Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ab55b8b-15cb-3a34-9dbb-f1f8e8e1ab4c.roa
File:                     5ab55b8b-15cb-3a34-9dbb-f1f8e8e1ab4c.roa (raw, json)
Hash identifier:          xO8espTnDC88GXBvG/AarWZn1I7pzj88CaPUaPGmOu0=
Subject key identifier:   EA:04:37:1F:9B:FC:2D:17:48:CB:7A:4A:86:06:6D:B7:EB:15:C1:3E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858406B0FCECEE04AF5ED3E1B1940
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ab55b8b-15cb-3a34-9dbb-f1f8e8e1ab4c.roa
Signing time:             Fri 30 Dec 2022 12:00:00 +0000
ROA not before:           Fri 30 Dec 2022 12:00:00 +0000
ROA not after:            Sat 04 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        52.0.0.0/11 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6b:0f:ce:ce:e0:4a:f5:ed:3e:1b:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 30 12:00:00 2022 GMT
            Not After : Feb  4 05:00:00 2023 GMT
        Subject: CN=27d18c58-dd74-4149-9042-afdc4c9aaaa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4e:7a:4e:3d:ab:09:37:28:fb:8e:8c:60:5a:
                    88:a4:fc:91:e8:b3:0c:0d:bc:1d:a7:53:22:ce:23:
                    12:60:ab:4c:02:fc:d1:18:e0:d7:af:d0:5f:24:0a:
                    50:f1:40:27:a8:79:b0:be:64:97:69:28:41:94:d8:
                    11:eb:37:0e:a0:90:03:9d:a3:b6:82:4d:c4:1f:d1:
                    fe:17:90:38:a5:36:ec:c4:ac:60:9a:df:d0:04:d5:
                    13:10:85:07:9a:f2:73:ba:c9:40:84:68:49:8f:4a:
                    5d:b7:af:1b:1a:6e:c7:a9:5a:64:16:06:2d:9d:8f:
                    95:5d:5c:fd:01:4a:ed:4d:5c:27:b2:61:03:be:b6:
                    bc:88:eb:ac:af:a9:47:0f:5b:0a:e0:aa:3c:37:1d:
                    74:5f:b1:a8:57:82:e6:3e:df:01:c4:4d:52:76:63:
                    84:5c:a0:9a:16:19:f4:a2:23:34:84:00:54:67:13:
                    63:81:3d:75:df:53:a6:7f:cd:13:4b:57:0e:04:1d:
                    47:5f:52:4c:b1:dc:e0:17:55:cc:ba:24:a2:aa:71:
                    1f:b1:76:d3:20:b7:6e:a6:46:7a:86:25:cb:eb:37:
                    37:a0:45:a0:c5:b4:87:7c:7b:c2:6b:d3:75:20:8f:
                    ca:d5:22:46:fe:56:e8:e6:51:cf:c1:95:9d:ce:3c:
                    3b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:04:37:1F:9B:FC:2D:17:48:CB:7A:4A:86:06:6D:B7:EB:15:C1:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ab55b8b-15cb-3a34-9dbb-f1f8e8e1ab4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.0.0.0/11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:32:d0:c4:f1:23:b4:b0:62:f9:25:b1:1b:d6:3a:66:37:77:
         ed:e4:d2:e4:8f:c4:84:b2:28:51:2c:27:c3:54:ff:23:5b:28:
         e3:70:4f:42:12:33:c4:f8:ec:42:61:2c:7f:a2:10:60:03:07:
         33:c5:cf:46:99:ce:76:a5:42:44:90:99:01:cd:35:eb:f7:ce:
         40:97:af:69:83:3b:5f:4b:1d:2e:77:79:b5:5b:47:4f:1d:ff:
         bb:c8:cc:8f:62:ea:8a:3b:fc:55:61:01:ae:05:0a:8f:50:0d:
         b9:ba:37:91:db:63:14:70:09:83:df:57:15:68:dc:1e:14:e0:
         a8:4f:1c:ee:ae:c5:21:e0:64:02:2b:0b:6b:7e:5a:6e:14:42:
         65:38:43:30:5d:3e:42:2f:d2:5d:fe:06:5b:3e:2b:71:00:d1:
         ab:93:f8:b7:90:d5:b1:c4:5d:97:d0:e6:56:2d:6a:36:08:be:
         87:b9:97:eb:1c:4d:26:b8:d4:fe:b3:a8:d5:d2:f1:40:85:ea:
         99:e2:4c:27:1e:e4:da:df:89:e9:aa:2c:d7:19:ee:de:fb:77:
         4c:58:2e:a5:5e:ac:43:b2:f4:6b:e0:91:89:14:7b:11:48:7d:
         e4:f8:d1:20:03:dd:bd:dd:5f:79:15:e2:83:91:87:60:75:8b:
         cb:9b:c0:b2
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBrD87O4Er17T4bGUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIzMDEyMDAwMFoXDTIzMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
MjdkMThjNTgtZGQ3NC00MTQ5LTkwNDItYWZkYzRjOWFhYWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyk56Tj2rCTco+46MYFqIpPyR6LMMDbwdp1Mi
ziMSYKtMAvzRGODXr9BfJApQ8UAnqHmwvmSXaShBlNgR6zcOoJADnaO2gk3EH9H+
F5A4pTbsxKxgmt/QBNUTEIUHmvJzuslAhGhJj0pdt68bGm7HqVpkFgYtnY+VXVz9
AUrtTVwnsmEDvra8iOusr6lHD1sK4Ko8Nx10X7GoV4LmPt8BxE1SdmOEXKCaFhn0
oiM0hABUZxNjgT1131Omf80TS1cOBB1HX1JMsdzgF1XMuiSiqnEfsXbTILdupkZ6
hiXL6zc3oEWgxbSHfHvCa9N1II/K1SJG/lbo5lHPwZWdzjw7JwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOoENx+b/C0XSMt6SoYGbbfrFcE+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNWFiNTViOGItMTVjYi0z
YTM0LTlkYmItZjFmOGU4ZTFhYjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMFNAAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAiTLQxPEjtLBi+SWxG9Y6Zjd37eTS5I/EhLIoUSwnw1T/I1so43BPQhIz
xPjsQmEsf6IQYAMHM8XPRpnOdqVCRJCZAc016/fOQJevaYM7X0sdLnd5tVtHTx3/
u8jMj2Lqijv8VWEBrgUKj1ANubo3kdtjFHAJg99XFWjcHhTgqE8c7q7FIeBkAisL
a35abhRCZThDMF0+Qi/SXf4GWz4rcQDRq5P4t5DVscRdl9DmVi1qNgi+h7mX6xxN
JrjU/rOo1dLxQIXqmeJMJx7k2t+J6aos1xnu3vt3TFgupV6sQ7L0a+CRiRR7EUh9
5PjRIAPdvd1feRXig5GHYHWLy5vAsg==
-----END CERTIFICATE-----