Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bdd94d83-8e8c-38fe-bb13-aae17d30822e.roa
File:                     bdd94d83-8e8c-38fe-bb13-aae17d30822e.roa (raw, json)
Hash identifier:          qmdMuFBX4m166kP+slINrqwgotuSzh/tjL7NL7S5QEI=
Subject key identifier:   8C:15:4C:A9:1D:9B:E5:2B:39:D4:0D:36:61:75:97:30:CE:22:70:67
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F9C1101A2C9D4D9E8E36CA740
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bdd94d83-8e8c-38fe-bb13-aae17d30822e.roa
Signing time:             Mon 17 Oct 2022 12:00:00 +0000
ROA not before:           Mon 17 Oct 2022 12:00:00 +0000
ROA not after:            Tue 22 Nov 2022 05:00:00 +0000
asID:                     701
IP address blocks:        155.146.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:9c:11:01:a2:c9:d4:d9:e8:e3:6c:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 17 12:00:00 2022 GMT
            Not After : Nov 22 05:00:00 2022 GMT
        Subject: CN=318312f6-a125-4a68-87d9-1f3d994ba566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:41:ed:c2:d6:ec:d6:2f:94:65:78:2a:fb:44:
                    bb:4e:53:fe:ba:c0:cb:2d:43:f9:e2:b7:75:3a:d4:
                    ac:c9:66:ac:87:f4:fc:35:e9:76:90:f8:4d:16:bf:
                    87:2f:4f:3a:c7:64:56:5e:cc:85:c1:39:1b:af:48:
                    84:96:6c:89:83:29:b7:00:fa:de:dd:c9:5d:3e:af:
                    d1:1d:2e:ff:b8:6d:87:a7:ea:e8:60:1a:be:e2:62:
                    19:d9:2a:04:68:91:a9:e7:50:2a:e3:e3:70:e8:7b:
                    c6:ab:f2:28:30:a4:70:66:06:b5:33:74:13:83:4c:
                    d1:6b:4a:df:a5:29:21:ef:4c:96:1d:7c:43:2d:00:
                    49:9e:41:d2:65:a8:cb:96:bf:3d:9e:37:b5:25:87:
                    a1:dd:16:93:53:20:0a:0c:97:cd:e2:8b:c2:a6:91:
                    6c:5c:98:dd:3c:29:6f:71:db:b5:b3:88:21:2f:b8:
                    1f:be:a9:3d:a3:db:37:5c:af:5c:f4:51:c1:c7:0f:
                    81:41:89:a5:54:b7:16:ae:63:3a:75:57:0c:b0:ce:
                    ea:30:ba:c0:75:b6:24:43:cf:3e:4d:d6:7a:75:19:
                    82:b8:59:b3:e4:49:e5:1e:ea:4a:ac:8c:ce:7f:61:
                    cd:50:ff:20:f9:47:c2:1c:28:77:45:cc:38:77:bf:
                    d8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:15:4C:A9:1D:9B:E5:2B:39:D4:0D:36:61:75:97:30:CE:22:70:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bdd94d83-8e8c-38fe-bb13-aae17d30822e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:6e:aa:16:50:77:f5:fb:b6:2c:86:c2:fa:fc:2d:7d:38:84:
         68:25:96:2d:c1:01:b5:62:6d:6b:4b:0a:45:54:9d:af:70:b4:
         00:8c:15:bc:81:15:23:69:88:76:51:20:0c:e7:7f:2e:f4:87:
         2a:8a:1a:43:27:8e:b1:5c:d1:23:9b:f8:79:38:37:db:64:c9:
         d1:69:57:09:4d:a1:2a:ce:56:11:d5:13:33:5d:e6:1d:44:f6:
         19:db:f6:02:c0:b0:8b:0d:82:5f:94:9d:67:94:08:9a:ff:12:
         a7:ed:7c:d0:52:08:70:0d:9a:e6:d8:36:f3:d8:b1:d3:67:49:
         79:68:dd:78:3a:92:33:8d:8d:87:e7:ad:c5:74:c7:1b:dd:9c:
         0e:28:78:ce:a1:0e:d1:d9:f1:51:11:e3:92:f5:af:4b:b5:5e:
         da:6f:67:b3:9a:12:51:75:f0:4a:c9:39:51:43:7f:12:0c:97:
         47:11:3c:d8:67:cf:33:a0:e8:9d:a4:3a:27:b5:1d:63:b7:d1:
         ea:e1:bb:2b:3e:3b:ac:f2:49:eb:ae:b3:ee:79:b0:e1:8a:00:
         c1:55:c1:d4:c5:3d:a8:73:3f:31:e6:dd:f4:28:62:75:98:20:
         cf:93:ff:17:e2:c1:ae:1b:fb:77:e3:e4:77:d2:71:99:74:75:
         d3:c7:19:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD+cEQGiydTZ6ONsp0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAxNzEyMDAwMFoXDTIyMTEyMjA1MDAwMFowLzEtMCsGA1UEAxMk
MzE4MzEyZjYtYTEyNS00YTY4LTg3ZDktMWYzZDk5NGJhNTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0Htwtbs1i+UZXgq+0S7TlP+usDLLUP54rd1
OtSsyWash/T8Nel2kPhNFr+HL086x2RWXsyFwTkbr0iElmyJgym3APre3cldPq/R
HS7/uG2Hp+roYBq+4mIZ2SoEaJGp51Aq4+Nw6HvGq/IoMKRwZga1M3QTg0zRa0rf
pSkh70yWHXxDLQBJnkHSZajLlr89nje1JYeh3RaTUyAKDJfN4ovCppFsXJjdPClv
cdu1s4ghL7gfvqk9o9s3XK9c9FHBxw+BQYmlVLcWrmM6dVcMsM7qMLrAdbYkQ88+
TdZ6dRmCuFmz5EnlHupKrIzOf2HNUP8g+UfCHCh3Rcw4d7/YaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIwVTKkdm+UrOdQNNmF1lzDOInBnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYmRkOTRkODMtOGU4Yy0z
OGZlLWJiMTMtYWFlMTdkMzA4MjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm5IQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHBuqhZQd/X7tiyGwvr8LX04hGglli3BAbVibWtLCkVUna9wtACMFbyB
FSNpiHZRIAznfy70hyqKGkMnjrFc0SOb+Hk4N9tkydFpVwlNoSrOVhHVEzNd5h1E
9hnb9gLAsIsNgl+UnWeUCJr/EqftfNBSCHANmubYNvPYsdNnSXlo3Xg6kjONjYfn
rcV0xxvdnA4oeM6hDtHZ8VER45L1r0u1XtpvZ7OaElF18ErJOVFDfxIMl0cRPNhn
zzOg6J2kOie1HWO30erhuys+O6zySeuus+55sOGKAMFVwdTFPahzPzHm3fQoYnWY
IM+T/xfiwa4b+3fj5HfScZl0ddPHGa0=
-----END CERTIFICATE-----