Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e50608fe-0da6-34a2-adf8-8f4856bcb473.roa
File:                     e50608fe-0da6-34a2-adf8-8f4856bcb473.roa (raw, json)
Hash identifier:          HjZs+j+Cpc5jAaP14+7hOaAV2DWoRSBBPu8S2QTkhCg=
Subject key identifier:   E7:F7:57:27:84:97:06:3A:C5:27:96:5C:6A:CC:BD:5C:63:35:1E:D6
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584088ED61AE6BBF0A8A73DD1680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e50608fe-0da6-34a2-adf8-8f4856bcb473.roa
Signing time:             Tue 10 Jan 2023 12:00:00 +0000
ROA not before:           Tue 10 Jan 2023 12:00:00 +0000
ROA not after:            Wed 15 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        3.64.0.0/10 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:88:ed:61:ae:6b:bf:0a:8a:73:dd:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 10 12:00:00 2023 GMT
            Not After : Feb 15 05:00:00 2023 GMT
        Subject: CN=9980f323-1cfd-4518-be63-460f53e4501b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:27:22:67:37:f2:82:90:fe:8e:3f:4e:f0:13:
                    01:19:82:05:dd:26:12:c6:28:86:d4:c8:12:13:97:
                    64:e3:ad:e3:ab:c1:24:c3:4c:9f:8b:40:d6:fc:64:
                    ef:2d:74:32:9f:37:a7:4b:dd:c1:c7:2d:2c:fc:b1:
                    7f:c4:66:5c:29:e7:0b:e3:56:5a:48:5b:fb:b9:ba:
                    72:6c:2f:e1:e3:96:af:8e:1a:39:32:11:93:54:76:
                    78:96:69:40:12:51:af:f1:c0:8b:c6:b2:90:ee:df:
                    88:fb:1b:56:c5:bd:0d:42:04:e3:e9:2e:d0:d5:24:
                    06:3a:7a:42:ff:b2:1a:75:6d:3a:33:b8:17:ab:02:
                    79:7d:52:c3:18:4a:ba:09:ea:d7:03:84:59:71:cd:
                    ac:56:7d:3c:1e:de:3a:cd:d9:00:26:0e:83:82:01:
                    bd:9f:d5:09:8c:33:6a:ab:69:dd:01:09:60:a1:64:
                    f2:17:01:51:8d:84:0a:12:dc:b7:9f:43:c2:43:33:
                    1d:3b:84:5a:f7:af:c2:cc:93:2d:a8:bb:79:89:0d:
                    28:df:9f:85:2a:5b:b6:64:15:18:06:3f:a9:32:22:
                    f3:ce:0b:05:67:6d:89:f5:f5:0f:0d:87:a5:00:6b:
                    4f:fd:86:bc:e0:d7:85:d2:55:78:6e:52:c0:58:31:
                    86:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F7:57:27:84:97:06:3A:C5:27:96:5C:6A:CC:BD:5C:63:35:1E:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e50608fe-0da6-34a2-adf8-8f4856bcb473.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.64.0.0/10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:d9:f0:b9:78:7e:09:8f:a2:c1:25:a8:af:29:31:39:ee:0e:
         e9:df:84:bf:a6:e2:04:7c:0f:30:83:82:32:c2:d2:fe:f2:69:
         91:a1:e4:d8:c2:76:86:8a:00:89:c2:d2:3c:9b:78:ca:4b:55:
         33:2a:b1:76:49:37:86:44:48:ba:d7:9f:01:f9:3f:57:db:28:
         d8:a2:fe:78:88:fa:73:66:de:98:89:11:8d:33:40:79:15:68:
         f8:5e:82:3a:a9:b5:bf:10:a2:a4:7a:89:49:65:bc:e3:a7:d5:
         79:db:48:6b:54:5e:8e:65:f5:11:b3:be:31:40:0f:c9:52:a9:
         af:7e:1b:a8:f5:90:a5:cd:45:cc:f8:20:4b:53:25:9d:9a:29:
         cb:99:b9:1f:be:70:74:ef:6a:c4:cc:aa:cc:41:ab:41:c8:35:
         88:b8:e4:0e:1b:98:9b:e9:83:0e:9d:fa:8d:0b:63:05:41:0e:
         7b:da:fd:6c:c4:39:0c:b5:24:bb:e3:fd:2f:7a:71:e6:5d:a7:
         ca:99:82:ee:94:89:57:b1:f3:29:15:e7:45:c2:50:c0:78:97:
         50:0d:2a:ee:6e:43:89:55:90:13:bd:fa:d7:7a:82:55:9e:4a:
         42:02:9f:7f:4a:45:91:84:62:61:cb:c1:18:21:25:6f:f8:b7:
         39:35:65:fa
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECI7WGua78KinPdFoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDExMDEyMDAwMFoXDTIzMDIxNTA1MDAwMFowLzEtMCsGA1UEAxMk
OTk4MGYzMjMtMWNmZC00NTE4LWJlNjMtNDYwZjUzZTQ1MDFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziciZzfygpD+jj9O8BMBGYIF3SYSxiiG1MgS
E5dk463jq8Ekw0yfi0DW/GTvLXQynzenS93Bxy0s/LF/xGZcKecL41ZaSFv7ubpy
bC/h45avjho5MhGTVHZ4lmlAElGv8cCLxrKQ7t+I+xtWxb0NQgTj6S7Q1SQGOnpC
/7IadW06M7gXqwJ5fVLDGEq6CerXA4RZcc2sVn08Ht46zdkAJg6DggG9n9UJjDNq
q2ndAQlgoWTyFwFRjYQKEty3n0PCQzMdO4Ra96/CzJMtqLt5iQ0o35+FKlu2ZBUY
Bj+pMiLzzgsFZ22J9fUPDYelAGtP/Ya84NeF0lV4blLAWDGGCQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOf3VyeElwY6xSeWXGrMvVxjNR7WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZTUwNjA4ZmUtMGRhNi0z
NGEyLWFkZjgtOGY0ODU2YmNiNDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMGA0AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAe9nwuXh+CY+iwSWorykxOe4O6d+Ev6biBHwPMIOCMsLS/vJpkaHk2MJ2
hooAicLSPJt4yktVMyqxdkk3hkRIutefAfk/V9so2KL+eIj6c2bemIkRjTNAeRVo
+F6COqm1vxCipHqJSWW846fVedtIa1RejmX1EbO+MUAPyVKpr34bqPWQpc1FzPgg
S1MlnZopy5m5H75wdO9qxMyqzEGrQcg1iLjkDhuYm+mDDp36jQtjBUEOe9r9bMQ5
DLUku+P9L3px5l2nypmC7pSJV7HzKRXnRcJQwHiXUA0q7m5DiVWQE73613qCVZ5K
QgKff0pFkYRiYcvBGCElb/i3OTVl+g==
-----END CERTIFICATE-----