Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ca1f5f80-a81f-3904-be7c-e1efd877f09a.roa
File:                     ca1f5f80-a81f-3904-be7c-e1efd877f09a.roa (raw, json)
Hash identifier:          Y0a7ghWRRhKlqjYUeQSyQcMbZF93D1QLucSqdPX+w18=
Subject key identifier:   78:11:C0:FA:01:7F:88:99:22:3A:E9:4D:26:B0:DE:3D:AF:05:23:68
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840781E647AAAD90C72AA76F900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ca1f5f80-a81f-3904-be7c-e1efd877f09a.roa
Signing time:             Wed 04 Jan 2023 12:00:00 +0000
ROA not before:           Wed 04 Jan 2023 12:00:00 +0000
ROA not after:            Thu 09 Feb 2023 05:00:00 +0000
asID:                     6167
IP address blocks:        155.146.160.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:78:1e:64:7a:aa:d9:0c:72:aa:76:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan  4 12:00:00 2023 GMT
            Not After : Feb  9 05:00:00 2023 GMT
        Subject: CN=82d8c743-4c94-4141-a51b-f17f61b14654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:32:f0:85:f7:d6:33:c2:cc:5a:c2:ab:1d:
                    61:d0:a3:a4:75:cb:d2:93:bf:a2:30:7a:6a:2b:1a:
                    45:41:7d:11:9e:ca:35:50:ad:d4:94:22:dc:04:71:
                    50:7b:c8:cd:9d:f3:6e:5e:1f:dd:5b:2b:bb:70:fb:
                    60:9d:d3:92:34:14:8c:39:d9:2b:3e:bf:90:3b:c2:
                    57:db:b2:8f:16:be:58:6b:2f:18:83:a4:22:f2:e6:
                    ab:1b:ea:2f:bc:7e:ed:a5:d4:ad:b5:1d:c1:b4:09:
                    5c:14:be:ff:e1:4d:78:c8:21:99:98:4d:9d:15:5e:
                    02:7c:b3:78:cb:87:3a:9e:29:49:d9:22:ea:83:a6:
                    a6:f3:c4:c5:30:e6:27:fe:f4:54:b6:c7:40:b3:20:
                    d1:6e:53:91:6d:a4:50:cf:e3:84:c2:b2:be:4b:68:
                    43:41:f4:2e:fd:1a:aa:5d:d3:b6:c6:4e:fb:1a:44:
                    17:e1:cb:a1:ee:aa:76:14:63:77:c7:b8:75:7f:1f:
                    eb:d7:6a:26:c0:c0:88:4e:73:cf:19:d3:ee:f1:3e:
                    90:f7:28:ba:0a:25:62:b8:46:3b:3c:5a:ac:9b:2c:
                    02:02:61:cf:2c:bc:7b:4d:a4:a3:4d:64:43:f7:88:
                    ba:06:d9:57:f7:14:69:d3:8d:95:d5:96:c6:a7:3f:
                    46:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:11:C0:FA:01:7F:88:99:22:3A:E9:4D:26:B0:DE:3D:AF:05:23:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ca1f5f80-a81f-3904-be7c-e1efd877f09a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:fe:f1:42:01:35:6b:04:70:5e:38:f6:d3:1b:39:75:f2:97:
         9a:59:f2:1b:91:89:99:c6:b0:d9:a7:0f:bc:3f:61:5f:9f:15:
         5f:78:e4:4f:cc:18:f9:37:7e:43:52:99:e3:db:f3:51:03:d8:
         28:90:1d:31:d5:f9:72:71:49:6b:88:6c:dc:f5:d4:7b:57:b9:
         d1:d7:86:3f:41:0c:56:e0:3a:c8:9d:e9:09:e2:90:fe:e8:2f:
         8b:a2:e3:87:1d:5d:0d:eb:4c:c8:f2:f5:1b:c8:c1:60:49:72:
         78:fe:c8:67:7d:18:2a:e9:2f:c3:7f:75:29:45:92:43:28:85:
         e2:7d:3a:ba:40:5a:15:53:b8:d3:21:1e:ee:12:dc:e8:ae:b5:
         d3:24:55:cc:01:b6:97:a4:b1:e7:9d:e8:ad:23:6e:45:86:4f:
         0b:6f:6d:87:70:ad:a4:b3:b9:6a:8e:86:7c:53:eb:96:b7:7a:
         12:2f:5c:82:35:8d:9b:7b:6e:c3:d5:8b:fb:2d:0f:af:60:6e:
         e7:ae:c6:eb:aa:ee:68:b1:0e:4a:ec:74:08:49:80:14:e4:a5:
         1b:03:69:36:92:d9:56:02:8a:60:0e:20:9a:18:d9:aa:6e:da:
         cd:e8:7a:04:b0:bd:f9:5a:12:d8:6a:68:b4:7e:35:cd:92:c1:
         99:de:bb:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEB4HmR6qtkMcqp2+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEwNDEyMDAwMFoXDTIzMDIwOTA1MDAwMFowLzEtMCsGA1UEAxMk
ODJkOGM3NDMtNGM5NC00MTQxLWE1MWItZjE3ZjYxYjE0NjU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7Qy8IX31jPCzFrCqx1h0KOkdcvSk7+iMHpq
KxpFQX0Rnso1UK3UlCLcBHFQe8jNnfNuXh/dWyu7cPtgndOSNBSMOdkrPr+QO8JX
27KPFr5Yay8Yg6Qi8uarG+ovvH7tpdSttR3BtAlcFL7/4U14yCGZmE2dFV4CfLN4
y4c6nilJ2SLqg6am88TFMOYn/vRUtsdAsyDRblORbaRQz+OEwrK+S2hDQfQu/Rqq
XdO2xk77GkQX4cuh7qp2FGN3x7h1fx/r12omwMCITnPPGdPu8T6Q9yi6CiViuEY7
PFqsmywCAmHPLLx7TaSjTWRD94i6BtlX9xRp042V1ZbGpz9GlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHgRwPoBf4iZIjrpTSaw3j2vBSNoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvY2ExZjVmODAtYTgxZi0z
OTA0LWJlN2MtZTFlZmQ4NzdmMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm5KgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJX+8UIBNWsEcF449tMbOXXyl5pZ8huRiZnGsNmnD7w/YV+fFV945E/M
GPk3fkNSmePb81ED2CiQHTHV+XJxSWuIbNz11HtXudHXhj9BDFbgOsid6QnikP7o
L4ui44cdXQ3rTMjy9RvIwWBJcnj+yGd9GCrpL8N/dSlFkkMoheJ9OrpAWhVTuNMh
Hu4S3OiutdMkVcwBtpekseed6K0jbkWGTwtvbYdwraSzuWqOhnxT65a3ehIvXII1
jZt7bsPVi/stD69gbueuxuuq7mixDkrsdAhJgBTkpRsDaTaS2VYCimAOIJoY2apu
2s3oegSwvflaEthqaLR+Nc2SwZneu8c=
-----END CERTIFICATE-----