Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0ea60da9-a507-393e-a9ef-35f3589ccd1b.roa
File:                     0ea60da9-a507-393e-a9ef-35f3589ccd1b.roa (raw, json)
Hash identifier:          Wmww8fKaxALBQheacjWMsWaHA1sAnXbF3R1tb5ANiUs=
Subject key identifier:   11:DE:E6:EE:C0:B8:9F:C9:AF:DC:7A:D0:09:DD:AA:C8:1D:53:81:BE
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840ADEB47EBB00DE8B955D59E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0ea60da9-a507-393e-a9ef-35f3589ccd1b.roa
Signing time:             Mon 23 Jan 2023 12:00:00 +0000
ROA not before:           Mon 23 Jan 2023 12:00:00 +0000
ROA not after:            Tue 28 Feb 2023 05:00:00 +0000
asID:                     22394
IP address blocks:        155.146.16.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:ad:eb:47:eb:b0:0d:e8:b9:55:d5:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 23 12:00:00 2023 GMT
            Not After : Feb 28 05:00:00 2023 GMT
        Subject: CN=cd49e4ab-5bfd-4a45-8e0f-81d13bc17577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:91:ed:e9:46:51:2e:19:bf:41:f1:ed:56:bc:
                    58:2b:2f:f3:6c:fd:b8:13:28:50:83:18:0c:1c:67:
                    ec:46:5a:04:c9:bd:f6:08:02:8f:c7:29:d2:76:56:
                    45:12:4d:85:08:d4:24:f2:0c:0d:bf:45:b4:c5:e1:
                    1c:d1:0d:ce:dd:8f:3e:b3:9b:af:c7:c1:d3:76:70:
                    bc:03:71:ac:f4:c5:f0:e3:1e:8c:14:97:c1:b9:25:
                    20:cf:17:7e:3a:f8:37:9f:38:1b:a0:d3:2b:f0:3d:
                    fd:c3:cd:e3:8d:29:35:9c:94:60:af:e6:a7:6d:8c:
                    ac:cd:7f:ab:3a:80:b7:37:bb:74:37:6a:0c:16:8a:
                    83:6a:97:74:de:2c:e0:d8:c9:6f:46:66:b4:3d:9e:
                    30:16:5c:65:68:28:bc:c6:d5:80:70:b7:b8:9c:de:
                    e5:06:74:71:47:0f:4b:68:a2:71:24:c0:b6:3b:94:
                    44:d0:34:7a:f4:95:e4:26:de:9a:27:6e:ad:81:d7:
                    2d:e6:b5:9b:69:2b:b4:83:a5:d1:34:35:ae:1e:6f:
                    dc:26:41:ad:56:d2:6b:44:7d:84:df:4f:11:69:37:
                    01:38:ad:25:2a:08:79:d0:18:d7:e4:24:ba:47:bd:
                    d4:de:41:37:5c:0b:c9:4d:67:b4:5e:86:c8:ff:aa:
                    64:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DE:E6:EE:C0:B8:9F:C9:AF:DC:7A:D0:09:DD:AA:C8:1D:53:81:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0ea60da9-a507-393e-a9ef-35f3589ccd1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:7e:17:0b:d7:23:3b:d1:36:ed:60:ac:c6:e8:96:ad:10:4e:
         c4:7c:2e:90:6b:e5:7a:8a:44:cd:40:25:fb:6f:b4:74:5c:cd:
         66:38:24:5c:cd:91:a3:8f:63:e4:bd:38:fd:be:09:f4:4c:62:
         76:5f:73:e4:8f:97:42:f4:c2:84:dd:5e:ea:6e:8b:c4:2d:6f:
         a7:d8:76:39:ac:d7:d5:04:80:97:b8:ff:4a:24:fc:7d:54:72:
         f9:4d:5e:cd:fa:ab:84:7c:16:98:9a:c1:e4:6d:d3:76:c0:74:
         02:11:be:17:26:6f:83:14:1e:62:0a:e4:17:68:13:62:1d:39:
         a7:15:81:2f:f3:c7:69:47:aa:bf:a7:b6:4d:a5:6f:e9:7a:c0:
         76:21:57:47:c4:1b:4e:48:7d:c9:61:9b:57:3d:8d:ee:28:3d:
         c0:a1:89:69:8f:02:29:62:01:4e:db:1b:1c:7e:cb:08:7a:52:
         21:9a:80:7e:4e:0a:ee:06:1d:27:33:1f:6d:ac:8c:f6:a7:ed:
         b8:6d:5b:c4:41:1f:8a:a2:70:58:5a:1c:d1:10:95:af:c9:3d:
         00:8e:23:85:08:49:fb:27:ca:aa:0e:a7:f6:02:f9:50:f4:d2:
         4c:6e:29:3c:d6:cc:94:2e:fe:77:11:5b:67:a5:64:67:56:ba:
         54:b3:41:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWECt60frsA3ouVXVngAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEyMzEyMDAwMFoXDTIzMDIyODA1MDAwMFowLzEtMCsGA1UEAxMk
Y2Q0OWU0YWItNWJmZC00YTQ1LThlMGYtODFkMTNiYzE3NTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspHt6UZRLhm/QfHtVrxYKy/zbP24EyhQgxgM
HGfsRloEyb32CAKPxynSdlZFEk2FCNQk8gwNv0W0xeEc0Q3O3Y8+s5uvx8HTdnC8
A3Gs9MXw4x6MFJfBuSUgzxd+Ovg3nzgboNMr8D39w83jjSk1nJRgr+anbYyszX+r
OoC3N7t0N2oMFoqDapd03izg2MlvRma0PZ4wFlxlaCi8xtWAcLe4nN7lBnRxRw9L
aKJxJMC2O5RE0DR69JXkJt6aJ26tgdct5rWbaSu0g6XRNDWuHm/cJkGtVtJrRH2E
308RaTcBOK0lKgh50BjX5CS6R73U3kE3XAvJTWe0XobI/6pktQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBHe5u7AuJ/Jr9x60AndqsgdU4G+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMGVhNjBkYTktYTUwNy0z
OTNlLWE5ZWYtMzVmMzU4OWNjZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm5IQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABB+FwvXIzvRNu1grMbolq0QTsR8LpBr5XqKRM1AJftvtHRczWY4JFzN
kaOPY+S9OP2+CfRMYnZfc+SPl0L0woTdXupui8Qtb6fYdjms19UEgJe4/0ok/H1U
cvlNXs36q4R8FpiaweRt03bAdAIRvhcmb4MUHmIK5BdoE2IdOacVgS/zx2lHqr+n
tk2lb+l6wHYhV0fEG05Ifclhm1c9je4oPcChiWmPAiliAU7bGxx+ywh6UiGagH5O
Cu4GHSczH22sjPan7bhtW8RBH4qicFhaHNEQla/JPQCOI4UISfsnyqoOp/YC+VD0
0kxuKTzWzJQu/ncRW2elZGdWulSzQSQ=
-----END CERTIFICATE-----