Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b0a56b82-d1aa-3ee3-a42f-e1d829714976.roa
File:                     b0a56b82-d1aa-3ee3-a42f-e1d829714976.roa (raw, json)
Hash identifier:          kNUSVUZZlcQBeJXrQyF5LdSXE/TnUBjeMzmZ3jqT+4U=
Subject key identifier:   68:5B:E5:DC:43:B9:8D:C8:F9:B2:E7:03:FC:E0:89:55:E5:81:F7:7E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840680218CD0F9F01F0CF399800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b0a56b82-d1aa-3ee3-a42f-e1d829714976.roa
Signing time:             Thu 29 Dec 2022 12:00:00 +0000
ROA not before:           Thu 29 Dec 2022 12:00:00 +0000
ROA not after:            Fri 03 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        35.152.0.0/13 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:68:02:18:cd:0f:9f:01:f0:cf:39:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 29 12:00:00 2022 GMT
            Not After : Feb  3 05:00:00 2023 GMT
        Subject: CN=f91a9c8d-3df7-42b5-9a25-4d63009296c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:91:41:f3:bc:b3:c0:b1:0c:b0:f0:47:d3:2c:
                    e4:60:bf:a9:96:47:97:a3:b8:6e:03:6d:01:46:22:
                    29:44:dd:be:5e:36:5b:a4:cf:e1:e5:1f:e0:60:f7:
                    81:7d:0c:e9:cc:b4:17:22:16:fb:54:8e:32:65:fc:
                    ed:b2:09:58:4f:f5:43:bb:51:fb:23:1e:ae:dd:e9:
                    a0:9a:94:59:59:86:a6:3d:00:9b:0c:25:9e:2a:6c:
                    68:dd:b9:b1:69:a5:a2:42:31:b3:6d:d6:47:54:0e:
                    1b:c4:bf:0d:23:38:ab:e4:ad:d8:63:90:a2:08:a2:
                    f0:5f:7e:8d:9d:77:86:b7:74:7f:28:19:c6:83:80:
                    74:a3:3b:3d:8f:90:c4:4b:bc:c7:e5:c9:77:c6:e8:
                    8c:40:08:a6:e3:24:0a:60:6d:f3:e3:ce:03:a3:b6:
                    ee:99:f9:7e:2a:1f:70:d6:95:21:9b:b6:87:e9:ed:
                    ce:6d:c4:14:07:19:89:b6:f8:40:dd:75:83:c5:2d:
                    95:80:04:f1:5d:51:d8:6b:78:2f:22:74:c2:a5:5a:
                    36:b9:aa:70:33:ce:d8:04:7c:9a:5c:2c:b8:92:1d:
                    10:02:ec:11:e3:a5:26:e2:e5:cc:29:29:86:3e:d2:
                    36:c0:70:1b:ca:0c:6e:d5:b8:87:f0:7f:f2:dc:c7:
                    d9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5B:E5:DC:43:B9:8D:C8:F9:B2:E7:03:FC:E0:89:55:E5:81:F7:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b0a56b82-d1aa-3ee3-a42f-e1d829714976.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.152.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:a4:a1:eb:d9:82:63:bf:b9:34:d2:33:a1:e6:ee:99:d5:b2:
         eb:f1:71:26:ac:7d:b7:9d:1f:cd:ac:df:59:67:06:00:30:0a:
         be:5d:ed:9b:1f:13:45:d8:70:f8:0f:3b:72:25:ac:57:db:f0:
         bc:23:e5:93:13:9c:09:4a:8c:60:f5:f3:40:7c:52:7b:3b:bb:
         26:cc:86:19:aa:68:17:44:67:c2:db:ad:12:46:83:08:01:a6:
         d6:62:d8:1a:1c:a0:f1:a0:af:d2:96:35:c1:f1:ea:d2:09:41:
         c0:c1:e3:cc:a1:ba:55:4d:4b:2a:c5:73:4f:fb:ac:20:3d:58:
         b7:c9:6d:5b:2b:b6:24:56:cb:a3:65:27:df:c5:7c:30:20:98:
         76:68:e3:96:7f:de:ae:77:f0:a2:aa:d2:f0:6b:ef:ee:9c:ea:
         d1:dc:3f:e2:e8:cc:e9:0e:b8:6c:e2:41:d4:d6:8a:df:44:b7:
         13:e9:ef:07:9a:86:5c:57:23:82:75:61:66:d7:74:4a:22:c4:
         31:4e:2f:64:f8:1a:b8:fa:1a:bc:c2:dc:ec:69:30:2a:29:aa:
         6f:61:7e:58:26:f1:0c:67:2a:7d:de:50:cb:43:2a:d4:82:69:
         0f:6b:d1:d8:0a:fe:7e:e2:7e:6a:93:a1:d9:5a:21:78:51:fd:
         7c:79:22:e0
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBoAhjND58B8M85mAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIyOTEyMDAwMFoXDTIzMDIwMzA1MDAwMFowLzEtMCsGA1UEAxMk
ZjkxYTljOGQtM2RmNy00MmI1LTlhMjUtNGQ2MzAwOTI5NmM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpFB87yzwLEMsPBH0yzkYL+plkeXo7huA20B
RiIpRN2+XjZbpM/h5R/gYPeBfQzpzLQXIhb7VI4yZfztsglYT/VDu1H7Ix6u3emg
mpRZWYamPQCbDCWeKmxo3bmxaaWiQjGzbdZHVA4bxL8NIzir5K3YY5CiCKLwX36N
nXeGt3R/KBnGg4B0ozs9j5DES7zH5cl3xuiMQAim4yQKYG3z484Do7bumfl+Kh9w
1pUhm7aH6e3ObcQUBxmJtvhA3XWDxS2VgATxXVHYa3gvInTCpVo2uapwM87YBHya
XCy4kh0QAuwR46Um4uXMKSmGPtI2wHAbygxu1biH8H/y3MfZxwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGhb5dxDuY3I+bLnA/zgiVXlgfd+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYjBhNTZiODItZDFhYS0z
ZWUzLWE0MmYtZTFkODI5NzE0OTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDI5gwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAnaSh69mCY7+5NNIzoebumdWy6/FxJqx9t50fzazfWWcGADAKvl3tmx8T
Rdhw+A87ciWsV9vwvCPlkxOcCUqMYPXzQHxSezu7JsyGGapoF0RnwtutEkaDCAGm
1mLYGhyg8aCv0pY1wfHq0glBwMHjzKG6VU1LKsVzT/usID1Yt8ltWyu2JFbLo2Un
38V8MCCYdmjjln/ernfwoqrS8Gvv7pzq0dw/4ujM6Q64bOJB1NaK30S3E+nvB5qG
XFcjgnVhZtd0SiLEMU4vZPgauPoavMLc7GkwKimqb2F+WCbxDGcqfd5Qy0Mq1IJp
D2vR2Ar+fuJ+apOh2VoheFH9fHki4A==
-----END CERTIFICATE-----