Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d423930f-8624-3b72-ae4e-d645b30f0cd1.roa
File:                     d423930f-8624-3b72-ae4e-d645b30f0cd1.roa (raw, json)
Hash identifier:          YoTyhbFmAztbZ7vC3Ku6a/jGUzMgyqbT0ubQz7/KBYc=
Subject key identifier:   46:0D:FB:C4:9C:20:BF:DA:BB:32:B0:68:B3:15:A3:68:6A:77:75:40
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858406B78341BA58FAF66962ADA00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d423930f-8624-3b72-ae4e-d645b30f0cd1.roa
Signing time:             Fri 30 Dec 2022 12:00:00 +0000
ROA not before:           Fri 30 Dec 2022 12:00:00 +0000
ROA not after:            Sat 04 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        52.64.0.0/12 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6b:78:34:1b:a5:8f:af:66:96:2a:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 30 12:00:00 2022 GMT
            Not After : Feb  4 05:00:00 2023 GMT
        Subject: CN=690bcabf-43f0-424a-bdd1-74301913aa2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ca:13:8b:36:19:bf:91:d9:24:4f:f7:ef:49:
                    9c:65:bb:e6:ca:02:43:74:50:1c:76:f4:df:79:5d:
                    bc:19:ba:bb:1c:a3:9f:c0:48:6c:e9:64:26:7a:8f:
                    bf:ac:59:89:b6:73:c3:2c:92:bd:12:69:14:e5:da:
                    f3:96:b8:48:3e:56:9f:5f:c7:18:a5:3d:5a:91:1f:
                    1d:d5:a8:6f:8f:18:fe:e1:cf:4e:da:a1:f6:32:21:
                    42:ab:03:6a:65:19:88:59:04:eb:27:4f:55:23:40:
                    8d:84:76:fc:b6:be:7f:a0:a3:90:de:cb:81:a1:44:
                    85:4c:43:77:8f:22:e0:08:2d:31:00:c5:13:1a:ad:
                    71:57:6d:45:4a:2e:b2:82:5e:fe:b5:bb:26:c7:b9:
                    e2:ce:c4:9c:26:65:20:15:70:3d:98:c3:05:f0:fa:
                    cf:9a:23:9c:4c:c1:43:6b:a3:04:9c:d8:d2:45:d5:
                    cb:09:1f:fc:fb:6d:7d:0a:18:8a:b3:5a:67:ee:91:
                    ea:73:7d:40:8b:d5:a1:5d:67:8d:87:3e:a8:7d:b4:
                    f2:68:2b:6b:0e:10:6d:50:b0:c3:db:4f:7e:7a:24:
                    a6:8a:a5:35:73:ca:ff:50:3a:c8:66:35:6b:7b:b2:
                    73:41:8c:e9:43:65:77:8c:77:04:e1:5b:50:6a:a6:
                    93:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0D:FB:C4:9C:20:BF:DA:BB:32:B0:68:B3:15:A3:68:6A:77:75:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d423930f-8624-3b72-ae4e-d645b30f0cd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.64.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:17:46:3d:6b:a2:8d:3d:da:90:9e:ef:44:d1:78:7a:c7:5a:
         f7:39:31:5f:6d:bc:2a:8f:bf:73:cb:1c:22:a9:33:b9:6b:4d:
         ae:5a:64:2a:6d:34:96:a3:b3:4c:df:72:91:5f:9c:dd:5f:4a:
         74:bd:2f:ef:54:a9:e5:f6:8a:8f:47:aa:3c:d3:bd:c6:47:84:
         bf:5d:dd:57:62:87:da:9f:36:64:8a:8f:d8:78:8a:a1:70:89:
         0a:55:46:f0:49:5d:58:80:53:fc:9a:07:01:4e:66:c7:82:11:
         98:90:f8:6d:0f:b6:1b:17:50:5f:b0:bd:bf:d0:e9:b5:5d:a1:
         38:2b:ae:6a:b8:a0:e0:c8:c8:61:e5:82:0d:1b:27:f2:8e:29:
         b4:16:90:57:2b:28:98:c9:67:b3:ac:b4:85:69:f6:5c:d2:28:
         a3:00:eb:3d:42:50:89:03:18:c8:0e:6e:6a:cf:a3:d8:d9:62:
         e0:1a:cd:e3:fa:d6:9b:1b:b2:3e:b9:8c:6a:dc:fc:30:20:a3:
         92:19:2b:4a:3e:1d:ba:42:de:22:17:69:d9:80:b6:95:d1:73:
         47:d5:a9:4e:68:75:5e:d6:00:a2:9f:e2:11:37:65:74:7a:ae:
         da:9a:90:6a:ae:3b:74:71:36:d8:76:1f:2d:2b:26:33:29:c2:
         81:60:77:ab
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBreDQbpY+vZpYq2gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIzMDEyMDAwMFoXDTIzMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
NjkwYmNhYmYtNDNmMC00MjRhLWJkZDEtNzQzMDE5MTNhYTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18oTizYZv5HZJE/370mcZbvmygJDdFAcdvTf
eV28Gbq7HKOfwEhs6WQmeo+/rFmJtnPDLJK9EmkU5drzlrhIPlafX8cYpT1akR8d
1ahvjxj+4c9O2qH2MiFCqwNqZRmIWQTrJ09VI0CNhHb8tr5/oKOQ3suBoUSFTEN3
jyLgCC0xAMUTGq1xV21FSi6ygl7+tbsmx7nizsScJmUgFXA9mMMF8PrPmiOcTMFD
a6MEnNjSRdXLCR/8+219ChiKs1pn7pHqc31Ai9WhXWeNhz6ofbTyaCtrDhBtULDD
209+eiSmiqU1c8r/UDrIZjVre7JzQYzpQ2V3jHcE4VtQaqaTdQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEYN+8ScIL/auzKwaLMVo2hqd3VAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZDQyMzkzMGYtODYyNC0z
YjcyLWFlNGUtZDY0NWIzMGYwY2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMENEAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAhxdGPWuijT3akJ7vRNF4esda9zkxX228Ko+/c8scIqkzuWtNrlpkKm00
lqOzTN9ykV+c3V9KdL0v71Sp5faKj0eqPNO9xkeEv13dV2KH2p82ZIqP2HiKoXCJ
ClVG8EldWIBT/JoHAU5mx4IRmJD4bQ+2GxdQX7C9v9DptV2hOCuuarig4MjIYeWC
DRsn8o4ptBaQVysomMlns6y0hWn2XNIoowDrPUJQiQMYyA5uas+j2Nli4BrN4/rW
mxuyPrmMatz8MCCjkhkrSj4dukLeIhdp2YC2ldFzR9WpTmh1XtYAop/iETdldHqu
2pqQaq47dHE22HYfLSsmMynCgWB3qw==
-----END CERTIFICATE-----