Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a6c34fc6-36ac-37d9-a626-a77c3e84c3dc.roa
File:                     a6c34fc6-36ac-37d9-a626-a77c3e84c3dc.roa (raw, json)
Hash identifier:          YI0P3+Dy3L6XT2TKWsjvopPzZmaeBfJ7jMmGUhuqmaw=
Subject key identifier:   35:18:9A:C1:71:08:18:6E:7C:A2:5F:2C:56:55:72:C7:09:F1:6C:54
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858403DEDE332C5A16931BD55EBC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a6c34fc6-36ac-37d9-a626-a77c3e84c3dc.roa
Signing time:             Wed 14 Dec 2022 12:00:00 +0000
ROA not before:           Wed 14 Dec 2022 12:00:00 +0000
ROA not after:            Thu 19 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        15.156.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3d:ed:e3:32:c5:a1:69:31:bd:55:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 14 12:00:00 2022 GMT
            Not After : Jan 19 05:00:00 2023 GMT
        Subject: CN=464af4e8-8d54-4115-9c75-ba9e448cbe29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:04:ca:ea:8f:bc:98:ef:02:3d:98:66:fd:88:
                    b4:2d:08:ef:75:58:c1:18:02:2d:30:8b:1d:f5:d8:
                    ba:21:c3:7e:4f:b9:e8:14:fe:c5:ed:98:79:95:7c:
                    f7:63:4e:ba:b8:9a:e3:e8:f3:71:b6:9a:2e:4e:e0:
                    88:e8:40:c4:15:b6:93:fc:e5:8c:7b:64:70:6f:3e:
                    4b:e4:79:66:0a:e2:11:65:86:82:1a:fd:9a:15:ae:
                    f9:e4:39:c4:ac:c8:46:7a:71:c9:c5:d0:42:ff:cb:
                    af:b3:fa:6d:b0:0c:19:86:89:b8:db:9e:99:74:6d:
                    92:3c:74:28:24:63:c3:b4:95:38:fd:73:2c:e1:0b:
                    c6:1e:36:66:b4:01:49:bf:ce:74:4f:b2:52:9f:32:
                    8f:35:14:a9:1e:3e:84:7a:50:29:49:03:7c:8d:3e:
                    7b:57:ff:92:6a:66:0d:1a:47:60:63:41:fe:9c:4d:
                    55:07:3f:3a:27:a4:70:e1:f3:97:49:43:13:e6:d9:
                    5d:81:c5:97:a3:61:42:a4:56:7d:b4:74:26:07:47:
                    00:72:3d:32:25:fe:aa:e0:b6:0a:cd:c6:ad:4c:67:
                    ba:31:90:b3:4d:c0:97:8e:03:08:04:6c:8c:d4:33:
                    13:bd:77:27:80:b9:ad:29:63:ba:0e:a5:9f:15:77:
                    f0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:18:9A:C1:71:08:18:6E:7C:A2:5F:2C:56:55:72:C7:09:F1:6C:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a6c34fc6-36ac-37d9-a626-a77c3e84c3dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.156.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:09:d7:d1:89:5d:98:59:57:b3:f0:b7:31:c7:d7:bd:33:44:
         86:94:64:12:2d:de:f3:45:d6:e3:48:ff:ee:39:ff:9e:1a:57:
         f5:48:92:71:38:02:c0:27:89:49:d0:70:e0:56:8f:d0:f2:a6:
         45:55:4b:71:10:0a:04:ec:18:9b:c4:81:c6:74:97:3c:1c:00:
         fe:af:66:98:3d:f9:2e:15:7b:33:59:b8:40:1a:7d:2c:92:9a:
         04:f9:cd:6e:7c:f2:b1:ea:14:d1:8c:5d:dd:50:cf:e7:4e:54:
         e6:7d:1d:01:08:d7:20:42:50:72:16:f3:cd:82:85:d8:c6:5e:
         cc:ad:57:f8:f3:d0:b7:fc:8e:3e:de:44:98:08:c1:d8:12:28:
         6d:fc:84:a4:3c:f3:4a:e5:a2:ed:16:11:46:96:e4:60:15:d1:
         1d:8c:78:90:28:48:37:ee:c7:d6:73:09:b8:64:4e:0b:3c:c1:
         b6:f7:3c:a8:2a:0a:6f:79:64:8a:35:13:83:0d:49:85:f7:26:
         e9:eb:49:dc:d7:8f:7e:be:81:40:60:0e:d0:36:84:ce:cd:2d:
         99:42:84:70:f3:b2:eb:25:e0:2b:01:3b:68:fc:35:5d:54:5b:
         85:a0:73:21:e3:2e:2c:29:ab:f0:1b:2c:70:03:96:01:db:0f:
         38:4c:2e:86
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA97eMyxaFpMb1V68AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxNDEyMDAwMFoXDTIzMDExOTA1MDAwMFowLzEtMCsGA1UEAxMk
NDY0YWY0ZTgtOGQ1NC00MTE1LTljNzUtYmE5ZTQ0OGNiZTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QTK6o+8mO8CPZhm/Yi0LQjvdVjBGAItMIsd
9di6IcN+T7noFP7F7Zh5lXz3Y066uJrj6PNxtpouTuCI6EDEFbaT/OWMe2Rwbz5L
5HlmCuIRZYaCGv2aFa755DnErMhGenHJxdBC/8uvs/ptsAwZhom4256ZdG2SPHQo
JGPDtJU4/XMs4QvGHjZmtAFJv850T7JSnzKPNRSpHj6EelApSQN8jT57V/+SamYN
GkdgY0H+nE1VBz86J6Rw4fOXSUMT5tldgcWXo2FCpFZ9tHQmB0cAcj0yJf6q4LYK
zcatTGe6MZCzTcCXjgMIBGyM1DMTvXcngLmtKWO6DqWfFXfwWwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDUYmsFxCBhufKJfLFZVcscJ8WxUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYTZjMzRmYzYtMzZhYy0z
N2Q5LWE2MjYtYTc3YzNlODRjM2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBD5wwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAXwnX0YldmFlXs/C3McfXvTNEhpRkEi3e80XW40j/7jn/nhpX9UiScTgC
wCeJSdBw4FaP0PKmRVVLcRAKBOwYm8SBxnSXPBwA/q9mmD35LhV7M1m4QBp9LJKa
BPnNbnzyseoU0Yxd3VDP505U5n0dAQjXIEJQchbzzYKF2MZezK1X+PPQt/yOPt5E
mAjB2BIobfyEpDzzSuWi7RYRRpbkYBXRHYx4kChIN+7H1nMJuGROCzzBtvc8qCoK
b3lkijUTgw1Jhfcm6etJ3NePfr6BQGAO0DaEzs0tmUKEcPOy6yXgKwE7aPw1XVRb
haBzIeMuLCmr8BsscAOWAdsPOEwuhg==
-----END CERTIFICATE-----