Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b096f4e7-68d0-3e09-a778-df1c7cb8f26b.roa
File:                     b096f4e7-68d0-3e09-a778-df1c7cb8f26b.roa (raw, json)
Hash identifier:          5Qt/CgmPAx/pXnm7K70tGWycjc6eMiS3gE0wn9/D/vw=
Subject key identifier:   86:BE:CF:FA:2A:39:7A:22:19:65:60:2D:3F:71:14:53:74:08:43:B8
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584041AE5294E6ECDC6EC88C1CA0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b096f4e7-68d0-3e09-a778-df1c7cb8f26b.roa
Signing time:             Thu 15 Dec 2022 12:00:00 +0000
ROA not before:           Thu 15 Dec 2022 12:00:00 +0000
ROA not after:            Fri 20 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        149.80.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:41:ae:52:94:e6:ec:dc:6e:c8:8c:1c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 15 12:00:00 2022 GMT
            Not After : Jan 20 05:00:00 2023 GMT
        Subject: CN=058431d7-dbed-46c6-a724-448b1f3644c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d8:fc:51:5c:65:78:c5:eb:49:d0:8f:0e:20:
                    0a:8a:f0:1c:38:05:9a:f3:63:73:88:09:b1:4d:6d:
                    2b:40:8c:d5:71:30:dd:aa:22:6c:e0:9b:d1:b9:1e:
                    a2:97:f2:37:1f:04:9f:41:52:85:67:e3:b5:12:dc:
                    62:ef:5c:fa:27:92:de:a7:cd:42:bc:2a:01:3f:13:
                    31:31:ca:73:03:80:96:ea:9d:ff:35:b5:f9:f4:6c:
                    6e:50:29:84:20:61:0b:bb:af:27:c9:02:2e:66:a0:
                    77:f4:89:91:a4:8a:51:10:71:94:9d:c9:77:88:96:
                    63:c7:16:f8:56:41:41:63:01:54:52:2c:46:fb:24:
                    09:34:90:ef:a8:ba:70:41:c9:da:ef:cf:53:51:59:
                    e4:9e:58:34:2d:ef:07:2d:1a:62:81:ac:9b:81:0b:
                    70:4a:c8:36:9c:4b:4f:49:9e:2a:27:8b:de:33:2c:
                    75:7c:67:44:13:f0:f2:e9:1b:0a:82:03:82:b2:c4:
                    8f:57:97:c2:56:01:fe:ca:e5:90:90:15:40:13:e3:
                    5d:0d:6b:d6:6d:9c:1a:2b:26:4d:9c:2a:89:bc:33:
                    e7:ce:84:25:f4:27:96:a4:2c:e4:56:a3:1c:90:78:
                    d1:9a:4c:b8:7f:41:74:cb:48:6e:32:8c:fe:86:a7:
                    5b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BE:CF:FA:2A:39:7A:22:19:65:60:2D:3F:71:14:53:74:08:43:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b096f4e7-68d0-3e09-a778-df1c7cb8f26b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.80.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:82:c4:cb:e8:bc:1b:34:1d:30:5e:31:b3:d4:fe:24:ac:c1:
         7d:58:4e:b3:d8:e8:82:4b:a5:e3:b4:1a:26:2a:fc:1b:65:59:
         0e:14:18:a1:ec:68:83:df:5b:f2:14:a7:39:86:f7:2f:b6:a1:
         35:42:6c:d9:21:34:fc:7e:b1:3a:28:53:9f:6c:4d:5d:fa:bd:
         40:5e:15:a3:6c:12:44:5e:2e:91:0f:cd:d2:0a:e0:44:a5:39:
         ed:d2:a9:a9:fe:a4:71:de:91:ab:e4:1a:8d:7f:1c:fc:87:6a:
         7e:7f:92:60:b5:dd:76:af:9b:66:89:25:82:e8:41:15:41:61:
         91:2b:fc:ff:a5:72:85:1c:2d:da:f0:60:f7:da:cf:57:28:68:
         ed:6c:b5:24:95:b8:ea:ba:9f:46:8d:50:43:a1:2d:64:ae:89:
         cf:0f:59:3e:e3:92:8a:81:2a:3c:df:6d:db:cf:5a:07:8d:0a:
         2d:e7:de:15:a8:76:a7:91:59:77:64:51:d4:1e:79:e5:dc:d7:
         2b:46:d0:27:d6:bf:02:44:99:1d:ae:7a:64:3f:1b:a7:ec:63:
         ab:c5:b6:f4:11:e1:56:d6:c6:41:9a:1d:ff:ff:ff:57:95:b9:
         7a:a8:f8:99:9e:b6:b3:b1:b8:34:18:28:da:70:32:0e:85:7f:
         3b:fa:eb:90
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBBrlKU5uzcbsiMHKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxNTEyMDAwMFoXDTIzMDEyMDA1MDAwMFowLzEtMCsGA1UEAxMk
MDU4NDMxZDctZGJlZC00NmM2LWE3MjQtNDQ4YjFmMzY0NGMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9j8UVxleMXrSdCPDiAKivAcOAWa82NziAmx
TW0rQIzVcTDdqiJs4JvRuR6il/I3HwSfQVKFZ+O1Etxi71z6J5Lep81CvCoBPxMx
McpzA4CW6p3/NbX59GxuUCmEIGELu68nyQIuZqB39ImRpIpREHGUncl3iJZjxxb4
VkFBYwFUUixG+yQJNJDvqLpwQcna789TUVnknlg0Le8HLRpigaybgQtwSsg2nEtP
SZ4qJ4veMyx1fGdEE/Dy6RsKggOCssSPV5fCVgH+yuWQkBVAE+NdDWvWbZwaKyZN
nCqJvDPnzoQl9CeWpCzkVqMckHjRmky4f0F0y0huMoz+hqdbCwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIa+z/oqOXoiGWVgLT9xFFN0CEO4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYjA5NmY0ZTctNjhkMC0z
ZTA5LWE3NzgtZGYxYzdjYjhmMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlVAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAsILEy+i8GzQdMF4xs9T+JKzBfVhOs9jogkul47QaJir8G2VZDhQYoexo
g99b8hSnOYb3L7ahNUJs2SE0/H6xOihTn2xNXfq9QF4Vo2wSRF4ukQ/N0grgRKU5
7dKpqf6kcd6Rq+QajX8c/Idqfn+SYLXddq+bZoklguhBFUFhkSv8/6VyhRwt2vBg
99rPVyho7Wy1JJW46rqfRo1QQ6EtZK6Jzw9ZPuOSioEqPN9t289aB40KLefeFah2
p5FZd2RR1B555dzXK0bQJ9a/AkSZHa56ZD8bp+xjq8W29BHhVtbGQZod////V5W5
eqj4mZ62s7G4NBgo2nAyDoV/O/rrkA==
-----END CERTIFICATE-----