Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fa834052-8983-36f4-8fcf-a6e7b34550a0.roa
File:                     fa834052-8983-36f4-8fcf-a6e7b34550a0.roa (raw, json)
Hash identifier:          GmJ+FnP8qpMm8VogX2xNKbfj9LoVBPcA3cmUf3fMD6I=
Subject key identifier:   8C:BD:A9:8C:E4:09:03:D1:9C:78:07:14:A0:77:C0:CB:95:19:31:0C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840444C643C754501330A2B3040
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fa834052-8983-36f4-8fcf-a6e7b34550a0.roa
Signing time:             Fri 16 Dec 2022 12:00:00 +0000
ROA not before:           Fri 16 Dec 2022 12:00:00 +0000
ROA not after:            Sat 21 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        35.71.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:44:4c:64:3c:75:45:01:33:0a:2b:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 16 12:00:00 2022 GMT
            Not After : Jan 21 05:00:00 2023 GMT
        Subject: CN=f4b1cef5-cd4d-4e0e-806e-f0f8614bb0cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:69:53:d9:cc:19:45:9c:78:09:9b:b1:f8:b6:
                    99:ba:32:84:0e:66:35:62:6a:20:db:51:d6:c6:6b:
                    5a:75:f6:af:4a:6d:ff:d6:c7:3a:4b:8e:e9:2c:ac:
                    13:c5:5f:6f:49:bb:fd:b4:f6:03:9a:72:d5:32:a4:
                    6d:6b:8c:76:64:1c:84:9a:b9:e3:72:c0:a9:ee:12:
                    bd:36:72:92:b5:45:19:3d:8b:87:6b:aa:38:32:61:
                    e8:65:3d:ec:73:44:20:26:53:84:4f:b4:0e:6e:e1:
                    dd:27:57:b9:08:04:d0:7b:eb:c1:d6:68:12:f5:e9:
                    e5:d5:85:b3:e0:1f:94:8f:25:85:62:8d:68:81:4e:
                    0d:0f:64:ac:62:28:85:5d:0f:4a:7e:63:bd:1c:99:
                    99:6e:a2:50:43:37:ca:24:00:97:d4:1f:f3:5b:86:
                    57:f3:e4:81:5e:a1:51:5c:a8:f2:aa:69:cc:84:fc:
                    20:16:ce:25:a2:0c:e3:38:6a:11:7b:60:2a:3a:95:
                    3c:9e:20:fc:0d:8e:dd:d6:8f:7c:54:29:c2:f8:54:
                    24:1e:e1:85:0b:d9:58:1e:d8:bf:51:e6:64:5d:d7:
                    f6:a4:0f:ba:cd:c9:e6:c7:65:c4:ae:72:14:fd:fb:
                    b5:f6:51:27:2c:3e:55:46:8e:44:b6:b6:fa:52:b5:
                    c1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BD:A9:8C:E4:09:03:D1:9C:78:07:14:A0:77:C0:CB:95:19:31:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fa834052-8983-36f4-8fcf-a6e7b34550a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.71.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:08:7e:b9:cd:fa:10:52:e2:b4:a8:1b:7a:48:d7:bb:e1:cb:
         78:db:e2:91:c1:b4:f7:c3:bd:86:6e:46:b8:8c:e4:8f:c2:ba:
         ad:11:a2:3a:c9:52:48:86:b3:3c:bd:3b:c1:c6:34:92:e5:4e:
         4d:56:ea:2d:16:f1:e1:54:f1:16:f9:1f:d6:12:68:a8:05:5c:
         83:bf:7d:32:5e:82:0c:8e:6d:c1:12:cd:80:43:1b:af:3d:ea:
         66:91:6a:e9:6d:ac:d3:e4:7f:5b:ce:62:d6:43:36:e7:33:75:
         cd:60:08:8b:35:14:02:07:93:0c:33:cd:c8:3f:46:f5:10:f8:
         ec:13:81:f7:39:7b:37:af:a4:ef:a1:bc:e1:8e:6b:49:cd:39:
         81:a2:31:34:bf:02:e3:97:1a:75:47:dc:de:89:29:26:0e:6a:
         47:74:ec:bc:4e:01:de:d2:ab:2e:04:80:4a:b5:15:7e:86:20:
         91:db:75:53:d9:d1:3f:05:1a:ef:3f:da:0f:23:6e:33:b9:de:
         61:52:7f:3d:2e:b6:3d:a1:09:19:9a:39:f6:9a:4b:1d:05:48:
         71:e2:37:18:85:f9:67:93:89:ed:99:e2:1e:bf:fd:90:b4:46:
         5b:ec:9e:47:2a:ab:80:a4:8f:1a:1a:e9:00:73:98:06:a4:b1:
         e8:1c:a0:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBETGQ8dUUBMworMEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxNjEyMDAwMFoXDTIzMDEyMTA1MDAwMFowLzEtMCsGA1UEAxMk
ZjRiMWNlZjUtY2Q0ZC00ZTBlLTgwNmUtZjBmODYxNGJiMGNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WlT2cwZRZx4CZux+LaZujKEDmY1Ymog21HW
xmtadfavSm3/1sc6S47pLKwTxV9vSbv9tPYDmnLVMqRta4x2ZByEmrnjcsCp7hK9
NnKStUUZPYuHa6o4MmHoZT3sc0QgJlOET7QObuHdJ1e5CATQe+vB1mgS9enl1YWz
4B+UjyWFYo1ogU4ND2SsYiiFXQ9KfmO9HJmZbqJQQzfKJACX1B/zW4ZX8+SBXqFR
XKjyqmnMhPwgFs4logzjOGoRe2AqOpU8niD8DY7d1o98VCnC+FQkHuGFC9lYHti/
UeZkXdf2pA+6zcnmx2XErnIU/fu19lEnLD5VRo5Etrb6UrXBDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIy9qYzkCQPRnHgHFKB3wMuVGTEMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZmE4MzQwNTItODk4My0z
NmY0LThmY2YtYTZlN2IzNDU1MGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI0eAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKgIfrnN+hBS4rSoG3pI17vhy3jb4pHBtPfDvYZuRriM5I/Cuq0RojrJ
UkiGszy9O8HGNJLlTk1W6i0W8eFU8Rb5H9YSaKgFXIO/fTJeggyObcESzYBDG689
6maRaultrNPkf1vOYtZDNuczdc1gCIs1FAIHkwwzzcg/RvUQ+OwTgfc5ezevpO+h
vOGOa0nNOYGiMTS/AuOXGnVH3N6JKSYOakd07LxOAd7Sqy4EgEq1FX6GIJHbdVPZ
0T8FGu8/2g8jbjO53mFSfz0utj2hCRmaOfaaSx0FSHHiNxiF+WeTie2Z4h6//ZC0
Rlvsnkcqq4Ckjxoa6QBzmAaksegcoAo=
-----END CERTIFICATE-----