb 2022 05:00:00 +0000
ROA not after:            Thu 31 Mar 2022 04:00:00 +0000
asID:                     7224
IP address blocks:        15.248.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:08:58:5a:e3:36:95:b6:47:2b:62:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Feb 24 05:00:00 2022 GMT
            Not After : Mar 31 04:00:00 2022 GMT
        Subject: CN=a590aa9f-5502-4087-a382-6d29d6223fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:67:04:6e:34:30:10:31:01:b1:36:95:a6:11:
                    20:6e:1b:5f:2d:02:11:c3:26:9a:e9:f7:16:d9:58:
                    88:43:8c:3c:5e:e5:95:ac:21:a5:2f:4b:9b:27:cd:
                    9d:df:2c:ac:dd:11:4d:04:33:26:d9:41:55:ba:c3:
                    81:73:6d:6c:d8:cd:71:6d:10:ab:81:7c:26:2b:e1:
                    df:ca:d4:ac:f2:99:fd:64:10:c3:e6:41:62:66:e2:
                    d1:ff:ee:36:9c:b5:0c:95:74:10:28:9f:af:e4:fc:
                    f3:e6:16:2f:b6:96:20:da:49:95:8b:8f:e1:14:d5:
                    65:cb:28:8a:17:7c:20:a9:67:0f:2b:47:1e:03:0e:
                    b7:35:fe:a8:43:8e:cb:0f:12:73:37:87:2c:e5:f3:
                    f4:99:21:46:b3:bc:33:2e:6c:aa:d9:7b:2f:e1:4c:
                    63:d1:1a:a8:93:c2:de:dc:a1:6a:bc:51:08:8a:9b:
                    90:b8:45:85:91:24:8f:8e:d9:ed:c5:8b:e7:03:92:
                    5e:24:40:9f:35:4b:9b:04:66:34:4f:f8:cf:fd:e8:
                    98:0e:ca:d8:e5:d0:ae:dd:b9:41:1d:d9:90:2b:ed:
                    06:ae:ac:c7:32:f0:10:1e:79:af:8a:af:7c:ae:80:
                    e6:3b:9b:06:82:51:a5:7a:40:75:b8:59:69:d9:ff:
                    a2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:02:36:4D:97:E1:75:E0:9A:8D:F4:17:E5:DC:A0:E0:18:5A:9D:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/23990077-ba44-377c-954d-0d6caf7632a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.248.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:c4:19:4c:c6:32:2f:9c:6a:5b:77:11:22:da:21:98:54:e4:
         84:d4:d9:b9:2d:5e:0d:41:0e:6a:27:bc:0b:69:74:69:7f:f1:
         bf:cc:4d:3a:e4:96:30:d8:39:d0:e1:dd:aa:15:1b:6c:df:d5:
         11:9f:e3:48:44:7a:3b:5c:3c:33:a4:9b:7e:3a:52:1c:16:af:
         fe:76:75:10:20:ef:6d:a4:bf:93:e5:f3:05:32:37:27:64:08:
         bd:0c:a0:c3:8b:d4:4b:d8:fc:fc:25:e1:c3:9b:1e:45:15:1f:
         d6:53:05:49:e8:30:85:a8:6d:10:f0:4a:34:0f:20:4f:ed:7e:
         2b:4d:04:47:3e:df:a1:82:88:19:1e:0c:1f:8a:27:cb:f5:04:
         7e:76:ca:5c:e0:9e:5c:eb:a5:8a:f6:dd:22:cb:92:91:e8:9e:
         41:c9:79:b4:84:f0:ff:34:0b:ce:cf:d9:81:48:ec:dc:42:67:
         30:bb:ee:ad:84:df:80:7a:3d:ee:72:4d:9a:26:ae:f3:24:e0:
         f2:1c:f2:71:b7:06:96:50:95:1c:ba:13:26:e0:49:aa:be:8d:
         1e:86:3e:21:65:35:93:a0:83:e0:fe:52:34:c4:7d:22:72:b7:
         eb:a5:4a:05:30:55:31:cb:e9:87:6f:b0:2c:6f:13:9a:04:cf:
         8e:e5:b0:d9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0IWFrjNpW2RytiHIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIyNDA1MDAwMFoXDTIyMDMzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YTU5MGFhOWYtNTUwMi00MDg3LWEzODItNmQyOWQ2MjIzZmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWcEbjQwEDEBsTaVphEgbhtfLQIRwyaa6fcW
2ViIQ4w8XuWVrCGlL0ubJ82d3yys3RFNBDMm2UFVusOBc21s2M1xbRCrgXwmK+Hf
ytSs8pn9ZBDD5kFiZuLR/+42nLUMlXQQKJ+v5Pzz5hYvtpYg2kmVi4/hFNVlyyiK
F3wgqWcPK0ceAw63Nf6oQ47LDxJzN4cs5fP0mSFGs7wzLmyq2Xsv4Uxj0Rqok8Le
3KFqvFEIipuQuEWFkSSPjtntxYvnA5JeJECfNUubBGY0T/jP/eiYDsrY5dCu3blB
HdmQK+0GrqzHMvAQHnmviq98roDmO5sGglGlekB1uFlp2f+i6QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOACNk2X4XXgmo30F+XcoOAYWp2vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMjM5OTAwNzctYmE0NC0z
NzdjLTk1NGQtMGQ2Y2FmNzYzMmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD/gwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAA8QZTMYyL5xqW3cRItohmFTkhNTZuS1eDUEOaie8C2l0aX/xv8xNOuSW
MNg50OHdqhUbbN/VEZ/jSER6O1w8M6SbfjpSHBav/nZ1ECDvbaS/k+XzBTI3J2QI
vQygw4vUS9j8/CXhw5seRRUf1lMFSegwhahtEPBKNA8gT+1+K00ERz7foYKIGR4M
H4ony/UEfnbKXOCeXOulivbdIsuSkeieQcl5tITw/zQLzs/ZgUjs3EJnMLvurYTf
gHo97nJNmiau8yTg8hzycbcGllCVHLoTJuBJqr6NHoY+IWU1k6CD4P5SNMR9InK3
66VKBTBVMcvph2+wLG8TmgTPjuWw2Q==
-----END CERTIFICATE-----