Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8a2263c2-e9d0-32c5-a7a4-8ea1ba4f96f4.roa
File:                     8a2263c2-e9d0-32c5-a7a4-8ea1ba4f96f4.roa (raw, json)
Hash identifier:          88S7nlhLIGb48ZjMvzxdNbomezgR3N4TxbMFwfS0ozg=
Subject key identifier:   CD:1C:B8:AA:51:51:2D:BB:61:8F:F6:7A:15:E9:F2:F8:B9:0E:78:05
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F8DF69A8523281F6BC7050880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8a2263c2-e9d0-32c5-a7a4-8ea1ba4f96f4.roa
Signing time:             Wed 12 Oct 2022 12:00:00 +0000
ROA not before:           Wed 12 Oct 2022 12:00:00 +0000
ROA not after:            Thu 17 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        15.130.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8d:f6:9a:85:23:28:1f:6b:c7:05:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 12 12:00:00 2022 GMT
            Not After : Nov 17 05:00:00 2022 GMT
        Subject: CN=4728cd93-e299-415c-bf89-c7e83220d8ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1c:12:7f:01:5e:59:f4:75:7a:be:2c:6b:2b:
                    da:83:c1:9f:2b:7d:67:de:6f:1e:9b:8e:bb:0c:62:
                    b3:6b:f6:d3:0c:ca:5d:2d:55:9e:86:b0:c4:3d:60:
                    82:c0:db:c3:5a:1d:57:27:4a:78:43:a5:32:de:60:
                    d1:e0:25:87:8e:f5:b4:57:92:c8:76:05:22:01:45:
                    9b:c7:d1:85:df:d5:6b:49:80:b0:57:04:dc:f5:5a:
                    c2:5e:cf:4d:5f:6a:50:4a:23:92:eb:48:63:1a:96:
                    2c:38:0d:59:1f:04:3e:c7:68:ff:bb:e5:2f:b7:ef:
                    91:25:7a:89:53:16:a1:9c:65:a3:5e:80:98:f1:0d:
                    a4:70:00:05:42:60:75:cd:79:be:1d:d6:83:8c:2e:
                    09:5d:54:79:b6:17:f3:67:9b:2d:d8:09:84:89:c4:
                    ed:8b:2e:a6:21:7b:64:68:8c:e0:b5:31:f9:e2:0e:
                    6c:15:8c:e2:0a:7d:91:16:6e:ad:fe:6f:52:88:ae:
                    5d:6c:12:e0:e0:4e:4e:68:7b:35:c2:15:c2:62:0d:
                    04:6f:54:71:ca:32:a6:30:ca:86:44:b1:51:8b:6a:
                    aa:c4:44:5f:f1:e3:24:1e:ee:25:3a:88:bd:2c:48:
                    94:6c:c7:c9:59:75:d2:4b:94:d1:62:2b:b9:d7:64:
                    ee:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1C:B8:AA:51:51:2D:BB:61:8F:F6:7A:15:E9:F2:F8:B9:0E:78:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8a2263c2-e9d0-32c5-a7a4-8ea1ba4f96f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.130.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:74:de:41:27:17:dd:f5:13:4b:f9:12:1f:65:4a:5d:d1:fe:
         e4:55:40:ad:8e:8f:01:ed:1d:e8:91:88:00:ab:af:68:e7:b6:
         cf:2a:e7:ed:52:bf:98:90:04:8e:75:e2:90:84:8c:e6:22:31:
         76:e7:dd:69:09:f4:a1:aa:53:5b:41:0a:7a:7b:3a:ac:22:0f:
         1a:f5:3a:65:4f:1c:fb:8f:f9:47:04:68:21:0e:07:ce:48:51:
         a9:2c:54:17:ea:d1:7f:13:e8:6a:6a:63:57:8e:a7:85:c5:f6:
         73:9d:b4:28:e2:55:3a:3c:44:ff:2a:2a:71:5e:59:58:15:48:
         75:8f:2e:6f:9b:af:f4:a4:18:c7:ea:18:5b:95:ed:3b:73:26:
         3f:b2:ad:0d:a1:ec:02:da:c5:46:06:56:f1:8a:8d:31:34:69:
         78:72:38:a5:7c:79:2d:94:cd:94:f4:18:34:66:5c:cf:01:89:
         f8:85:9e:81:e3:8e:e7:a4:c4:fe:a0:b4:1f:7e:72:f9:0c:52:
         3d:c6:3f:b9:94:cf:b8:43:e2:e4:b3:70:46:ba:53:07:ba:43:
         e9:8d:41:ac:e8:47:9c:34:2e:ba:00:1c:d0:4d:52:34:87:5d:
         68:e7:23:cb:20:fb:d2:db:5e:df:30:6f:e0:57:61:67:ba:b7:
         d6:97:62:e3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+N9pqFIygfa8cFCIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAxMjEyMDAwMFoXDTIyMTExNzA1MDAwMFowLzEtMCsGA1UEAxMk
NDcyOGNkOTMtZTI5OS00MTVjLWJmODktYzdlODMyMjBkOGVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBwSfwFeWfR1er4sayvag8GfK31n3m8em467
DGKza/bTDMpdLVWehrDEPWCCwNvDWh1XJ0p4Q6Uy3mDR4CWHjvW0V5LIdgUiAUWb
x9GF39VrSYCwVwTc9VrCXs9NX2pQSiOS60hjGpYsOA1ZHwQ+x2j/u+Uvt++RJXqJ
UxahnGWjXoCY8Q2kcAAFQmB1zXm+HdaDjC4JXVR5thfzZ5st2AmEicTtiy6mIXtk
aIzgtTH54g5sFYziCn2RFm6t/m9SiK5dbBLg4E5OaHs1whXCYg0Eb1RxyjKmMMqG
RLFRi2qqxERf8eMkHu4lOoi9LEiUbMfJWXXSS5TRYiu512TuWQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFM0cuKpRUS27YY/2ehXp8vi5DngFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOGEyMjYzYzItZTlkMC0z
MmM1LWE3YTQtOGVhMWJhNGY5NmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD4IwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAQ3TeQScX3fUTS/kSH2VKXdH+5FVArY6PAe0d6JGIAKuvaOe2zyrn7VK/
mJAEjnXikISM5iIxdufdaQn0oapTW0EKens6rCIPGvU6ZU8c+4/5RwRoIQ4HzkhR
qSxUF+rRfxPoampjV46nhcX2c520KOJVOjxE/yoqcV5ZWBVIdY8ub5uv9KQYx+oY
W5XtO3MmP7KtDaHsAtrFRgZW8YqNMTRpeHI4pXx5LZTNlPQYNGZczwGJ+IWegeOO
56TE/qC0H35y+QxSPcY/uZTPuEPi5LNwRrpTB7pD6Y1BrOhHnDQuugAc0E1SNIdd
aOcjyyD70tte3zBv4FdhZ7q31pdi4w==
-----END CERTIFICATE-----