Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/53514b6b-08f5-3d71-9d5e-d53db638328e.roa
File:                     53514b6b-08f5-3d71-9d5e-d53db638328e.roa (raw, json)
Hash identifier:          HcgzKI/M4daIeff1lzadmiA9q+OjF2cW/lCmoEJt8LI=
Subject key identifier:   60:A7:CB:D4:07:73:8B:DC:5F:CD:D2:C0:1A:27:4F:C2:9E:72:47:28
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F57683F58CE24A103E826CD00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/53514b6b-08f5-3d71-9d5e-d53db638328e.roa
Signing time:             Thu 22 Sep 2022 12:00:00 +0000
ROA not before:           Thu 22 Sep 2022 12:00:00 +0000
ROA not after:            Fri 28 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        152.25.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:57:68:3f:58:ce:24:a1:03:e8:26:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 22 12:00:00 2022 GMT
            Not After : Oct 28 04:00:00 2022 GMT
        Subject: CN=fc570111-520d-41c2-93cb-d651ec0ce704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8b:c6:11:60:40:5b:5a:eb:2a:9c:1d:43:ea:
                    c4:36:a2:0e:89:86:68:39:62:ea:fb:01:43:4f:a4:
                    06:c4:43:2d:6a:e9:b6:43:fd:67:fe:3b:34:5a:a7:
                    1b:51:e5:9b:d6:32:b5:d9:09:30:47:85:0f:dd:0f:
                    25:ed:6c:a5:71:0b:34:56:8d:8b:1b:00:95:5d:73:
                    a5:d0:11:ec:50:6b:a3:1c:e6:d6:ca:52:9f:ee:0f:
                    27:f9:6f:31:98:d6:c9:dc:1b:e2:17:00:40:54:d6:
                    00:93:23:af:ea:69:63:76:97:f7:c7:de:f6:fd:0c:
                    13:6f:4e:a9:94:10:f8:f9:56:d2:0b:61:9b:7b:a8:
                    78:e9:52:03:0b:a2:d4:37:f1:9c:b9:16:ec:54:eb:
                    1e:9a:f4:e2:d5:e3:b9:aa:18:1a:2d:fa:d8:7a:c9:
                    de:d3:4f:89:66:9c:d3:ea:68:e0:1b:8e:a1:5c:7a:
                    f7:ae:29:f2:c3:3b:92:08:4f:fb:7b:ef:af:d3:da:
                    36:8e:19:be:6a:46:13:1e:38:ca:9f:24:2c:31:09:
                    c5:87:ae:bf:1d:19:5a:f1:db:15:39:54:bd:ac:10:
                    81:80:14:7c:74:6b:fe:da:1d:d4:cc:ec:bf:db:e5:
                    d4:3a:94:e6:d3:bb:b3:e2:35:b9:3b:4e:b0:3d:2d:
                    7b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A7:CB:D4:07:73:8B:DC:5F:CD:D2:C0:1A:27:4F:C2:9E:72:47:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/53514b6b-08f5-3d71-9d5e-d53db638328e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.25.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:fb:5d:16:db:8f:48:13:22:f3:e3:8d:c7:70:de:90:21:4b:
         c2:a1:f8:54:2b:74:cf:26:e1:22:96:ef:88:73:8f:d6:81:d9:
         b3:7f:1d:60:c6:e2:ab:1d:52:4f:65:d1:87:29:60:65:a1:3c:
         f4:a0:0e:f2:92:bf:65:6e:b6:69:32:37:77:e9:8a:d3:37:d8:
         87:2d:0c:cf:e6:71:00:3d:e6:ae:e1:8b:2f:b7:c5:de:3f:69:
         c6:86:68:5b:23:a9:3e:08:4b:6b:bb:66:87:81:30:a7:fe:8d:
         e1:52:d4:d5:23:d4:fe:f6:26:39:e5:16:47:f2:97:41:29:26:
         3c:bb:4a:73:d0:df:cc:bb:2c:13:19:6d:fd:94:42:d5:17:97:
         79:69:10:a6:14:87:a6:65:18:e3:bb:69:cb:12:b4:87:1a:71:
         9e:fc:a1:21:30:ce:0f:f7:74:2f:40:db:bf:15:a8:2c:33:dc:
         68:29:3b:2d:e5:c3:47:25:a9:cb:d0:5d:2f:a3:17:a8:2c:6c:
         3e:37:7e:13:6d:f2:48:a8:01:7d:7c:0b:c0:e0:db:88:5e:c6:
         95:23:2d:1f:07:06:60:9c:0c:61:db:7a:d4:cb:f4:15:e8:c9:
         44:bd:6c:bf:d3:c9:d2:3e:77:22:cf:45:e6:0f:ae:74:97:2a:
         e3:b5:b6:ed
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9XaD9YziShA+gmzQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkyMjEyMDAwMFoXDTIyMTAyODA0MDAwMFowLzEtMCsGA1UEAxMk
ZmM1NzAxMTEtNTIwZC00MWMyLTkzY2ItZDY1MWVjMGNlNzA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkovGEWBAW1rrKpwdQ+rENqIOiYZoOWLq+wFD
T6QGxEMtaum2Q/1n/js0WqcbUeWb1jK12QkwR4UP3Q8l7WylcQs0Vo2LGwCVXXOl
0BHsUGujHObWylKf7g8n+W8xmNbJ3BviFwBAVNYAkyOv6mljdpf3x972/QwTb06p
lBD4+VbSC2Gbe6h46VIDC6LUN/GcuRbsVOsemvTi1eO5qhgaLfrYesne00+JZpzT
6mjgG46hXHr3rinywzuSCE/7e++v09o2jhm+akYTHjjKnyQsMQnFh66/HRla8dsV
OVS9rBCBgBR8dGv+2h3UzOy/2+XUOpTm07uz4jW5O06wPS17oQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGCny9QHc4vcX83SwBonT8KeckcoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNTM1MTRiNmItMDhmNS0z
ZDcxLTlkNWUtZDUzZGI2MzgzMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmBkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMPtdFtuPSBMi8+ONx3DekCFLwqH4VCt0zybhIpbviHOP1oHZs38dYMbi
qx1ST2XRhylgZaE89KAO8pK/ZW62aTI3d+mK0zfYhy0Mz+ZxAD3mruGLL7fF3j9p
xoZoWyOpPghLa7tmh4Ewp/6N4VLU1SPU/vYmOeUWR/KXQSkmPLtKc9DfzLssExlt
/ZRC1ReXeWkQphSHpmUY47tpyxK0hxpxnvyhITDOD/d0L0DbvxWoLDPcaCk7LeXD
RyWpy9BdL6MXqCxsPjd+E23ySKgBfXwLwODbiF7GlSMtHwcGYJwMYdt61Mv0FejJ
RL1sv9PJ0j53Is9F5g+udJcq47W27Q==
-----END CERTIFICATE-----