Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d2923892-7d1f-394d-b4f7-d353a34cc757.roa
File:                     d2923892-7d1f-394d-b4f7-d353a34cc757.roa (raw, json)
Hash identifier:          qj0dptLchLO2lmq+D7EhQE/aO/5HVfgTWnFomNc5xdA=
Subject key identifier:   EA:AE:22:44:F9:61:6D:04:53:AD:E7:0A:AC:C1:C4:AF:6A:DF:91:56
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858408E8A76D29A4353B22C6342C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d2923892-7d1f-394d-b4f7-d353a34cc757.roa
Signing time:             Thu 12 Jan 2023 12:00:00 +0000
ROA not before:           Thu 12 Jan 2023 12:00:00 +0000
ROA not after:            Fri 17 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        54.160.0.0/12 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:8e:8a:76:d2:9a:43:53:b2:2c:63:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 12 12:00:00 2023 GMT
            Not After : Feb 17 05:00:00 2023 GMT
        Subject: CN=c98dde4b-7d07-41ef-a9a6-5636769999dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:23:ca:5b:65:41:6e:64:8f:93:54:4b:4b:d7:
                    6b:9d:5f:1e:81:52:30:68:32:74:61:5e:f1:da:06:
                    fd:3a:e9:31:ee:c2:ea:b7:4b:82:7a:1d:50:05:61:
                    2f:c6:cc:25:ca:90:62:e2:e0:88:27:65:0b:3d:11:
                    14:6f:0c:f9:62:85:8b:73:aa:94:c1:36:74:f3:03:
                    9a:8d:ca:42:02:5d:12:b8:7f:65:05:b8:3f:fc:24:
                    d7:67:43:dc:2d:70:6e:2b:71:f5:87:3f:c8:a7:56:
                    5f:46:1a:4c:6c:00:8b:04:bf:04:64:25:d5:89:d3:
                    0a:24:ae:f2:1f:57:ca:7b:ec:84:a2:08:f4:a9:23:
                    e1:01:f2:d7:3d:9b:35:5d:8a:db:05:62:a6:08:cb:
                    89:88:1c:82:3e:67:e9:0b:b4:21:8d:21:02:b9:49:
                    ac:63:30:c3:41:d0:70:15:0d:a9:57:80:3c:fc:3b:
                    0f:5e:3c:eb:41:b3:82:9f:18:c0:d2:68:84:ff:9b:
                    3a:47:0d:0d:ff:4c:e3:89:a9:55:86:52:ef:2d:f8:
                    61:11:fa:9d:e3:21:e2:a7:fa:87:32:3f:b5:af:77:
                    3b:c5:37:13:08:b1:9c:50:86:d4:c8:32:a0:24:08:
                    94:c0:34:c1:9a:16:5b:75:20:33:c1:d0:66:21:d3:
                    d3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AE:22:44:F9:61:6D:04:53:AD:E7:0A:AC:C1:C4:AF:6A:DF:91:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d2923892-7d1f-394d-b4f7-d353a34cc757.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.160.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:32:f8:d2:b7:51:35:39:c6:d7:65:ba:4d:eb:5f:bd:e5:1a:
         07:af:7f:81:ed:9c:55:f2:96:70:92:4e:54:3a:ce:b0:2d:e2:
         c5:aa:17:fa:77:d2:f7:4b:8f:e8:61:a5:70:bb:a1:4f:d5:dc:
         cd:09:90:26:11:a4:60:14:94:df:d5:14:36:45:4a:a2:16:22:
         bf:78:26:9c:f1:74:13:34:d2:ca:d6:90:4a:b5:50:49:31:9d:
         7f:f0:c3:e6:0d:57:41:15:ee:ef:30:02:a6:ae:5d:05:07:5d:
         01:eb:78:b5:e2:2e:d7:48:e9:9b:b8:66:b2:06:56:a9:bc:b2:
         89:c9:2c:17:9f:09:5d:b8:8e:43:ba:f1:d8:51:d0:9a:d1:e1:
         91:df:30:af:4f:9f:36:6a:9d:23:0d:48:50:fc:ca:2d:51:6e:
         8f:8c:eb:f1:e1:87:30:13:58:f7:87:d7:01:00:a2:06:c0:5e:
         06:cd:2c:c1:41:45:d2:d2:dc:11:d3:be:2d:d3:6a:15:bc:fd:
         8b:0a:ff:9a:7f:09:17:bf:ca:fd:71:55:28:f4:fa:4a:d8:e5:
         f8:dc:ac:32:8c:39:b6:0c:83:6f:ee:00:8c:d5:8a:ca:46:53:
         47:d3:29:57:13:8b:96:1d:d2:aa:86:6f:0b:50:46:c4:de:cd:
         33:10:8b:95
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECOinbSmkNTsixjQsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDExMjEyMDAwMFoXDTIzMDIxNzA1MDAwMFowLzEtMCsGA1UEAxMk
Yzk4ZGRlNGItN2QwNy00MWVmLWE5YTYtNTYzNjc2OTk5OWRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSPKW2VBbmSPk1RLS9drnV8egVIwaDJ0YV7x
2gb9Oukx7sLqt0uCeh1QBWEvxswlypBi4uCIJ2ULPREUbwz5YoWLc6qUwTZ08wOa
jcpCAl0SuH9lBbg//CTXZ0PcLXBuK3H1hz/Ip1ZfRhpMbACLBL8EZCXVidMKJK7y
H1fKe+yEogj0qSPhAfLXPZs1XYrbBWKmCMuJiByCPmfpC7QhjSECuUmsYzDDQdBw
FQ2pV4A8/DsPXjzrQbOCnxjA0miE/5s6Rw0N/0zjialVhlLvLfhhEfqd4yHip/qH
Mj+1r3c7xTcTCLGcUIbUyDKgJAiUwDTBmhZbdSAzwdBmIdPT8wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOquIkT5YW0EU63nCqzBxK9q35FWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZDI5MjM4OTItN2QxZi0z
OTRkLWI0ZjctZDM1M2EzNGNjNzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMENqAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEARDL40rdRNTnG12W6TetfveUaB69/ge2cVfKWcJJOVDrOsC3ixaoX+nfS
90uP6GGlcLuhT9XczQmQJhGkYBSU39UUNkVKohYiv3gmnPF0EzTSytaQSrVQSTGd
f/DD5g1XQRXu7zACpq5dBQddAet4teIu10jpm7hmsgZWqbyyicksF58JXbiOQ7rx
2FHQmtHhkd8wr0+fNmqdIw1IUPzKLVFuj4zr8eGHMBNY94fXAQCiBsBeBs0swUFF
0tLcEdO+LdNqFbz9iwr/mn8JF7/K/XFVKPT6Stjl+NysMow5tgyDb+4AjNWKykZT
R9MpVxOLlh3SqoZvC1BGxN7NMxCLlQ==
-----END CERTIFICATE-----