Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d3146050-35aa-392e-a492-3c2965f97fc2.roa
File:                     d3146050-35aa-392e-a492-3c2965f97fc2.roa (raw, json)
Hash identifier:          StEFLwO3b28wuL8jsq+qJ2xdL+nJvK2DAjUNfVO7oFs=
Subject key identifier:   89:BF:F6:29:D9:8B:09:B2:DF:11:3C:64:46:CB:7B:B0:BC:37:CB:40
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584088F512A7676DBA27141A2180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d3146050-35aa-392e-a492-3c2965f97fc2.roa
Signing time:             Tue 10 Jan 2023 12:00:00 +0000
ROA not before:           Tue 10 Jan 2023 12:00:00 +0000
ROA not after:            Wed 15 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        3.192.0.0/10 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:88:f5:12:a7:67:6d:ba:27:14:1a:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 10 12:00:00 2023 GMT
            Not After : Feb 15 05:00:00 2023 GMT
        Subject: CN=cf2e2d32-d05a-463e-a6cf-fee102363b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:83:69:26:e5:79:20:95:2b:d4:26:ee:db:e0:
                    5d:92:dd:73:d5:4a:0e:44:78:19:fc:a3:04:f6:bb:
                    9c:66:a4:2a:aa:44:69:eb:f1:d2:92:a3:07:04:3b:
                    19:7c:ad:62:52:5e:2c:65:30:2c:b2:18:61:ce:e7:
                    39:3e:53:ca:e1:d9:ad:a2:92:a6:f2:73:48:4e:fa:
                    e3:28:78:a3:1d:54:f3:6b:17:a3:38:e2:e3:60:60:
                    2c:38:61:1f:51:45:f7:9d:a8:2f:91:72:dc:6f:84:
                    54:77:8e:de:a6:09:61:91:9c:fa:c0:0a:18:d2:27:
                    59:77:7e:f4:f9:56:8b:f6:d2:8d:75:ab:57:08:c1:
                    51:90:23:8d:1a:0d:eb:db:be:48:e9:43:da:93:1e:
                    b6:97:34:09:cd:14:62:b5:49:4b:89:a5:42:fc:ed:
                    22:07:be:8b:76:ba:11:26:13:36:23:82:d3:ce:7f:
                    cc:6a:2d:b8:a9:a2:12:c1:93:70:8f:ae:f1:6c:2f:
                    13:a9:68:9f:4b:6b:d6:15:c0:49:f7:cd:78:86:fe:
                    8e:d6:c6:50:73:e0:75:e9:db:33:2b:f7:d8:2c:a4:
                    44:e5:6f:5b:cf:b1:ad:3e:b7:f7:d8:af:4b:16:4c:
                    a9:a9:c4:93:cd:de:d2:ef:46:f9:40:1b:6d:c9:55:
                    a9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BF:F6:29:D9:8B:09:B2:DF:11:3C:64:46:CB:7B:B0:BC:37:CB:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d3146050-35aa-392e-a492-3c2965f97fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.192.0.0/10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:de:2b:4e:44:c4:49:81:a4:d4:eb:8d:56:0b:03:74:f5:f8:
         0b:2b:81:87:9b:0c:27:48:2e:3b:0d:39:46:6e:89:f2:62:45:
         6a:58:89:b9:14:f9:71:03:18:09:b8:89:1f:fd:8c:cf:3f:c9:
         4e:23:4c:d4:45:76:ff:01:d8:53:20:a6:e4:2a:77:b9:51:de:
         5b:55:91:66:72:4b:bf:19:53:c6:a1:33:fd:dc:12:2a:42:c7:
         77:ed:6a:e6:bf:6a:d8:24:20:7a:f4:a4:e1:c8:dd:08:5e:8a:
         4e:16:22:6a:69:62:c5:fe:70:0a:3e:13:09:81:ad:1e:92:ee:
         be:a9:81:82:f2:7a:4b:21:6a:a3:15:ea:43:01:a9:0e:9b:9d:
         a9:15:de:57:38:83:a2:95:ec:c5:45:f4:00:20:3e:56:dd:8a:
         70:3b:9c:f3:45:86:a6:83:5e:be:7c:f3:e0:40:83:d9:4a:57:
         37:68:f2:1f:8b:67:21:e6:98:48:20:26:1b:d0:2b:e2:fb:ce:
         0e:e7:0a:37:c5:04:46:ab:da:f5:2f:95:13:47:d6:e4:04:d3:
         b9:51:2a:97:54:55:13:90:02:dc:a6:eb:e6:87:7e:f4:97:45:
         6c:39:43:d4:6f:f4:4c:f3:09:4d:23:18:91:82:8a:2d:d1:2c:
         38:24:4f:17
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECI9RKnZ226JxQaIYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDExMDEyMDAwMFoXDTIzMDIxNTA1MDAwMFowLzEtMCsGA1UEAxMk
Y2YyZTJkMzItZDA1YS00NjNlLWE2Y2YtZmVlMTAyMzYzYjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYNpJuV5IJUr1Cbu2+Bdkt1z1UoORHgZ/KME
9rucZqQqqkRp6/HSkqMHBDsZfK1iUl4sZTAsshhhzuc5PlPK4dmtopKm8nNITvrj
KHijHVTzaxejOOLjYGAsOGEfUUX3nagvkXLcb4RUd47epglhkZz6wAoY0idZd370
+VaL9tKNdatXCMFRkCONGg3r275I6UPakx62lzQJzRRitUlLiaVC/O0iB76LdroR
JhM2I4LTzn/Mai24qaISwZNwj67xbC8TqWifS2vWFcBJ9814hv6O1sZQc+B16dsz
K/fYLKRE5W9bz7GtPrf32K9LFkypqcSTzd7S70b5QBttyVWp2wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIm/9inZiwmy3xE8ZEbLe7C8N8tAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZDMxNDYwNTAtMzVhYS0z
OTJlLWE0OTItM2MyOTY1Zjk3ZmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMGA8AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEADN4rTkTESYGk1OuNVgsDdPX4CyuBh5sMJ0guOw05Rm6J8mJFaliJuRT5
cQMYCbiJH/2Mzz/JTiNM1EV2/wHYUyCm5Cp3uVHeW1WRZnJLvxlTxqEz/dwSKkLH
d+1q5r9q2CQgevSk4cjdCF6KThYiamlixf5wCj4TCYGtHpLuvqmBgvJ6SyFqoxXq
QwGpDpudqRXeVziDopXsxUX0ACA+Vt2KcDuc80WGpoNevnzz4ECD2UpXN2jyH4tn
IeaYSCAmG9Ar4vvODucKN8UERqva9S+VE0fW5ATTuVEql1RVE5AC3Kbr5od+9JdF
bDlD1G/0TPMJTSMYkYKKLdEsOCRPFw==
-----END CERTIFICATE-----