Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c291adad-7b30-33c7-985c-46a5a1781143.roa
File:                     c291adad-7b30-33c7-985c-46a5a1781143.roa (raw, json)
Hash identifier:          FqZvwQdAXydylRW6Qioa5YbiB5zWnFG6XWYZJWB2AbU=
Subject key identifier:   54:78:13:91:1A:B4:FA:5F:A2:7A:66:51:36:2F:44:6B:16:A5:B2:65
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D2F423D4A84F51A71592ED5C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c291adad-7b30-33c7-985c-46a5a1781143.roa
Signing time:             Thu 10 Mar 2022 05:00:00 +0000
ROA not before:           Thu 10 Mar 2022 05:00:00 +0000
ROA not after:            Thu 14 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        15.197.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2f:42:3d:4a:84:f5:1a:71:59:2e:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 10 05:00:00 2022 GMT
            Not After : Apr 14 04:00:00 2022 GMT
        Subject: CN=413c8ef6-72c1-41df-9ec7-e1d97ba55759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:f0:c4:d6:e7:3f:2b:1e:3c:89:1b:2a:ba:d5:
                    2c:07:7f:70:d8:aa:c3:df:5b:72:c1:74:e7:4f:cf:
                    b3:48:48:c5:a8:6a:9c:09:e0:98:b4:33:15:1f:b6:
                    0c:4c:b5:09:da:29:f9:c3:3f:6e:12:52:70:dc:f7:
                    1d:5b:6c:fc:80:23:07:64:74:52:87:85:95:40:44:
                    2d:fd:b6:16:25:f2:0c:fc:3a:9e:e7:59:1a:97:c9:
                    4a:03:ec:ef:28:3a:08:33:26:f9:aa:64:91:c9:a1:
                    14:81:52:c8:0d:24:e2:a5:71:fa:4f:9e:f3:26:a6:
                    a5:e9:fb:8c:4a:36:07:55:0a:7c:da:88:7a:ab:d8:
                    89:2c:d3:b1:f3:6a:c3:b8:da:2b:f8:20:69:b3:22:
                    6f:3e:b3:73:a1:fa:ae:5d:df:cf:39:6f:54:ae:53:
                    38:98:eb:89:9a:a9:98:e5:64:f2:50:2d:20:fa:9b:
                    29:87:d7:7d:ca:a3:ad:96:ee:e3:2b:64:7b:0a:00:
                    69:ee:08:59:7f:26:e4:00:67:45:d4:ba:0f:d0:ff:
                    db:a7:ea:e3:26:01:89:ab:00:6a:11:05:de:df:3b:
                    57:3a:ba:4c:a2:75:53:99:53:55:2f:99:94:61:b7:
                    23:a6:9d:7c:6e:d1:23:a9:a2:3c:f0:71:74:fa:d9:
                    d3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:78:13:91:1A:B4:FA:5F:A2:7A:66:51:36:2F:44:6B:16:A5:B2:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c291adad-7b30-33c7-985c-46a5a1781143.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.197.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:6e:cd:66:ba:3b:8d:89:6c:b0:40:e8:f0:1b:1f:3e:c3:8a:
         72:36:b6:b0:5b:15:98:8e:b1:fa:2b:95:4c:d0:29:58:80:70:
         2a:ea:af:70:39:3f:0a:12:8a:25:a7:6d:03:70:51:0b:78:a0:
         7a:37:0b:83:c2:c3:d9:b1:69:b8:4e:67:e5:16:9f:19:a0:a0:
         9b:92:e7:69:06:9f:24:b5:ab:e3:af:54:61:95:ce:ea:36:55:
         0f:8a:fe:ef:03:59:38:b0:05:87:2f:8d:5f:60:e7:c7:3d:55:
         66:16:41:34:d3:35:1d:76:86:e8:7c:a2:37:57:42:2a:ab:7b:
         80:8d:42:b2:9a:73:5c:d7:44:6b:df:d6:0d:52:7b:b3:13:eb:
         3e:b1:a3:d8:24:f9:ea:45:0a:e1:aa:d5:e5:81:24:16:3e:e7:
         46:4e:22:09:e7:b7:9d:8a:a4:3c:ed:a0:39:c0:9f:fa:4d:a1:
         7f:ef:13:25:7f:9d:a2:00:7b:ad:04:02:fc:ed:e3:47:ee:b1:
         fe:2a:b2:56:31:4f:8c:63:d6:b0:f1:a5:40:7d:2e:f9:9b:3b:
         92:c1:fc:1f:75:11:09:40:f8:44:a2:db:77:74:4b:b6:0c:7c:
         97:25:59:3a:06:18:7e:48:bb:2c:b3:5f:52:19:17:a7:b4:de:
         07:e0:1d:86
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0vQj1KhPUacVku1cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMxMDA1MDAwMFoXDTIyMDQxNDA0MDAwMFowLzEtMCsGA1UEAxMk
NDEzYzhlZjYtNzJjMS00MWRmLTllYzctZTFkOTdiYTU1NzU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+vDE1uc/Kx48iRsqutUsB39w2KrD31tywXTn
T8+zSEjFqGqcCeCYtDMVH7YMTLUJ2in5wz9uElJw3PcdW2z8gCMHZHRSh4WVQEQt
/bYWJfIM/Dqe51kal8lKA+zvKDoIMyb5qmSRyaEUgVLIDSTipXH6T57zJqal6fuM
SjYHVQp82oh6q9iJLNOx82rDuNor+CBpsyJvPrNzofquXd/POW9UrlM4mOuJmqmY
5WTyUC0g+psph9d9yqOtlu7jK2R7CgBp7ghZfybkAGdF1LoP0P/bp+rjJgGJqwBq
EQXe3ztXOrpMonVTmVNVL5mUYbcjpp18btEjqaI88HF0+tnTKQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFR4E5EatPpfonpmUTYvRGsWpbJlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYzI5MWFkYWQtN2IzMC0z
M2M3LTk4NWMtNDZhNWExNzgxMTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD8UwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAsm7NZro7jYlssEDo8BsfPsOKcja2sFsVmI6x+iuVTNApWIBwKuqvcDk/
ChKKJadtA3BRC3igejcLg8LD2bFpuE5n5RafGaCgm5LnaQafJLWr469UYZXO6jZV
D4r+7wNZOLAFhy+NX2Dnxz1VZhZBNNM1HXaG6HyiN1dCKqt7gI1CsppzXNdEa9/W
DVJ7sxPrPrGj2CT56kUK4arV5YEkFj7nRk4iCee3nYqkPO2gOcCf+k2hf+8TJX+d
ogB7rQQC/O3jR+6x/iqyVjFPjGPWsPGlQH0u+Zs7ksH8H3URCUD4RKLbd3RLtgx8
lyVZOgYYfki7LLNfUhkXp7TeB+Adhg==
-----END CERTIFICATE-----