Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b7cab7a3-6807-3d18-a2c2-462ef46a4993.roa
File:                     b7cab7a3-6807-3d18-a2c2-462ef46a4993.roa (raw, json)
Hash identifier:          TED9aYTMFdsKKaKeAhSC0SXSG6hB/ua7DFJYvh1EeeA=
Subject key identifier:   B3:E1:F1:46:19:59:9A:F9:C2:DB:5A:93:29:28:CC:D0:84:2E:BF:3B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FF56E3B0712A8A9F1D72E53C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b7cab7a3-6807-3d18-a2c2-462ef46a4993.roa
Signing time:             Fri 18 Nov 2022 12:00:00 +0000
ROA not before:           Fri 18 Nov 2022 12:00:00 +0000
ROA not after:            Sat 24 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        54.80.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f5:6e:3b:07:12:a8:a9:f1:d7:2e:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 18 12:00:00 2022 GMT
            Not After : Dec 24 05:00:00 2022 GMT
        Subject: CN=faefb4f4-02e6-4c30-b572-44a4cae05078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3e:c8:3e:c8:26:a3:2f:47:37:91:65:e8:bc:
                    da:42:5c:78:62:ce:fc:85:64:a8:57:a6:d0:84:ea:
                    30:f2:6c:4e:18:7f:91:59:4b:cf:c4:d1:d7:73:56:
                    11:79:75:de:65:5f:72:2f:97:b8:23:17:fb:c3:fd:
                    e0:30:cd:77:69:4c:80:55:84:cb:eb:e3:e7:c3:0a:
                    b4:aa:39:92:de:f7:87:c5:9d:e7:e4:b5:5a:0e:d6:
                    e2:4a:6e:28:74:e7:0c:d1:47:10:bd:5c:63:a8:fc:
                    c5:01:56:16:40:12:d2:23:94:5a:b8:f0:28:c9:bd:
                    3c:b9:5c:40:d7:1d:26:4e:5b:2a:f5:34:00:4a:ef:
                    04:b7:6f:b9:68:d1:48:5b:f8:b7:fc:82:77:74:f6:
                    d4:fb:b2:c4:37:6c:8f:c8:f5:e9:9c:a0:56:92:4b:
                    09:32:f0:eb:69:87:18:88:36:21:01:70:27:ef:39:
                    99:23:05:08:64:45:8a:97:6b:76:90:4b:55:50:42:
                    43:bf:79:b1:31:d0:3e:b5:d5:f9:d9:32:99:71:11:
                    f6:5d:cf:27:7a:29:ac:b7:e8:b0:71:1d:d4:84:13:
                    ad:8a:ca:0f:9c:5b:ed:3e:9c:2c:93:a4:18:80:d0:
                    c8:0f:33:78:92:d0:fc:56:29:45:59:4c:35:49:b5:
                    b7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E1:F1:46:19:59:9A:F9:C2:DB:5A:93:29:28:CC:D0:84:2E:BF:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b7cab7a3-6807-3d18-a2c2-462ef46a4993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.80.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:a5:0c:39:d7:6e:26:4f:6f:82:34:01:4b:52:c0:8c:a3:2a:
         94:05:e0:82:6b:f7:4b:ce:c8:1c:36:cf:ea:a7:e8:4c:04:97:
         c1:66:56:14:2d:99:18:92:fb:8e:1a:53:19:47:9f:97:d8:05:
         44:f7:9e:f7:94:e1:83:0c:b2:5b:a5:c1:38:5d:25:5c:2d:cc:
         8b:e5:5b:d8:29:71:a5:84:bb:0c:e4:a8:50:dc:c0:ed:7c:47:
         75:cb:40:02:69:db:cc:48:66:11:cd:91:a8:e3:00:91:1f:90:
         09:cc:2f:8b:d2:f0:0e:f3:cc:52:9f:9e:76:db:f1:e8:6f:ac:
         b5:e1:6b:93:8b:0b:1d:c0:46:ab:e8:a9:39:f4:2f:12:76:ca:
         96:b5:d2:eb:63:5b:8e:b8:6d:d7:cb:a8:03:23:da:a5:ff:29:
         6a:a5:3f:d3:fb:b8:19:fb:75:a7:69:6b:23:65:0b:d3:18:a1:
         e8:bf:42:15:48:08:49:d3:0c:75:d1:fb:5d:e0:5d:e5:ab:e0:
         58:64:d2:5f:87:22:b2:0e:28:b4:dc:a1:1d:cb:77:9e:3a:8b:
         0b:58:fb:eb:b2:b9:c3:3d:ca:8b:db:5c:f5:cf:a7:4b:f0:7e:
         da:e6:91:07:75:3d:94:b8:e8:3f:0a:5a:8e:1c:e5:87:18:86:
         1e:10:48:d6
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/1bjsHEqip8dcuU8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTExODEyMDAwMFoXDTIyMTIyNDA1MDAwMFowLzEtMCsGA1UEAxMk
ZmFlZmI0ZjQtMDJlNi00YzMwLWI1NzItNDRhNGNhZTA1MDc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT7IPsgmoy9HN5Fl6LzaQlx4Ys78hWSoV6bQ
hOow8mxOGH+RWUvPxNHXc1YReXXeZV9yL5e4Ixf7w/3gMM13aUyAVYTL6+Pnwwq0
qjmS3veHxZ3n5LVaDtbiSm4odOcM0UcQvVxjqPzFAVYWQBLSI5RauPAoyb08uVxA
1x0mTlsq9TQASu8Et2+5aNFIW/i3/IJ3dPbU+7LEN2yPyPXpnKBWkksJMvDraYcY
iDYhAXAn7zmZIwUIZEWKl2t2kEtVUEJDv3mxMdA+tdX52TKZcRH2Xc8neimst+iw
cR3UhBOtisoPnFvtPpwsk6QYgNDIDzN4ktD8VilFWUw1SbW3VQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLPh8UYZWZr5wttakykozNCELr87MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYjdjYWI3YTMtNjgwNy0z
ZDE4LWEyYzItNDYyZWY0NmE0OTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMENlAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgKUMOdduJk9vgjQBS1LAjKMqlAXggmv3S87IHDbP6qfoTASXwWZWFC2Z
GJL7jhpTGUefl9gFRPee95ThgwyyW6XBOF0lXC3Mi+Vb2ClxpYS7DOSoUNzA7XxH
dctAAmnbzEhmEc2RqOMAkR+QCcwvi9LwDvPMUp+edtvx6G+steFrk4sLHcBGq+ip
OfQvEnbKlrXS62Nbjrht18uoAyPapf8paqU/0/u4Gft1p2lrI2UL0xih6L9CFUgI
SdMMddH7XeBd5avgWGTSX4cisg4otNyhHct3njqLC1j767K5wz3Ki9tc9c+nS/B+
2uaRB3U9lLjoPwpajhzlhxiGHhBI1g==
-----END CERTIFICATE-----