Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f39c19b6-ab5f-3fff-a2d5-4a097b88f913.roa
File:                     f39c19b6-ab5f-3fff-a2d5-4a097b88f913.roa (raw, json)
Hash identifier:          +NGuhc8ZtZ7en5vG2qFjreevJ60FcYn8gj0KvQ+Y0QM=
Subject key identifier:   57:CB:26:28:B5:95:73:C7:92:FA:CD:C7:3F:66:EE:99:70:C2:E1:E5
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DE24DCD069D1AD7CD1F649F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f39c19b6-ab5f-3fff-a2d5-4a097b88f913.roa
Signing time:             Thu 12 May 2022 12:00:00 +0000
ROA not before:           Thu 12 May 2022 12:00:00 +0000
ROA not after:            Fri 17 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        141.181.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:e2:4d:cd:06:9d:1a:d7:cd:1f:64:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May 12 12:00:00 2022 GMT
            Not After : Jun 17 04:00:00 2022 GMT
        Subject: CN=e3df30d1-549f-4e62-b21e-0382c5bd4cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:85:a5:48:dd:f0:a0:d2:11:6b:8c:69:11:c4:
                    63:76:cb:70:0e:8e:39:ee:73:19:0e:7d:7f:45:7b:
                    9c:68:b3:49:75:ee:ce:ca:39:e2:a1:0b:66:d4:e0:
                    4a:3f:68:5e:15:c5:1e:53:57:55:66:fe:8f:2f:92:
                    9e:d3:21:28:3d:75:c4:f9:43:ff:86:e9:48:15:4c:
                    de:51:53:98:32:4c:b5:9c:d6:48:6b:cb:69:95:f1:
                    7f:df:90:92:c0:82:81:eb:47:5f:bf:69:9e:fd:34:
                    41:e0:ff:97:55:00:e9:a6:f9:d6:08:fc:b3:7d:ee:
                    41:5a:e8:a3:44:5b:af:c1:f2:d0:70:32:3a:0c:8b:
                    03:f8:4b:6d:2d:0e:51:00:e5:1c:82:60:63:fd:e5:
                    2c:14:49:16:43:1b:cb:66:f4:7a:47:ea:21:2c:bf:
                    c5:44:de:a6:5e:e7:a1:39:a8:95:10:06:12:66:e4:
                    64:a3:45:a9:fb:c9:c2:0c:d6:f7:32:e1:ad:70:27:
                    cb:23:ba:42:4c:40:f0:c7:7c:08:69:ba:9c:70:49:
                    5e:6b:44:b4:ee:75:39:a2:46:99:d3:bb:16:26:31:
                    45:cf:73:d6:b1:c0:32:a0:f0:73:61:08:1c:58:94:
                    f4:03:98:94:33:c2:e0:92:68:1a:b9:e4:d8:1e:ac:
                    a7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CB:26:28:B5:95:73:C7:92:FA:CD:C7:3F:66:EE:99:70:C2:E1:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f39c19b6-ab5f-3fff-a2d5-4a097b88f913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.181.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:32:17:67:9b:f5:bf:98:eb:32:04:e7:b5:95:73:d8:ad:09:
         10:cf:86:2d:78:9e:90:b7:da:a2:ac:0c:cc:a1:07:53:e2:52:
         37:58:1d:b5:ea:e1:b0:c7:b4:d2:b4:8c:94:cf:b8:20:62:3a:
         e7:5c:66:21:e4:14:de:18:c3:12:d2:8b:19:9e:ac:5a:16:63:
         fd:55:da:2a:f8:c6:db:48:5e:82:24:15:81:ce:a6:1e:f5:02:
         68:64:40:ba:db:3f:86:68:ca:b8:3d:64:a2:99:dc:e8:e2:08:
         6b:1c:34:b1:dd:dc:c5:76:bc:4b:4a:9b:d3:6a:51:ab:74:91:
         f0:19:07:8a:97:b2:21:b9:32:5c:0a:e3:43:a9:93:2c:8b:54:
         bc:40:22:bb:4e:f6:4b:0a:95:62:dd:ff:f7:2c:df:22:2b:8f:
         50:14:75:6a:89:ac:55:cb:ad:1f:ba:42:e2:18:af:25:49:19:
         a8:83:af:e5:30:87:ff:c4:8c:04:d1:91:b9:49:de:d3:bd:d4:
         f0:53:e8:f4:e6:7f:f8:2b:9d:97:7d:1a:02:b3:1d:c5:40:50:
         0a:71:cf:f8:51:58:b6:dc:4e:63:55:32:98:27:07:db:61:36:
         1e:7b:75:1d:6c:8b:9e:26:57:ef:f8:e1:90:93:bc:c3:c7:51:
         f7:10:c8:08
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3iTc0GnRrXzR9knwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUxMjEyMDAwMFoXDTIyMDYxNzA0MDAwMFowLzEtMCsGA1UEAxMk
ZTNkZjMwZDEtNTQ5Zi00ZTYyLWIyMWUtMDM4MmM1YmQ0Y2MxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYWlSN3woNIRa4xpEcRjdstwDo457nMZDn1/
RXucaLNJde7OyjnioQtm1OBKP2heFcUeU1dVZv6PL5Ke0yEoPXXE+UP/hulIFUze
UVOYMky1nNZIa8tplfF/35CSwIKB60dfv2me/TRB4P+XVQDppvnWCPyzfe5BWuij
RFuvwfLQcDI6DIsD+EttLQ5RAOUcgmBj/eUsFEkWQxvLZvR6R+ohLL/FRN6mXueh
OaiVEAYSZuRko0Wp+8nCDNb3MuGtcCfLI7pCTEDwx3wIabqccElea0S07nU5okaZ
07sWJjFFz3PWscAyoPBzYQgcWJT0A5iUM8LgkmgaueTYHqynEwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFfLJii1lXPHkvrNxz9m7plwwuHlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZjM5YzE5YjYtYWI1Zi0z
ZmZmLWEyZDUtNGEwOTdiODhmOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjbUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAVDIXZ5v1v5jrMgTntZVz2K0JEM+GLXiekLfaoqwMzKEHU+JSN1gdterh
sMe00rSMlM+4IGI651xmIeQU3hjDEtKLGZ6sWhZj/VXaKvjG20hegiQVgc6mHvUC
aGRAuts/hmjKuD1kopnc6OIIaxw0sd3cxXa8S0qb02pRq3SR8BkHipeyIbkyXArj
Q6mTLItUvEAiu072SwqVYt3/9yzfIiuPUBR1aomsVcutH7pC4hivJUkZqIOv5TCH
/8SMBNGRuUne073U8FPo9OZ/+Cudl30aArMdxUBQCnHP+FFYttxOY1UymCcH22E2
Hnt1HWyLniZX7/jhkJO8w8dR9xDICA==
-----END CERTIFICATE-----