Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3c1eaee2-2c66-36bc-8432-78e22fd6d1be.roa
File:                     3c1eaee2-2c66-36bc-8432-78e22fd6d1be.roa (raw, json)
Hash identifier:          pHMLtfIHN12LPE6dsD5FJAEQgCsSTyUxcxq9GKPYVpQ=
Subject key identifier:   EA:DA:AF:8D:27:0A:A5:DD:B2:BA:AA:C1:C2:14:A5:F1:0C:05:C2:34
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E457F42DEAB7F367253945480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3c1eaee2-2c66-36bc-8432-78e22fd6d1be.roa
Signing time:             Thu 16 Jun 2022 12:00:00 +0000
ROA not before:           Thu 16 Jun 2022 12:00:00 +0000
ROA not after:            Fri 22 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        144.220.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:45:7f:42:de:ab:7f:36:72:53:94:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun 16 12:00:00 2022 GMT
            Not After : Jul 22 04:00:00 2022 GMT
        Subject: CN=d663b52f-36a7-4430-a977-557335762739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:12:b9:c7:82:28:55:d1:08:b7:f2:85:44:5f:
                    37:33:1f:02:55:cc:21:8d:3d:1c:f4:6a:37:99:71:
                    c2:55:f8:e6:db:7e:5d:63:78:f5:84:9a:cd:1e:22:
                    0d:68:2b:00:9a:8d:d0:b6:68:e1:6b:11:58:dc:d9:
                    de:a1:17:2c:5e:5b:2f:44:2e:80:e3:ae:de:8c:a5:
                    0e:c0:d0:53:00:c8:79:6d:76:d5:b0:4b:a4:02:5c:
                    46:ee:7b:28:29:77:93:39:72:fe:b7:6b:80:71:50:
                    e0:d8:a4:82:8a:94:5b:f3:99:35:6c:49:16:6b:00:
                    64:91:6e:ca:e4:6c:7a:31:96:d0:3b:7d:ad:f4:ea:
                    8e:3f:d2:65:a5:6f:6d:ab:73:2c:24:dd:4b:bf:68:
                    6d:bf:ce:ed:ac:a9:8d:81:33:aa:55:96:33:f6:cb:
                    96:1a:15:17:02:7f:08:6a:71:94:1b:44:4b:c1:f2:
                    3f:65:c4:84:1b:f7:ff:5c:a3:13:53:ab:5c:b5:b4:
                    eb:4c:31:6b:d1:ec:08:a9:24:9e:f3:b0:4b:5a:ff:
                    a2:ff:7e:bf:76:e7:f7:27:57:4f:f4:3b:b2:74:44:
                    2f:b0:f1:e8:ee:64:12:d4:8d:1b:09:e0:06:51:c1:
                    f7:36:32:88:56:c8:ae:da:10:73:f8:21:1b:5e:d0:
                    12:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DA:AF:8D:27:0A:A5:DD:B2:BA:AA:C1:C2:14:A5:F1:0C:05:C2:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3c1eaee2-2c66-36bc-8432-78e22fd6d1be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.220.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:68:26:90:38:d9:79:33:ce:de:53:69:c4:d8:c1:0a:bc:29:
         71:2e:4d:6e:49:6d:55:2e:72:88:1e:4a:9e:21:1e:21:33:8b:
         a7:32:cc:d2:a9:66:0d:91:6a:4b:7b:b9:df:ca:ae:f3:62:61:
         d0:f9:1c:6b:fa:73:0a:79:db:73:eb:5d:ae:38:02:63:25:fb:
         ae:43:68:df:f6:dd:d3:b4:ce:50:a4:99:b4:1b:05:54:d4:aa:
         23:7e:ba:a9:7f:50:63:0b:71:05:f1:dc:84:74:25:45:58:fd:
         93:c2:77:41:12:49:b9:7a:84:e4:36:fd:f2:c5:c6:f5:78:83:
         81:e5:9c:19:97:7e:5f:3d:5a:1a:db:40:8a:52:eb:28:10:50:
         2f:6a:ad:88:4a:cb:f9:5b:11:49:db:c7:c1:b0:b1:70:22:4a:
         e6:c2:4c:2c:76:2d:9c:eb:de:fc:1f:89:07:7f:db:7f:db:b1:
         02:5e:c7:dd:3b:d7:4b:bd:f4:82:ca:a0:49:5c:d9:3e:8b:82:
         22:91:6d:c3:8d:4d:8b:fc:41:4f:05:20:00:51:2c:62:07:7e:
         2d:84:0d:5e:d1:13:85:f6:58:b9:c1:e4:1f:5c:1a:9f:2e:b7:
         5f:91:53:bc:30:ac:23:59:eb:a5:ad:25:57:c7:a8:19:71:4c:
         a4:18:9e:8d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5Ff0Leq382clOUVIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYxNjEyMDAwMFoXDTIyMDcyMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZDY2M2I1MmYtMzZhNy00NDMwLWE5NzctNTU3MzM1NzYyNzM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxK5x4IoVdEIt/KFRF83Mx8CVcwhjT0c9Go3
mXHCVfjm235dY3j1hJrNHiINaCsAmo3QtmjhaxFY3NneoRcsXlsvRC6A467ejKUO
wNBTAMh5bXbVsEukAlxG7nsoKXeTOXL+t2uAcVDg2KSCipRb85k1bEkWawBkkW7K
5Gx6MZbQO32t9OqOP9JlpW9tq3MsJN1Lv2htv87trKmNgTOqVZYz9suWGhUXAn8I
anGUG0RLwfI/ZcSEG/f/XKMTU6tctbTrTDFr0ewIqSSe87BLWv+i/36/duf3J1dP
9DuydEQvsPHo7mQS1I0bCeAGUcH3NjKIVsiu2hBz+CEbXtASTwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOrar40nCqXdsrqqwcIUpfEMBcI0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvM2MxZWFlZTItMmM2Ni0z
NmJjLTg0MzItNzhlMjJmZDZkMWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkNwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAoWgmkDjZeTPO3lNpxNjBCrwpcS5NbkltVS5yiB5KniEeITOLpzLM0qlm
DZFqS3u538qu82Jh0Pkca/pzCnnbc+tdrjgCYyX7rkNo3/bd07TOUKSZtBsFVNSq
I366qX9QYwtxBfHchHQlRVj9k8J3QRJJuXqE5Db98sXG9XiDgeWcGZd+Xz1aGttA
ilLrKBBQL2qtiErL+VsRSdvHwbCxcCJK5sJMLHYtnOve/B+JB3/bf9uxAl7H3TvX
S730gsqgSVzZPouCIpFtw41Ni/xBTwUgAFEsYgd+LYQNXtEThfZYucHkH1wany63
X5FTvDCsI1nrpa0lV8eoGXFMpBiejQ==
-----END CERTIFICATE-----