Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/695c4f5d-b630-3786-a2e4-86b8847f2e3d.roa
File:                     695c4f5d-b630-3786-a2e4-86b8847f2e3d.roa (raw, json)
Hash identifier:          5NvupGMIUf9hd9njt1AWVBhKwh7MF++Vv8dsWD6CzWc=
Subject key identifier:   04:B6:20:EE:DB:B8:B9:57:79:8C:87:4F:D5:A9:97:A0:FD:C7:1F:CC
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840474B20B4A83AA74D965B2D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/695c4f5d-b630-3786-a2e4-86b8847f2e3d.roa
Signing time:             Sat 17 Dec 2022 12:00:00 +0000
ROA not before:           Sat 17 Dec 2022 12:00:00 +0000
ROA not after:            Sun 22 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        47.255.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:47:4b:20:b4:a8:3a:a7:4d:96:5b:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 17 12:00:00 2022 GMT
            Not After : Jan 22 05:00:00 2023 GMT
        Subject: CN=db52ec5e-19f4-4450-8bff-3ad6732cbf3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0f:b2:b2:c8:b2:aa:de:e5:98:31:b8:cd:e0:
                    fe:b8:01:e3:4a:32:37:c7:0a:69:cb:d3:3b:ab:69:
                    10:3b:94:c7:ce:9f:c1:79:85:27:9e:a6:03:45:79:
                    e0:c8:f1:f5:f7:bb:f6:4b:aa:29:d9:98:68:51:2d:
                    2c:d5:68:de:4a:72:25:d6:0f:09:a4:96:7c:7a:22:
                    55:38:f9:bf:67:a3:c6:25:8b:5b:46:11:07:94:e9:
                    0c:bd:de:05:81:98:80:f9:ed:8f:b6:65:6c:09:ff:
                    2a:89:3b:a2:96:97:bd:86:07:01:5d:41:79:9a:6f:
                    9b:37:dd:5e:d2:ae:e3:fa:3d:78:ba:e6:c7:44:2f:
                    bf:74:c5:8e:ac:fb:65:72:28:b7:4f:b6:f9:27:de:
                    86:ff:da:92:6d:1a:e9:aa:86:cc:50:fc:55:ad:88:
                    53:0a:10:4b:e2:f4:05:27:3d:2a:40:50:0b:1a:0c:
                    7b:6c:ac:2b:44:88:7b:e6:78:08:3d:2e:5e:84:30:
                    5d:55:3a:97:13:1b:96:54:fa:54:c6:e0:a6:ae:07:
                    94:6c:c5:93:af:bc:fd:c7:ec:da:07:d1:22:b4:eb:
                    bc:86:4c:6f:31:bf:27:80:61:9b:6d:00:35:a1:4b:
                    32:ed:fb:a5:f5:99:88:29:76:e5:c7:a7:ae:56:ff:
                    9b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B6:20:EE:DB:B8:B9:57:79:8C:87:4F:D5:A9:97:A0:FD:C7:1F:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/695c4f5d-b630-3786-a2e4-86b8847f2e3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.255.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:67:c9:1e:e9:05:6a:a9:1d:c9:b8:31:97:47:44:74:53:67:
         d5:b7:7d:04:0a:ef:29:40:00:93:09:97:75:69:73:f4:2f:a4:
         81:3a:42:79:92:04:f2:c7:25:13:97:26:a3:9d:f8:4f:f1:d8:
         ee:96:48:f0:83:49:a8:fe:5c:52:b2:78:2c:e3:f3:55:28:c8:
         a4:d7:25:ed:90:6d:84:71:ca:76:d3:7f:cb:b1:71:64:bc:70:
         82:46:07:0e:ea:b9:f2:9a:9b:fd:11:4c:e9:62:40:58:a2:dc:
         17:9c:85:57:a1:77:18:2e:37:ba:5a:81:69:41:ac:6d:01:dd:
         78:01:b4:fb:e0:ec:25:5b:e8:ff:01:7e:6b:75:d2:49:ce:4f:
         ff:c1:29:f5:2d:1a:81:12:08:48:ea:11:2a:d7:48:fc:a9:3c:
         6a:aa:c2:ac:a9:ab:8b:f2:85:2e:e1:cd:68:aa:83:44:ae:79:
         95:71:3c:ec:1b:db:85:91:e8:a9:f1:ae:f7:fc:99:99:cf:4a:
         f5:12:50:9f:6f:4f:36:a4:69:74:3d:f3:dc:34:57:db:14:d1:
         3d:5b:4b:a8:9b:10:90:58:99:47:33:c9:15:36:c1:a3:57:de:
         eb:c4:d1:42:f2:a7:2d:19:98:e7:41:15:fc:40:3c:52:8d:7d:
         46:61:a2:e9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBHSyC0qDqnTZZbLYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxNzEyMDAwMFoXDTIzMDEyMjA1MDAwMFowLzEtMCsGA1UEAxMk
ZGI1MmVjNWUtMTlmNC00NDUwLThiZmYtM2FkNjczMmNiZjNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw+yssiyqt7lmDG4zeD+uAHjSjI3xwppy9M7
q2kQO5THzp/BeYUnnqYDRXngyPH197v2S6op2ZhoUS0s1WjeSnIl1g8JpJZ8eiJV
OPm/Z6PGJYtbRhEHlOkMvd4FgZiA+e2PtmVsCf8qiTuilpe9hgcBXUF5mm+bN91e
0q7j+j14uubHRC+/dMWOrPtlcii3T7b5J96G/9qSbRrpqobMUPxVrYhTChBL4vQF
Jz0qQFALGgx7bKwrRIh75ngIPS5ehDBdVTqXExuWVPpUxuCmrgeUbMWTr7z9x+za
B9EitOu8hkxvMb8ngGGbbQA1oUsy7ful9ZmIKXblx6euVv+buQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAS2IO7buLlXeYyHT9Wpl6D9xx/MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNjk1YzRmNWQtYjYzMC0z
Nzg2LWEyZTQtODZiODg0N2YyZTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAL/8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAhmfJHukFaqkdybgxl0dEdFNn1bd9BArvKUAAkwmXdWlz9C+kgTpCeZIE
8sclE5cmo534T/HY7pZI8INJqP5cUrJ4LOPzVSjIpNcl7ZBthHHKdtN/y7FxZLxw
gkYHDuq58pqb/RFM6WJAWKLcF5yFV6F3GC43ulqBaUGsbQHdeAG0++DsJVvo/wF+
a3XSSc5P/8Ep9S0agRIISOoRKtdI/Kk8aqrCrKmri/KFLuHNaKqDRK55lXE87Bvb
hZHoqfGu9/yZmc9K9RJQn29PNqRpdD3z3DRX2xTRPVtLqJsQkFiZRzPJFTbBo1fe
68TRQvKnLRmY50EV/EA8Uo19RmGi6Q==
-----END CERTIFICATE-----