Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c6392f26-0edb-3c02-ab70-ea5b99eb3544.roa
File:                     c6392f26-0edb-3c02-ab70-ea5b99eb3544.roa (raw, json)
Hash identifier:          qXn2nUVu9PZvEh1pk+5APlZLPmGmHagnAt2rLo+GT84=
Subject key identifier:   39:4B:A8:0F:53:59:EE:0C:E6:E3:16:59:A1:8A:A1:C8:39:F6:FB:40
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EDE240A9BFE7997A397F77880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c6392f26-0edb-3c02-ab70-ea5b99eb3544.roa
Signing time:             Wed 10 Aug 2022 12:00:00 +0000
ROA not before:           Wed 10 Aug 2022 12:00:00 +0000
ROA not after:            Thu 15 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        15.161.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:de:24:0a:9b:fe:79:97:a3:97:f7:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 10 12:00:00 2022 GMT
            Not After : Sep 15 04:00:00 2022 GMT
        Subject: CN=a1251ca6-3cac-4dce-b08b-da1fc5ee16b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:69:42:45:68:41:07:44:7e:68:d5:4a:b3:86:
                    c8:a0:24:7d:b7:96:6e:5a:60:f4:bb:69:0f:cc:0f:
                    19:a9:ab:cb:a7:f4:24:1a:18:3a:ba:7c:73:77:08:
                    4f:ac:ea:ae:72:5e:92:0b:d5:c3:e2:42:6a:c9:06:
                    23:f6:60:b7:60:a6:c3:85:4e:a2:8e:e4:8d:37:7f:
                    75:23:67:3d:ea:c9:9d:97:d6:f9:1d:3f:23:ee:b8:
                    a2:00:9f:e3:93:4b:c6:bf:9f:5c:8d:84:53:6c:d5:
                    b5:51:12:bf:ce:dc:ed:f1:4b:c4:6a:6c:90:25:41:
                    74:4d:2d:96:35:2c:bd:b5:09:ce:58:9b:f1:49:46:
                    07:f6:fa:d4:46:95:14:cb:e0:27:6b:d5:40:35:7e:
                    4c:dd:18:18:52:e5:ee:43:48:3b:ba:26:fb:f0:e7:
                    14:e1:3b:2c:2e:59:ca:62:14:0c:9c:fa:7d:b3:65:
                    a3:2b:c7:60:fb:90:b9:a9:fc:30:4f:b5:4d:04:44:
                    c6:16:b5:74:6a:80:d0:d2:13:91:75:d9:a2:f3:79:
                    7e:d1:3f:ad:b7:a2:88:79:c2:92:8b:1f:d3:d1:b3:
                    86:f7:76:2e:dc:ba:6d:3e:19:16:2d:4f:9e:6b:f7:
                    de:4f:71:77:f5:4e:45:df:da:38:8b:09:46:cb:20:
                    d7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4B:A8:0F:53:59:EE:0C:E6:E3:16:59:A1:8A:A1:C8:39:F6:FB:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c6392f26-0edb-3c02-ab70-ea5b99eb3544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.161.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:d5:08:4a:54:74:9a:7e:c7:14:f3:81:2c:f4:bd:db:15:12:
         27:b0:cb:8a:08:4a:25:75:61:51:29:d2:cc:93:58:e1:62:9c:
         34:ba:2f:41:e1:d4:ef:c9:00:3c:72:7a:ee:3c:eb:f4:b4:8c:
         12:74:3c:df:bd:fe:fc:f0:d8:dd:81:b5:e1:ef:5f:85:b1:30:
         34:77:89:93:05:fe:87:c1:d1:b3:e3:86:ca:4c:58:16:39:d5:
         35:f1:93:ec:fd:01:ab:26:79:f6:a0:5a:aa:e0:55:84:74:51:
         e5:d9:f9:85:af:0d:57:9c:67:e9:db:33:ed:cb:4e:8d:ce:fa:
         e7:e9:72:ed:47:a1:10:60:89:cf:d9:11:c0:09:60:56:ce:0f:
         98:ad:1a:f4:40:b6:e8:e4:74:b6:27:6e:12:d3:11:50:c9:e2:
         05:c6:23:dd:ac:e8:73:7e:b4:e7:16:5a:e8:ff:46:cd:89:b9:
         44:62:20:d6:b6:7e:0b:5d:75:19:45:87:73:26:b6:bf:25:38:
         76:4e:ea:4a:5b:c4:3c:67:92:09:58:63:e6:81:de:d1:f6:bb:
         9f:e4:62:dd:d9:10:4f:d8:eb:b1:61:cb:5b:2b:e8:1b:e0:c5:
         1f:09:42:c8:99:f3:17:39:c8:98:ac:11:c6:55:1c:48:e3:b5:
         38:ea:c1:2a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD7eJAqb/nmXo5f3eIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDgxMDEyMDAwMFoXDTIyMDkxNTA0MDAwMFowLzEtMCsGA1UEAxMk
YTEyNTFjYTYtM2NhYy00ZGNlLWIwOGItZGExZmM1ZWUxNmIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWlCRWhBB0R+aNVKs4bIoCR9t5ZuWmD0u2kP
zA8ZqavLp/QkGhg6unxzdwhPrOqucl6SC9XD4kJqyQYj9mC3YKbDhU6ijuSNN391
I2c96smdl9b5HT8j7riiAJ/jk0vGv59cjYRTbNW1URK/ztzt8UvEamyQJUF0TS2W
NSy9tQnOWJvxSUYH9vrURpUUy+Ana9VANX5M3RgYUuXuQ0g7uib78OcU4TssLlnK
YhQMnPp9s2WjK8dg+5C5qfwwT7VNBETGFrV0aoDQ0hORddmi83l+0T+tt6KIecKS
ix/T0bOG93Yu3LptPhkWLU+ea/feT3F39U5F39o4iwlGyyDXMwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDlLqA9TWe4M5uMWWaGKocg59vtAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYzYzOTJmMjYtMGVkYi0z
YzAyLWFiNzAtZWE1Yjk5ZWIzNTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD6EwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAKdUISlR0mn7HFPOBLPS92xUSJ7DLighKJXVhUSnSzJNY4WKcNLovQeHU
78kAPHJ67jzr9LSMEnQ8373+/PDY3YG14e9fhbEwNHeJkwX+h8HRs+OGykxYFjnV
NfGT7P0BqyZ59qBaquBVhHRR5dn5ha8NV5xn6dsz7ctOjc765+ly7UehEGCJz9kR
wAlgVs4PmK0a9EC26OR0tiduEtMRUMniBcYj3azoc3605xZa6P9GzYm5RGIg1rZ+
C111GUWHcya2vyU4dk7qSlvEPGeSCVhj5oHe0fa7n+Ri3dkQT9jrsWHLWyvoG+DF
HwlCyJnzFznImKwRxlUcSOO1OOrBKg==
-----END CERTIFICATE-----