Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6adb8a4e-b19d-334c-bfcc-f269cc7cc880.roa
File:                     6adb8a4e-b19d-334c-bfcc-f269cc7cc880.roa (raw, json)
Hash identifier:          Kl8lNwvmlt60SF/z/iKDuSS933LJAeBxBksfN5uh2AU=
Subject key identifier:   66:B0:36:55:2A:D1:4F:B5:08:97:40:B4:D4:88:24:C0:3A:3C:E3:86
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858406B9D73ED2C067EC5793E1DC8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6adb8a4e-b19d-334c-bfcc-f269cc7cc880.roa
Signing time:             Fri 30 Dec 2022 12:00:00 +0000
ROA not before:           Fri 30 Dec 2022 12:00:00 +0000
ROA not after:            Sat 04 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        52.208.0.0/13 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6b:9d:73:ed:2c:06:7e:c5:79:3e:1d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 30 12:00:00 2022 GMT
            Not After : Feb  4 05:00:00 2023 GMT
        Subject: CN=4671caf8-af05-4ad1-960c-3ed251ee4c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e9:12:75:6f:dc:86:d4:9a:ab:eb:53:d8:b4:
                    33:34:45:8f:02:29:86:73:cd:6b:dd:c4:33:8c:5b:
                    6c:74:23:a2:b0:37:39:7a:2c:3d:a8:ef:50:39:30:
                    eb:10:46:ef:84:70:1a:7e:4d:0c:d6:39:12:05:ca:
                    9f:7e:4f:cf:ae:17:69:32:01:22:82:f3:19:5f:6c:
                    fc:55:00:a3:58:ab:b4:da:87:f2:7d:18:c0:41:eb:
                    77:1c:c9:03:67:21:28:e0:2d:fb:86:d4:56:04:94:
                    74:f3:81:d6:b7:47:2f:fe:27:a4:52:11:e6:76:86:
                    18:3f:13:02:58:f6:5e:94:f0:5e:9c:e3:b8:1d:f7:
                    f9:c0:6f:0a:88:52:fa:6c:02:2e:34:21:fa:83:d4:
                    41:90:48:af:9f:c0:96:6d:4d:86:e1:d6:7a:c7:d2:
                    17:f4:b8:06:e1:cf:d6:8e:d7:9f:38:71:07:70:61:
                    f6:bd:4f:f1:4d:dc:bd:ac:8d:43:fd:03:47:a1:de:
                    8d:dc:bf:e1:4f:d2:54:50:99:7e:8b:d4:63:50:e7:
                    7f:a3:ea:78:2a:5b:b8:f7:9c:c8:97:43:ea:45:4c:
                    19:84:06:01:b6:00:43:88:92:f7:91:e6:59:3a:b2:
                    92:69:e0:3e:84:e6:65:42:ce:23:3c:be:9d:e5:e9:
                    fd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B0:36:55:2A:D1:4F:B5:08:97:40:B4:D4:88:24:C0:3A:3C:E3:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6adb8a4e-b19d-334c-bfcc-f269cc7cc880.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.208.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:07:fb:a9:e9:ce:c3:62:84:e4:49:4d:6e:67:15:8d:d9:ff:
         d8:ff:5f:2c:b9:d4:07:16:d6:40:42:15:f2:7d:05:e6:41:ba:
         e8:93:6c:3b:5d:9f:eb:5f:70:5b:79:cd:c6:9b:be:31:ff:90:
         8f:26:d2:94:39:30:8a:cc:87:30:fc:ba:c2:b3:f4:03:c8:51:
         94:da:9c:2d:8a:f3:ea:df:c7:8a:ce:bc:b6:d6:5e:fb:28:8d:
         5c:7b:a1:07:cb:50:e2:5d:2a:d0:15:9e:c1:51:f6:30:c4:ce:
         77:2b:52:a4:fb:f8:0c:c0:0c:b3:35:31:b7:0e:e9:c7:ac:27:
         ea:26:ef:89:58:d7:15:64:10:5f:29:36:fd:ad:29:c2:3f:e2:
         ba:e7:88:7f:a8:38:20:36:e2:ea:54:1e:b4:6e:b1:43:da:3b:
         02:9b:00:40:27:66:f6:e8:b3:51:83:0a:63:b5:0e:a0:19:33:
         7a:43:d4:84:41:f7:d6:8e:d4:f0:38:76:91:37:b9:17:71:fe:
         80:9c:1e:46:1b:42:73:31:77:f5:e6:2d:1f:ee:14:9d:a9:e7:
         74:85:c4:6c:9e:7b:74:f8:dd:71:e5:2b:00:9a:10:c3:0f:91:
         a0:3b:ee:a9:94:a7:dd:9f:92:f8:ed:a2:98:bb:92:97:4c:70:
         16:18:01:8b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBrnXPtLAZ+xXk+HcgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIzMDEyMDAwMFoXDTIzMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
NDY3MWNhZjgtYWYwNS00YWQxLTk2MGMtM2VkMjUxZWU0YzkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ekSdW/chtSaq+tT2LQzNEWPAimGc81r3cQz
jFtsdCOisDc5eiw9qO9QOTDrEEbvhHAafk0M1jkSBcqffk/PrhdpMgEigvMZX2z8
VQCjWKu02ofyfRjAQet3HMkDZyEo4C37htRWBJR084HWt0cv/iekUhHmdoYYPxMC
WPZelPBenOO4Hff5wG8KiFL6bAIuNCH6g9RBkEivn8CWbU2G4dZ6x9IX9LgG4c/W
jtefOHEHcGH2vU/xTdy9rI1D/QNHod6N3L/hT9JUUJl+i9RjUOd/o+p4Klu495zI
l0PqRUwZhAYBtgBDiJL3keZZOrKSaeA+hOZlQs4jPL6d5en9pwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGawNlUq0U+1CJdAtNSIJMA6POOGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNmFkYjhhNGUtYjE5ZC0z
MzRjLWJmY2MtZjI2OWNjN2NjODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDNNAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZwf7qenOw2KE5ElNbmcVjdn/2P9fLLnUBxbWQEIV8n0F5kG66JNsO12f
619wW3nNxpu+Mf+QjybSlDkwisyHMPy6wrP0A8hRlNqcLYrz6t/His68ttZe+yiN
XHuhB8tQ4l0q0BWewVH2MMTOdytSpPv4DMAMszUxtw7px6wn6ibviVjXFWQQXyk2
/a0pwj/iuueIf6g4IDbi6lQetG6xQ9o7ApsAQCdm9uizUYMKY7UOoBkzekPUhEH3
1o7U8Dh2kTe5F3H+gJweRhtCczF39eYtH+4UnanndIXEbJ57dPjdceUrAJoQww+R
oDvuqZSn3Z+S+O2imLuSl0xwFhgBiw==
-----END CERTIFICATE-----