Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ba73b115-98ae-39bd-a174-16b2fb9e257b.roa
File:                     ba73b115-98ae-39bd-a174-16b2fb9e257b.roa (raw, json)
Hash identifier:          ha6Zl2ZofRcfJSggSh0nQ8cHiVFQFLO2jxswR+x7a4g=
Subject key identifier:   08:18:0B:C5:E1:82:51:79:9E:D2:C0:7A:40:68:56:B4:C6:F0:EA:E3
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FA172642CB989C83AEE922440
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ba73b115-98ae-39bd-a174-16b2fb9e257b.roa
Signing time:             Wed 19 Oct 2022 12:00:00 +0000
ROA not before:           Wed 19 Oct 2022 12:00:00 +0000
ROA not after:            Thu 24 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        15.188.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a1:72:64:2c:b9:89:c8:3a:ee:92:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 19 12:00:00 2022 GMT
            Not After : Nov 24 05:00:00 2022 GMT
        Subject: CN=caaa182b-91e1-4957-9ff9-e8ed9fd89915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d6:58:77:1b:f3:36:43:ef:1f:93:53:a3:ae:
                    7a:87:30:89:b1:f7:4f:63:96:8e:07:0b:d2:70:49:
                    0e:3a:82:7c:f1:5e:8f:e1:3f:49:c3:9a:d5:d9:99:
                    e9:10:ee:2e:fa:3e:e8:71:34:d5:54:2e:e3:95:14:
                    29:c1:d0:1a:1e:34:a2:90:51:f2:86:5f:6d:59:88:
                    d9:c7:1d:cc:10:2d:08:9f:a0:49:ec:6c:47:69:f1:
                    0a:02:ea:66:91:fd:7f:98:06:e9:eb:36:82:53:49:
                    ec:d4:5c:6b:7d:f8:40:4b:bf:9b:4d:dd:9d:d4:ec:
                    e0:c2:96:c1:77:3e:2c:00:69:10:b8:9a:c4:09:d8:
                    b1:b8:48:a3:d7:b1:6e:82:ca:0d:54:14:a0:b5:1e:
                    67:68:8b:cb:ee:03:aa:79:9c:33:e8:ab:7e:c8:50:
                    ea:6e:e3:2e:44:e4:bb:31:85:68:44:ce:89:93:39:
                    ad:42:b3:40:48:cc:de:e5:8c:16:f8:52:49:35:21:
                    59:4f:3e:b6:45:cd:d6:d1:f4:34:2c:92:bd:58:63:
                    10:d8:1a:7a:13:f7:d5:7f:88:c2:0e:dd:0e:75:60:
                    0a:76:75:46:d3:5f:a0:3a:0c:c9:3d:f3:a4:c6:c1:
                    30:5f:a7:62:5a:2a:bf:86:39:8c:51:75:54:17:63:
                    52:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:18:0B:C5:E1:82:51:79:9E:D2:C0:7A:40:68:56:B4:C6:F0:EA:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ba73b115-98ae-39bd-a174-16b2fb9e257b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.188.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:5c:1c:04:9b:21:aa:2e:c1:5d:9c:a3:66:8c:e1:8b:9a:01:
         b1:87:dc:e0:23:aa:76:04:13:17:83:a1:6e:7f:21:75:66:1d:
         74:ec:5f:38:9e:67:8d:ec:1a:71:30:72:11:a7:84:55:5c:92:
         d9:63:2f:3e:15:ef:38:ca:4a:61:43:57:e6:db:c9:8e:bd:18:
         67:a3:aa:6f:77:e2:75:da:7b:41:fd:76:de:94:44:8d:fc:34:
         7a:c1:da:42:c6:d5:e0:7c:c6:6c:46:e4:39:87:5b:48:31:8d:
         8e:7c:6e:b2:25:ef:9d:19:db:b7:29:ef:ff:b4:fc:84:ad:c7:
         8c:62:19:a7:e9:d1:15:3a:78:51:f2:9b:d3:db:18:88:b3:dd:
         a1:5c:0f:c6:ef:db:11:ee:fb:a6:8f:b9:a2:ef:1d:2b:7c:ca:
         0b:eb:d7:94:27:3b:c1:f5:7f:ca:8b:f0:7a:69:c9:01:a8:08:
         2c:99:a8:f9:6d:9a:8b:8f:50:c2:00:ec:a3:5e:80:cd:a9:3f:
         da:ca:40:41:a6:9f:20:87:5f:c1:08:2b:6e:69:a8:77:d9:3b:
         7a:db:52:5b:2d:9d:ae:8f:78:9a:4c:2c:2b:72:04:8b:c4:f9:
         84:72:0e:5f:d5:e4:2b:ac:ae:eb:15:ff:85:94:9b:62:de:58:
         71:bc:f7:2f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+hcmQsuYnIOu6SJEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAxOTEyMDAwMFoXDTIyMTEyNDA1MDAwMFowLzEtMCsGA1UEAxMk
Y2FhYTE4MmItOTFlMS00OTU3LTlmZjktZThlZDlmZDg5OTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tZYdxvzNkPvH5NTo656hzCJsfdPY5aOBwvS
cEkOOoJ88V6P4T9Jw5rV2ZnpEO4u+j7ocTTVVC7jlRQpwdAaHjSikFHyhl9tWYjZ
xx3MEC0In6BJ7GxHafEKAupmkf1/mAbp6zaCU0ns1FxrffhAS7+bTd2d1OzgwpbB
dz4sAGkQuJrECdixuEij17FugsoNVBSgtR5naIvL7gOqeZwz6Kt+yFDqbuMuROS7
MYVoRM6JkzmtQrNASMze5YwW+FJJNSFZTz62Rc3W0fQ0LJK9WGMQ2Bp6E/fVf4jC
Dt0OdWAKdnVG01+gOgzJPfOkxsEwX6diWiq/hjmMUXVUF2NSTwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAgYC8XhglF5ntLAekBoVrTG8OrjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYmE3M2IxMTUtOThhZS0z
OWJkLWExNzQtMTZiMmZiOWUyNTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD7wwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEASVwcBJshqi7BXZyjZozhi5oBsYfc4COqdgQTF4Ohbn8hdWYddOxfOJ5n
jewacTByEaeEVVyS2WMvPhXvOMpKYUNX5tvJjr0YZ6Oqb3fiddp7Qf123pREjfw0
esHaQsbV4HzGbEbkOYdbSDGNjnxusiXvnRnbtynv/7T8hK3HjGIZp+nRFTp4UfKb
09sYiLPdoVwPxu/bEe77po+5ou8dK3zKC+vXlCc7wfV/yovwemnJAagILJmo+W2a
i49QwgDso16Azak/2spAQaafIIdfwQgrbmmod9k7ettSWy2dro94mkwsK3IEi8T5
hHIOX9XkK6yu6xX/hZSbYt5Ycbz3Lw==
-----END CERTIFICATE-----