Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f19e1a0d-4fb5-3827-add6-176017cc98e0.roa
File:                     f19e1a0d-4fb5-3827-add6-176017cc98e0.roa (raw, json)
Hash identifier:          XOIu3nmJ8k6hyTH1uYHIO+rn++asRdARRPTHVk5qVfY=
Subject key identifier:   1B:14:55:67:61:50:4C:27:47:A3:D2:22:51:78:4D:D9:E5:ED:40:1D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F5B640E9122B0F15E1DAD8460
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f19e1a0d-4fb5-3827-add6-176017cc98e0.roa
Signing time:             Sat 24 Sep 2022 12:00:00 +0000
ROA not before:           Sat 24 Sep 2022 12:00:00 +0000
ROA not after:            Sun 30 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        144.220.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5b:64:0e:91:22:b0:f1:5e:1d:ad:84:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 24 12:00:00 2022 GMT
            Not After : Oct 30 04:00:00 2022 GMT
        Subject: CN=fb54c41c-abfa-4b4c-bda8-a9a5a04e7bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d8:90:e0:de:55:66:e7:58:92:81:86:a2:93:
                    c1:db:cc:92:10:85:c3:5c:98:ce:14:df:63:78:d1:
                    c6:b7:21:08:1a:33:30:87:1b:0f:8f:a7:c9:30:bb:
                    a2:79:57:d8:d8:62:8f:3d:87:f8:b1:23:45:dc:03:
                    92:f6:66:ed:f1:34:db:ce:61:28:bf:8a:6f:25:a5:
                    78:10:95:c9:a1:44:45:37:07:60:ab:06:92:2a:50:
                    1e:37:7c:87:8d:01:d5:e9:e5:13:c8:d1:47:1e:48:
                    23:60:cb:59:b1:1e:ed:91:04:b7:0d:8b:f6:32:c0:
                    8b:21:c9:f2:4d:0d:43:3a:12:af:bc:e4:5e:18:15:
                    a0:87:12:32:bb:c2:20:c2:21:91:94:fd:04:df:f8:
                    ce:42:54:e9:e5:fd:8e:07:5f:5f:b9:ab:fe:36:32:
                    c7:20:c6:73:70:5e:e7:bb:b9:88:21:92:c8:c8:23:
                    87:f2:9b:04:78:4e:94:dc:98:bd:76:68:bd:3a:f8:
                    4e:65:4f:88:b1:42:bd:e8:92:6c:d9:a9:2d:76:e3:
                    cc:88:90:0b:0c:b2:82:aa:4d:38:a0:88:9d:6e:6f:
                    ad:f8:64:b3:ea:6f:1b:4b:c5:7e:32:76:25:19:0d:
                    29:6a:19:b7:d4:05:cf:48:12:bb:5c:6d:65:87:27:
                    a2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:14:55:67:61:50:4C:27:47:A3:D2:22:51:78:4D:D9:E5:ED:40:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f19e1a0d-4fb5-3827-add6-176017cc98e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.220.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:4d:65:a3:e8:36:87:6d:c5:8c:bb:8b:72:f2:cb:88:07:91:
         c8:ab:b0:6a:d9:ec:eb:f7:96:41:b1:3f:4f:73:b6:3d:a7:e4:
         47:f5:c9:9e:5e:4a:d0:3c:bb:97:0b:58:21:35:2f:db:a2:6f:
         0b:d5:7f:b3:e1:1c:d4:ce:9d:e0:7f:66:cc:8d:02:43:64:45:
         7e:b0:fe:c2:ee:40:38:18:6a:cc:b4:65:12:9c:d8:49:ce:2c:
         b9:5d:d7:85:13:ec:25:3c:0d:4b:9d:f1:2d:6d:b7:34:45:ac:
         bd:5a:8a:b8:6b:a3:55:c2:29:36:84:37:45:39:e3:d5:5c:17:
         1a:02:d0:2a:6a:f6:09:0e:ce:9f:04:c1:83:1e:ec:8c:4b:83:
         26:5a:b9:78:81:f7:cf:72:78:ca:36:b8:d1:60:8e:fd:87:8c:
         df:e6:2d:dc:44:9d:47:58:72:c6:55:9f:f0:0d:9e:32:c6:10:
         42:9a:9d:a3:b1:b4:14:66:52:76:3d:99:2b:e3:c9:7a:5a:c3:
         0c:a7:46:07:40:cc:94:a5:61:5f:a7:3c:9c:c4:0a:dc:a7:d0:
         bb:9b:1f:3a:7b:0e:dc:eb:d4:11:fb:0a:14:03:a1:8a:ca:59:
         ed:65:ce:36:b6:5f:3e:49:c5:c1:fa:5f:6a:6d:5a:d1:ee:52:
         ce:f6:1b:18
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9bZA6RIrDxXh2thGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkyNDEyMDAwMFoXDTIyMTAzMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZmI1NGM0MWMtYWJmYS00YjRjLWJkYTgtYTlhNWEwNGU3YmMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNiQ4N5VZudYkoGGopPB28ySEIXDXJjOFN9j
eNHGtyEIGjMwhxsPj6fJMLuieVfY2GKPPYf4sSNF3AOS9mbt8TTbzmEov4pvJaV4
EJXJoURFNwdgqwaSKlAeN3yHjQHV6eUTyNFHHkgjYMtZsR7tkQS3DYv2MsCLIcny
TQ1DOhKvvOReGBWghxIyu8IgwiGRlP0E3/jOQlTp5f2OB19fuav+NjLHIMZzcF7n
u7mIIZLIyCOH8psEeE6U3Ji9dmi9OvhOZU+IsUK96JJs2aktduPMiJALDLKCqk04
oIidbm+t+GSz6m8bS8V+MnYlGQ0pahm31AXPSBK7XG1lhyei5QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBsUVWdhUEwnR6PSIlF4Tdnl7UAdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZjE5ZTFhMGQtNGZiNS0z
ODI3LWFkZDYtMTc2MDE3Y2M5OGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkNwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAnE1lo+g2h23FjLuLcvLLiAeRyKuwatns6/eWQbE/T3O2PafkR/XJnl5K
0Dy7lwtYITUv26JvC9V/s+Ec1M6d4H9mzI0CQ2RFfrD+wu5AOBhqzLRlEpzYSc4s
uV3XhRPsJTwNS53xLW23NEWsvVqKuGujVcIpNoQ3RTnj1VwXGgLQKmr2CQ7OnwTB
gx7sjEuDJlq5eIH3z3J4yja40WCO/YeM3+Yt3ESdR1hyxlWf8A2eMsYQQpqdo7G0
FGZSdj2ZK+PJelrDDKdGB0DMlKVhX6c8nMQK3KfQu5sfOnsO3OvUEfsKFAOhispZ
7WXONrZfPknFwfpfam1a0e5SzvYbGA==
-----END CERTIFICATE-----