Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a1475026-ed4c-3599-9012-0d84b11b6838.roa
File:                     a1475026-ed4c-3599-9012-0d84b11b6838.roa (raw, json)
Hash identifier:          axP6TOOtO0iftMSiCL+aGcA9oS//19Y1f2lCIFCGaJI=
Subject key identifier:   A9:FA:02:B8:4A:6E:9C:F8:2B:87:77:1C:86:3C:27:2A:8E:BD:6C:10
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E92BC655F1465413CD1EE9C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a1475026-ed4c-3599-9012-0d84b11b6838.roa
Signing time:             Thu 14 Jul 2022 12:00:00 +0000
ROA not before:           Thu 14 Jul 2022 12:00:00 +0000
ROA not after:            Fri 19 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        35.96.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:92:bc:65:5f:14:65:41:3c:d1:ee:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 14 12:00:00 2022 GMT
            Not After : Aug 19 04:00:00 2022 GMT
        Subject: CN=ea09a1a4-d80c-4ffc-90f5-4a9599026d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:28:8b:84:58:38:08:dc:83:f2:a5:4f:7c:75:
                    c3:6d:2a:72:5d:1c:f0:49:0c:d0:19:ef:5b:98:fa:
                    c6:54:a3:89:6e:5b:c8:b0:a4:55:c8:6b:25:f9:e4:
                    a5:df:fa:1a:77:40:08:eb:a8:ad:05:87:3e:f7:7f:
                    41:15:ab:9b:2f:1d:68:ba:7e:c9:3d:77:2e:8e:3a:
                    a6:59:ac:85:3c:00:2f:12:f4:e5:b1:9f:2c:22:73:
                    1a:cd:0f:4a:ba:de:3d:16:ba:e4:b5:7c:2d:63:04:
                    2e:a7:b8:d8:80:f7:1a:f9:a4:7f:ed:75:69:0d:d3:
                    32:80:e8:19:7a:a3:b2:c8:fb:25:4a:5c:4b:8d:88:
                    8a:11:0e:94:b5:57:ca:7d:67:7e:62:97:54:f1:c5:
                    f0:70:2a:e9:cd:ce:aa:7b:9d:dd:5c:c6:9f:d8:3d:
                    77:38:40:88:13:58:c6:33:4c:80:0d:62:44:22:e3:
                    8b:81:fc:b6:27:53:d9:0e:07:d3:38:c4:7e:7d:1f:
                    40:67:26:a9:c1:8b:dc:59:e0:7f:8b:23:78:df:fd:
                    dc:bd:ae:40:11:1f:83:52:29:83:aa:2d:83:14:69:
                    22:c7:4b:93:7e:51:1d:7d:18:01:c6:ac:c2:f8:53:
                    28:85:87:71:1b:d6:ce:cb:67:c8:f7:5a:44:c7:bb:
                    94:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FA:02:B8:4A:6E:9C:F8:2B:87:77:1C:86:3C:27:2A:8E:BD:6C:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a1475026-ed4c-3599-9012-0d84b11b6838.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:39:2a:62:6c:55:eb:16:3e:cf:27:6d:c7:41:1a:bb:05:0e:
         cc:cb:43:0a:74:b8:3c:52:3a:2c:0f:b0:aa:13:2d:ab:91:f0:
         65:de:61:1b:3c:94:38:86:49:86:9b:43:c8:44:9e:aa:dc:e3:
         33:79:05:d3:c4:6b:ce:13:09:96:9a:7f:3b:e0:e0:c9:9b:26:
         53:2f:77:66:f9:c9:7a:db:c6:87:32:a4:8d:0f:c6:45:04:ab:
         3c:47:9e:6e:d4:2d:62:7c:84:ca:94:94:4f:e8:d0:a1:ee:4e:
         b6:56:f1:76:ea:2a:ac:58:1d:ee:19:49:80:41:a2:ab:ec:0a:
         7c:51:20:09:f5:02:0a:5a:c1:02:df:d6:40:e3:e6:7c:6a:49:
         13:fa:f4:81:26:3c:4e:e3:fb:fb:c8:bc:68:52:8e:bb:2f:34:
         d6:a4:73:e6:29:ba:b4:e8:23:ec:1d:c1:6e:0b:30:89:21:8b:
         89:22:05:bb:9d:76:15:15:df:42:31:2a:86:83:58:b1:14:82:
         98:1d:cf:b7:65:39:85:0c:d6:97:b1:3b:cd:a2:6d:7f:8b:1d:
         b3:a1:e5:69:5e:e4:4c:67:ed:3d:65:60:01:40:b9:3b:56:0d:
         80:1c:de:31:f0:54:69:f7:5a:fb:84:c7:d4:8f:ba:93:c3:77:
         5e:b0:6e:96
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6SvGVfFGVBPNHunIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcxNDEyMDAwMFoXDTIyMDgxOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZWEwOWExYTQtZDgwYy00ZmZjLTkwZjUtNGE5NTk5MDI2ZDVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyiLhFg4CNyD8qVPfHXDbSpyXRzwSQzQGe9b
mPrGVKOJblvIsKRVyGsl+eSl3/oad0AI66itBYc+939BFaubLx1oun7JPXcujjqm
WayFPAAvEvTlsZ8sInMazQ9Kut49FrrktXwtYwQup7jYgPca+aR/7XVpDdMygOgZ
eqOyyPslSlxLjYiKEQ6UtVfKfWd+YpdU8cXwcCrpzc6qe53dXMaf2D13OECIE1jG
M0yADWJEIuOLgfy2J1PZDgfTOMR+fR9AZyapwYvcWeB/iyN43/3cva5AER+DUimD
qi2DFGkix0uTflEdfRgBxqzC+FMohYdxG9bOy2fI91pEx7uUvwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKn6ArhKbpz4K4d3HIY8JyqOvWwQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYTE0NzUwMjYtZWQ0Yy0z
NTk5LTkwMTItMGQ4NGIxMWI2ODM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMEI2AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAbTkqYmxV6xY+zydtx0EauwUOzMtDCnS4PFI6LA+wqhMtq5HwZd5hGzyU
OIZJhptDyESeqtzjM3kF08RrzhMJlpp/O+DgyZsmUy93ZvnJetvGhzKkjQ/GRQSr
PEeebtQtYnyEypSUT+jQoe5OtlbxduoqrFgd7hlJgEGiq+wKfFEgCfUCClrBAt/W
QOPmfGpJE/r0gSY8TuP7+8i8aFKOuy801qRz5im6tOgj7B3BbgswiSGLiSIFu512
FRXfQjEqhoNYsRSCmB3Pt2U5hQzWl7E7zaJtf4sds6HlaV7kTGftPWVgAUC5O1YN
gBzeMfBUafda+4TH1I+6k8N3XrBulg==
-----END CERTIFICATE-----