Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9f2c3f57-30b8-31bd-995e-06488067417d.roa
File:                     9f2c3f57-30b8-31bd-995e-06488067417d.roa (raw, json)
Hash identifier:          na+VoQb6kYYL1KtLfwFrhyYukfdASItAvybVCumszs0=
Subject key identifier:   2C:F4:C6:4A:C5:4F:9C:BA:EE:5E:24:41:A7:06:5A:B7:92:F3:9A:E3
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858409FEE48C5110B5A94883C1C00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9f2c3f57-30b8-31bd-995e-06488067417d.roa
Signing time:             Wed 18 Jan 2023 12:00:00 +0000
ROA not before:           Wed 18 Jan 2023 12:00:00 +0000
ROA not after:            Thu 23 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        15.234.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:9f:ee:48:c5:11:0b:5a:94:88:3c:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 18 12:00:00 2023 GMT
            Not After : Feb 23 05:00:00 2023 GMT
        Subject: CN=479dac89-0153-4811-8cd3-d053e077e2fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:63:9a:7f:11:8b:9c:2a:08:b2:43:62:82:17:
                    64:51:96:01:25:e2:98:c2:3d:60:99:b9:8e:1f:db:
                    ee:2d:81:42:17:00:5a:a0:0e:6e:b9:f0:83:37:ca:
                    ed:9b:a6:3a:96:76:94:cf:4d:0b:e4:18:42:45:c8:
                    39:34:a2:0e:8c:35:bc:77:b5:f5:5e:f3:bc:6b:83:
                    80:aa:43:f0:c3:b2:3d:ee:59:61:ee:b5:87:cb:c4:
                    d5:cb:52:a7:17:7c:79:63:52:de:54:81:e4:0b:dc:
                    19:0f:be:73:a5:91:39:b0:11:aa:b1:17:2f:50:fc:
                    a6:86:06:10:ca:9c:51:f3:9b:33:52:13:3c:51:d3:
                    30:5f:70:34:f9:02:0a:2b:bf:22:45:62:6e:31:62:
                    81:e9:3e:4b:b6:a3:89:24:6c:5a:25:0f:3a:52:73:
                    ff:56:db:86:4a:0a:bc:93:75:7e:c6:37:40:69:7b:
                    cc:59:f5:1e:ae:5f:27:93:ab:92:c7:5b:ed:39:45:
                    cb:98:6b:a2:e1:f8:e8:10:e9:93:df:a0:26:d4:12:
                    0e:e6:d4:b4:50:13:fd:81:93:c7:72:20:70:a8:d6:
                    60:81:99:b3:83:ae:07:4e:ee:0c:a8:b1:4f:57:70:
                    47:e0:16:4e:6e:38:07:af:0b:eb:f0:33:56:2b:d4:
                    f4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F4:C6:4A:C5:4F:9C:BA:EE:5E:24:41:A7:06:5A:B7:92:F3:9A:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9f2c3f57-30b8-31bd-995e-06488067417d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.234.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:7c:1b:94:9c:a5:87:ba:ce:bc:11:6f:6e:54:be:47:f8:96:
         8b:4f:dc:2e:e6:bb:73:3e:95:18:3d:de:7f:86:7d:b7:b1:b6:
         5a:96:b8:d7:22:ff:11:ec:6e:61:60:6e:3c:fe:eb:8d:5f:fd:
         97:bd:c3:f4:7a:9b:19:58:04:dc:94:9a:7e:d5:1e:f2:20:94:
         e6:77:41:57:a7:78:c7:06:b5:db:94:ef:a6:ad:53:7f:83:a6:
         23:e2:61:21:da:cf:11:e9:eb:03:e8:0b:d0:8d:6d:0b:99:dc:
         ce:61:41:99:bf:df:6c:0d:22:d5:36:4b:53:43:f7:d9:45:b9:
         ba:b1:c4:ab:e9:ad:77:28:86:13:eb:e9:8e:09:9e:9d:2c:22:
         b3:23:bd:25:a9:f3:d9:47:c1:49:35:2e:16:da:56:a3:1c:ee:
         6c:f2:70:05:11:76:64:e2:45:f9:68:52:1b:f0:c4:17:f2:f4:
         46:b9:e3:57:56:4f:e9:43:46:ca:ac:f4:1d:60:d3:07:f9:1a:
         b7:90:5b:0c:ac:40:af:46:db:1d:8f:ad:1d:04:50:6f:2f:18:
         ca:b5:3b:5d:d5:b3:0e:2b:9a:7a:26:a1:77:59:93:e4:db:fb:
         2d:7d:87:d8:d9:d4:12:9f:ce:4a:63:6a:7e:c8:9e:10:62:fc:
         f8:f0:d0:59
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECf7kjFEQtalIg8HAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDExODEyMDAwMFoXDTIzMDIyMzA1MDAwMFowLzEtMCsGA1UEAxMk
NDc5ZGFjODktMDE1My00ODExLThjZDMtZDA1M2UwNzdlMmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWOafxGLnCoIskNighdkUZYBJeKYwj1gmbmO
H9vuLYFCFwBaoA5uufCDN8rtm6Y6lnaUz00L5BhCRcg5NKIOjDW8d7X1XvO8a4OA
qkPww7I97llh7rWHy8TVy1KnF3x5Y1LeVIHkC9wZD75zpZE5sBGqsRcvUPymhgYQ
ypxR85szUhM8UdMwX3A0+QIKK78iRWJuMWKB6T5LtqOJJGxaJQ86UnP/VtuGSgq8
k3V+xjdAaXvMWfUerl8nk6uSx1vtOUXLmGui4fjoEOmT36Am1BIO5tS0UBP9gZPH
ciBwqNZggZmzg64HTu4MqLFPV3BH4BZObjgHrwvr8DNWK9T06QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCz0xkrFT5y67l4kQacGWreS85rjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOWYyYzNmNTctMzBiOC0z
MWJkLTk5NWUtMDY0ODgwNjc0MTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD+owVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAVXwblJylh7rOvBFvblS+R/iWi0/cLua7cz6VGD3ef4Z9t7G2Wpa41yL/
EexuYWBuPP7rjV/9l73D9HqbGVgE3JSaftUe8iCU5ndBV6d4xwa125Tvpq1Tf4Om
I+JhIdrPEenrA+gL0I1tC5nczmFBmb/fbA0i1TZLU0P32UW5urHEq+mtdyiGE+vp
jgmenSwisyO9Janz2UfBSTUuFtpWoxzubPJwBRF2ZOJF+WhSG/DEF/L0RrnjV1ZP
6UNGyqz0HWDTB/kat5BbDKxAr0bbHY+tHQRQby8YyrU7XdWzDiuaeiahd1mT5Nv7
LX2H2NnUEp/OSmNqfsieEGL8+PDQWQ==
-----END CERTIFICATE-----