Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cae432c5-2b08-30f0-9408-be6586e40c62.roa
File:                     cae432c5-2b08-30f0-9408-be6586e40c62.roa (raw, json)
Hash identifier:          9qNUaKMBCqfSsKj/sgLl3jYGfLBfAK0coRxdyHLl8Yw=
Subject key identifier:   C2:98:EB:72:1D:F0:3B:36:A6:7E:A0:97:C1:F4:57:61:5D:78:ED:56
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DCF2B52B71DE0B2A58FC4E700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cae432c5-2b08-30f0-9408-be6586e40c62.roa
Signing time:             Thu 05 May 2022 12:00:00 +0000
ROA not before:           Thu 05 May 2022 12:00:00 +0000
ROA not after:            Fri 10 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        35.96.0.0/12 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cf:2b:52:b7:1d:e0:b2:a5:8f:c4:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  5 12:00:00 2022 GMT
            Not After : Jun 10 04:00:00 2022 GMT
        Subject: CN=dc3ab289-8d65-4f36-be78-5ae41d46c3f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b6:06:39:fa:32:a1:f5:c8:d7:3a:2a:ef:7d:
                    49:03:c0:5f:2c:ff:b7:bc:47:d9:78:1c:ab:ef:e9:
                    1d:ac:75:ae:3d:12:48:cc:04:12:dc:af:33:44:f0:
                    c7:3c:a8:78:da:c8:9c:c9:99:9e:71:44:75:7a:22:
                    74:3a:fe:ee:5f:1e:35:1c:ae:64:9a:77:7f:3c:fc:
                    81:a9:55:9e:1b:ee:56:8f:09:da:9f:bd:68:fe:4d:
                    d0:5e:5a:df:b5:8a:96:c4:62:3b:e3:13:6e:a0:e7:
                    be:f3:78:14:59:cc:f9:68:d6:50:4d:2a:c1:f1:d1:
                    ef:39:34:0b:17:67:d9:26:c3:b6:30:2d:5e:dc:31:
                    50:d7:fa:40:93:4b:95:7b:19:97:af:1d:4f:fc:51:
                    55:f3:e4:2a:68:4a:9e:47:df:e9:0e:39:b0:1c:02:
                    2f:e8:a6:61:09:4d:0e:3b:50:b7:13:63:93:f2:a3:
                    09:f5:14:7e:2a:47:8a:3c:44:1d:eb:49:df:ad:12:
                    25:11:14:4f:36:56:60:6e:c1:44:8c:94:c9:95:d0:
                    27:af:ad:6f:69:e9:8a:e0:3f:c9:76:94:fd:33:14:
                    13:b5:a6:b8:4c:77:31:54:cf:91:fd:bc:f8:6f:7b:
                    cc:91:c1:38:18:12:bc:04:74:df:1a:88:b7:74:94:
                    fe:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:98:EB:72:1D:F0:3B:36:A6:7E:A0:97:C1:F4:57:61:5D:78:ED:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cae432c5-2b08-30f0-9408-be6586e40c62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:d4:b5:5a:a7:f9:cd:bc:d4:da:27:5e:3c:9d:79:f9:d1:fd:
         2c:7f:59:21:d7:38:6e:ca:ac:d3:f6:5f:5c:df:2d:2f:c3:7b:
         aa:44:03:91:ac:b8:66:99:6f:db:29:c1:80:58:5a:f3:65:97:
         2e:3c:43:79:f0:da:37:e4:da:7e:68:a5:83:40:1b:50:8d:53:
         5f:24:90:72:52:88:54:b2:19:98:0e:bb:ff:d7:ce:44:05:79:
         47:a7:ac:11:24:e4:db:f5:e3:5d:21:7c:ef:ca:d8:27:ff:4d:
         80:a1:d3:e7:0b:39:43:83:77:33:5d:94:16:57:bc:6e:f6:c3:
         6c:59:0f:e9:3c:3b:a2:cb:3f:8c:e4:35:ca:20:71:a7:d8:89:
         33:31:8a:f8:b1:ed:86:eb:95:23:04:fc:50:e7:a7:23:f0:00:
         e6:82:10:53:3a:7c:be:49:da:a0:1b:9a:36:39:0c:80:12:91:
         67:d7:5b:30:76:ed:62:12:68:e8:61:60:fa:99:e4:7e:00:11:
         d0:20:ce:b1:b9:d8:70:ae:e3:7e:0f:95:5b:41:00:33:37:cd:
         8b:a2:23:8f:3e:f2:b9:07:14:50:f1:24:3c:d6:93:23:37:e1:
         09:2a:1d:46:ee:f0:ec:7e:74:ad:86:30:13:bb:e7:43:16:4a:
         e7:d7:b9:8c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3PK1K3HeCypY/E5wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUwNTEyMDAwMFoXDTIyMDYxMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZGMzYWIyODktOGQ2NS00ZjM2LWJlNzgtNWFlNDFkNDZjM2Y4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7YGOfoyofXI1zoq731JA8BfLP+3vEfZeByr
7+kdrHWuPRJIzAQS3K8zRPDHPKh42sicyZmecUR1eiJ0Ov7uXx41HK5kmnd/PPyB
qVWeG+5Wjwnan71o/k3QXlrftYqWxGI74xNuoOe+83gUWcz5aNZQTSrB8dHvOTQL
F2fZJsO2MC1e3DFQ1/pAk0uVexmXrx1P/FFV8+QqaEqeR9/pDjmwHAIv6KZhCU0O
O1C3E2OT8qMJ9RR+KkeKPEQd60nfrRIlERRPNlZgbsFEjJTJldAnr61vaemK4D/J
dpT9MxQTtaa4THcxVM+R/bz4b3vMkcE4GBK8BHTfGoi3dJT+WQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMKY63Id8Ds2pn6gl8H0V2FdeO1WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvY2FlNDMyYzUtMmIwOC0z
MGYwLTk0MDgtYmU2NTg2ZTQwYzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMEI2AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAWtS1Wqf5zbzU2idePJ15+dH9LH9ZIdc4bsqs0/ZfXN8tL8N7qkQDkay4
Zplv2ynBgFha82WXLjxDefDaN+Tafmilg0AbUI1TXySQclKIVLIZmA67/9fORAV5
R6esESTk2/XjXSF878rYJ/9NgKHT5ws5Q4N3M12UFle8bvbDbFkP6Tw7oss/jOQ1
yiBxp9iJMzGK+LHthuuVIwT8UOenI/AA5oIQUzp8vknaoBuaNjkMgBKRZ9dbMHbt
YhJo6GFg+pnkfgAR0CDOsbnYcK7jfg+VW0EAMzfNi6Ijjz7yuQcUUPEkPNaTIzfh
CSodRu7w7H50rYYwE7vnQxZK59e5jA==
-----END CERTIFICATE-----