Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5a12fba2-8f68-35e0-89b9-a4bd464e35d4.roa
File:                     5a12fba2-8f68-35e0-89b9-a4bd464e35d4.roa (raw, json)
Hash identifier:          8CX25Q7ri1v4CiZAMI12kYZP89LDYl4UwWlhbOOWLUU=
Subject key identifier:   CB:31:40:3E:D5:4C:C4:78:E3:1E:2F:59:6A:22:3B:ED:96:D8:3F:52
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CE55CCA68F6E8F14C3AA8EF00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5a12fba2-8f68-35e0-89b9-a4bd464e35d4.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        150.222.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e5:5c:ca:68:f6:e8:f1:4c:3a:a8:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=4ab85897-d721-491e-8898-449ac8a2a201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:0a:6c:89:9c:a0:13:d5:57:d7:5a:86:82:
                    3f:6d:a9:ca:3e:b0:1d:25:c6:39:97:64:c9:7e:16:
                    8f:f7:b2:f1:ce:7d:11:37:24:00:3a:97:08:da:1b:
                    f4:8b:68:2b:a3:1b:b8:98:30:37:aa:53:16:cd:fb:
                    1a:5f:0a:02:ec:c1:3a:13:89:2c:52:54:1b:ad:ed:
                    78:16:57:ff:a3:4b:1a:cc:fb:8c:5b:fd:52:91:4f:
                    19:76:fd:6a:29:83:e3:89:2b:c4:33:3e:a8:4f:28:
                    6a:37:c9:8b:4f:c2:f0:41:6c:67:8d:d2:83:d1:a7:
                    e7:cb:33:67:2b:45:68:e5:f9:6d:ab:4f:51:d7:57:
                    da:af:cc:a9:cb:f5:d6:30:98:8a:c9:8f:ca:6c:14:
                    99:47:df:c0:79:79:36:df:09:3e:36:aa:e5:f3:9c:
                    98:e5:66:5a:40:bd:08:98:fa:89:a9:ad:f6:e0:4c:
                    fd:a0:ec:f0:28:c1:46:76:9e:4a:57:3f:d3:06:c7:
                    e9:69:6d:5a:a9:d7:c2:43:04:65:57:b9:d2:27:e6:
                    48:8a:36:2e:5d:13:10:a3:74:9e:18:68:e2:38:2f:
                    b1:d8:cb:6a:c1:a9:47:96:7f:ac:6d:9b:42:c0:2d:
                    0d:5d:54:af:b3:9a:bd:34:73:ab:be:49:0e:2b:b7:
                    16:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:31:40:3E:D5:4C:C4:78:E3:1E:2F:59:6A:22:3B:ED:96:D8:3F:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5a12fba2-8f68-35e0-89b9-a4bd464e35d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.222.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:17:08:9a:88:29:df:f1:bf:91:32:1a:00:63:21:7e:4c:ca:
         17:cd:32:09:7d:01:69:97:d4:d7:d6:79:bd:22:5d:12:61:ea:
         bc:32:a5:c4:60:a9:f6:cf:2a:98:7d:83:a4:41:cd:5d:56:16:
         50:8e:ff:d6:2b:b7:d9:e4:52:a5:77:35:d7:18:76:d0:c0:cc:
         80:69:7f:98:f5:e4:d4:e3:61:6b:b5:41:e7:8c:95:24:43:66:
         00:91:94:3a:b9:9b:b5:d1:5f:00:30:d4:cd:f1:91:ce:52:06:
         61:3a:50:2b:f3:66:fd:ed:e9:39:e1:ca:46:84:6a:39:18:e4:
         f1:84:84:84:5b:ed:99:2a:e9:dd:7d:bd:f6:2d:fe:03:4a:ef:
         fd:e3:b1:4b:7f:95:21:dc:4a:1f:e1:72:52:4a:82:e0:bd:7d:
         61:89:e9:c7:39:27:bb:69:bd:d4:d2:49:44:ff:c9:dd:5c:19:
         1e:10:0e:07:54:fa:9a:69:de:34:da:56:08:8a:1e:04:c0:0c:
         d1:ec:7c:c8:e3:7c:09:de:0d:e6:79:38:53:4e:85:56:9e:61:
         bf:05:57:7f:26:e5:4c:10:ca:9b:dd:d5:7d:2e:10:f7:8c:a1:
         4a:1e:a1:2d:46:1b:d3:15:66:ea:19:e9:eb:39:33:28:41:ab:
         7c:f8:71:41
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzlXMpo9ujxTDqo7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIxMTA1MDAwMFoXDTIyMDMxODA0MDAwMFowLzEtMCsGA1UEAxMk
NGFiODU4OTctZDcyMS00OTFlLTg4OTgtNDQ5YWM4YTJhMjAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLAKbImcoBPVV9dahoI/banKPrAdJcY5l2TJ
fhaP97Lxzn0RNyQAOpcI2hv0i2groxu4mDA3qlMWzfsaXwoC7ME6E4ksUlQbre14
Flf/o0sazPuMW/1SkU8Zdv1qKYPjiSvEMz6oTyhqN8mLT8LwQWxnjdKD0afnyzNn
K0Vo5fltq09R11far8ypy/XWMJiKyY/KbBSZR9/AeXk23wk+Nqrl85yY5WZaQL0I
mPqJqa324Ez9oOzwKMFGdp5KVz/TBsfpaW1aqdfCQwRlV7nSJ+ZIijYuXRMQo3Se
GGjiOC+x2MtqwalHln+sbZtCwC0NXVSvs5q9NHOrvkkOK7cWVwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMsxQD7VTMR44x4vWWoiO+2W2D9SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNWExMmZiYTItOGY2OC0z
NWUwLTg5YjktYTRiZDQ2NGUzNWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlt4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACBcImogp3/G/kTIaAGMhfkzKF80yCX0BaZfU19Z5vSJdEmHqvDKlxGCp
9s8qmH2DpEHNXVYWUI7/1iu32eRSpXc11xh20MDMgGl/mPXk1ONha7VB54yVJENm
AJGUOrmbtdFfADDUzfGRzlIGYTpQK/Nm/e3pOeHKRoRqORjk8YSEhFvtmSrp3X29
9i3+A0rv/eOxS3+VIdxKH+FyUkqC4L19YYnpxzknu2m91NJJRP/J3VwZHhAOB1T6
mmneNNpWCIoeBMAM0ex8yON8Cd4N5nk4U06FVp5hvwVXfyblTBDKm93VfS4Q94yh
Sh6hLUYb0xVm6hnp6zkzKEGrfPhxQQ==
-----END CERTIFICATE-----