Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/82a95f75-fe46-39d5-804c-3510a4e5cc9a.roa
File:                     82a95f75-fe46-39d5-804c-3510a4e5cc9a.roa (raw, json)
Hash identifier:          mAqNaM2am7YCG3b9W9/rXGCRWcir9hPYuECw9URUS04=
Subject key identifier:   37:38:D9:79:3B:6A:EB:95:48:56:E1:55:60:5E:2E:27:48:EE:B9:F4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FF24A67992C9C3D4594611F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/82a95f75-fe46-39d5-804c-3510a4e5cc9a.roa
Signing time:             Thu 17 Nov 2022 12:00:00 +0000
ROA not before:           Thu 17 Nov 2022 12:00:00 +0000
ROA not after:            Fri 23 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        52.222.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f2:4a:67:99:2c:9c:3d:45:94:61:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 17 12:00:00 2022 GMT
            Not After : Dec 23 05:00:00 2022 GMT
        Subject: CN=2919cde4-2699-4be4-981a-c821c5d5f570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:84:5a:e5:8d:64:63:0a:73:be:cd:e2:44:c8:
                    af:ee:a6:f6:7d:60:1b:af:31:5e:ac:cd:f6:78:9e:
                    45:e2:73:66:9f:72:3a:f1:2b:34:60:0c:0e:86:b2:
                    85:eb:62:44:b6:8d:65:79:2c:34:64:c6:8d:2c:26:
                    25:c8:1f:00:96:b2:59:0d:24:7e:e1:f4:65:80:ae:
                    bb:1f:28:aa:41:83:01:58:b8:f5:17:b4:47:41:53:
                    89:9d:77:86:99:dc:0f:4b:0f:e9:13:ad:6e:91:76:
                    21:e5:b9:e3:0e:8f:8f:3b:c9:1f:88:9c:76:3a:db:
                    2b:95:ff:75:8b:51:ff:fe:1d:8b:fb:53:1a:52:f4:
                    96:03:6f:be:e3:2b:dc:3f:1b:b4:f8:07:04:e2:6c:
                    36:77:07:00:6f:14:50:b1:e9:f9:bf:d1:16:4c:9e:
                    25:c4:a0:e2:cc:9c:b4:a7:fa:5c:4b:87:af:5f:38:
                    6f:4c:f7:9a:e7:de:c1:f5:57:69:59:f6:89:60:8d:
                    13:fc:65:4b:79:8f:42:63:f9:0e:ac:78:15:91:29:
                    25:26:79:97:7d:be:01:ff:16:47:fa:cb:31:ba:85:
                    91:ac:f2:c0:a1:a5:d8:67:e7:3b:6f:25:d4:32:7b:
                    b5:5e:c0:75:01:c9:c8:db:32:38:c6:15:a7:b7:b5:
                    99:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:38:D9:79:3B:6A:EB:95:48:56:E1:55:60:5E:2E:27:48:EE:B9:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/82a95f75-fe46-39d5-804c-3510a4e5cc9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.222.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:80:fd:0d:72:5b:8b:24:77:0e:0d:51:fa:58:3f:9a:4f:94:
         cf:6d:1e:f8:56:fe:78:62:41:e2:f1:3c:47:b3:46:d0:fc:43:
         ad:63:11:37:42:57:1f:04:e6:f8:d0:41:9e:91:d2:fc:cc:4f:
         23:42:a4:e4:67:8c:2f:b2:07:ae:2d:95:e4:9c:9e:7e:9b:56:
         57:f3:dd:e7:e2:60:37:e9:86:dc:f3:e0:9f:77:e3:7b:f8:5b:
         53:4c:ba:e5:e6:61:02:53:43:63:62:47:02:f5:a4:31:27:df:
         c8:a6:e7:7b:1b:20:b1:06:53:17:5a:3f:e0:95:48:59:92:8c:
         44:42:8f:e9:1c:0a:39:0c:2e:5c:68:fd:9e:f2:00:7a:70:30:
         71:f5:4a:b6:e7:a0:1b:f0:81:b1:b4:46:d8:82:b6:be:c9:df:
         15:8c:38:40:d3:9e:09:f8:8c:df:97:97:67:0a:7f:aa:44:9d:
         1d:6d:ed:14:e9:c8:09:b1:e6:d3:c0:97:1b:64:44:5f:c2:0a:
         a6:37:9b:c5:f0:84:ca:5d:9a:3b:de:a9:f3:40:70:11:16:d8:
         f1:07:0a:2c:d0:cf:9f:0d:84:cd:9b:fa:bc:4c:d6:31:0a:56:
         00:b6:71:c9:33:28:54:2d:aa:e9:cf:b6:39:df:bb:2f:d2:f2:
         ec:b9:b0:cb
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/ySmeZLJw9RZRhHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTExNzEyMDAwMFoXDTIyMTIyMzA1MDAwMFowLzEtMCsGA1UEAxMk
MjkxOWNkZTQtMjY5OS00YmU0LTk4MWEtYzgyMWM1ZDVmNTcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIRa5Y1kYwpzvs3iRMiv7qb2fWAbrzFerM32
eJ5F4nNmn3I68Ss0YAwOhrKF62JEto1leSw0ZMaNLCYlyB8AlrJZDSR+4fRlgK67
HyiqQYMBWLj1F7RHQVOJnXeGmdwPSw/pE61ukXYh5bnjDo+PO8kfiJx2Otsrlf91
i1H//h2L+1MaUvSWA2++4yvcPxu0+AcE4mw2dwcAbxRQsen5v9EWTJ4lxKDizJy0
p/pcS4evXzhvTPea597B9VdpWfaJYI0T/GVLeY9CY/kOrHgVkSklJnmXfb4B/xZH
+ssxuoWRrPLAoaXYZ+c7byXUMnu1XsB1AcnI2zI4xhWnt7WZ9QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDc42Xk7auuVSFbhVWBeLidI7rn0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvODJhOTVmNzUtZmU0Ni0z
OWQ1LTgwNGMtMzUxMGE0ZTVjYzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANN4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAqoD9DXJbiyR3Dg1R+lg/mk+Uz20e+Fb+eGJB4vE8R7NG0PxDrWMRN0JX
HwTm+NBBnpHS/MxPI0Kk5GeML7IHri2V5JyefptWV/Pd5+JgN+mG3PPgn3fje/hb
U0y65eZhAlNDY2JHAvWkMSffyKbnexsgsQZTF1o/4JVIWZKMREKP6RwKOQwuXGj9
nvIAenAwcfVKtuegG/CBsbRG2IK2vsnfFYw4QNOeCfiM35eXZwp/qkSdHW3tFOnI
CbHm08CXG2REX8IKpjebxfCEyl2aO96p80BwERbY8QcKLNDPnw2EzZv6vEzWMQpW
ALZxyTMoVC2q6c+2Od+7L9Ly7Lmwyw==
-----END CERTIFICATE-----