Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f454e9d0-d599-345d-94d4-231fdf072c4b.roa
File:                     f454e9d0-d599-345d-94d4-231fdf072c4b.roa (raw, json)
Hash identifier:          7Ar60ybScbKdgseH8lYGAhANHtkv3WvLFbNwmxQVrh8=
Subject key identifier:   23:C4:77:CC:3C:DD:E0:69:11:D4:36:2F:35:A1:44:F9:7E:EC:41:29
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858409F2C986967900A3AEFE358F0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f454e9d0-d599-345d-94d4-231fdf072c4b.roa
Signing time:             Wed 18 Jan 2023 12:00:00 +0000
ROA not before:           Wed 18 Jan 2023 12:00:00 +0000
ROA not after:            Thu 23 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        15.129.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:9f:2c:98:69:67:90:0a:3a:ef:e3:58:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 18 12:00:00 2023 GMT
            Not After : Feb 23 05:00:00 2023 GMT
        Subject: CN=7234c97b-6632-4f6f-bd1c-fb8211f8a72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:9c:fd:cd:33:88:79:57:b8:c3:83:b6:86:17:
                    64:1f:fa:b4:9d:f1:01:ed:e4:b2:53:59:29:82:7a:
                    81:a9:2d:25:78:ef:d5:e2:94:a6:bf:33:7a:54:52:
                    cf:64:32:6c:6b:ad:da:10:1f:79:60:33:1b:f2:3c:
                    00:0c:a7:f7:57:35:12:fa:48:8e:6f:15:b9:37:dc:
                    0f:ae:89:6a:c7:b7:16:f8:a8:51:6f:f2:4b:e3:9d:
                    93:a0:2b:6e:0a:3c:26:f7:94:b4:3b:4e:bc:06:57:
                    6a:ff:98:ed:da:0f:2c:6c:5f:27:69:2e:97:41:83:
                    8a:36:78:bd:ae:21:56:3b:e6:92:5b:13:4f:c9:0f:
                    a4:f9:dc:da:cf:48:d5:16:99:44:86:04:29:f8:1f:
                    31:a8:ea:3a:53:5c:6b:2f:f3:dd:c6:d4:1c:cd:0d:
                    88:60:aa:ee:a7:fa:63:77:06:1d:3a:1c:df:9e:eb:
                    34:05:a0:bd:13:e9:d9:be:d0:2f:3c:47:4c:17:ed:
                    7f:c9:78:27:01:35:01:1d:21:4a:64:5f:e4:97:dd:
                    32:27:62:0d:7c:0d:61:70:ca:59:1f:72:ea:08:60:
                    c0:a5:2c:a6:e8:a5:98:fa:31:2a:0a:ee:e6:1f:59:
                    de:4f:f7:0d:bf:4c:1c:9b:aa:a0:6f:72:5d:6e:c7:
                    33:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C4:77:CC:3C:DD:E0:69:11:D4:36:2F:35:A1:44:F9:7E:EC:41:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f454e9d0-d599-345d-94d4-231fdf072c4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.129.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:5b:14:87:d2:73:5c:bf:4e:5d:5c:8d:a4:3e:f3:49:de:7e:
         0b:9d:7f:8d:13:50:4d:bf:27:99:fd:c0:dc:13:8e:0e:c0:bb:
         7f:43:4f:2c:d1:63:e2:bc:3e:ca:85:88:38:eb:a3:06:6c:0d:
         fb:71:01:c6:05:1a:d5:d2:7b:9d:52:fa:d8:57:49:b1:bd:0e:
         7d:d4:8c:13:48:20:c6:e4:4a:9f:0c:43:28:80:1d:49:ca:9d:
         b1:a8:68:0c:44:60:f7:e0:d6:39:e7:59:d6:30:25:9e:ea:0a:
         70:8f:42:bc:6e:53:c0:0c:73:5d:b5:25:23:06:ab:5a:ff:45:
         55:2e:24:f9:41:58:ba:a6:76:db:51:94:28:3a:9c:3f:f7:1d:
         93:96:6f:46:f6:f1:91:02:2e:30:4c:9a:b8:7a:bb:70:49:e5:
         6c:24:10:79:aa:25:e2:c1:da:d6:69:88:15:0b:75:e2:28:77:
         0b:ed:f2:c6:14:49:a3:f7:a5:e0:f0:9a:aa:5a:d2:48:6c:7f:
         e9:1f:55:49:ec:87:7c:f4:ea:1a:8b:2a:e7:71:09:8d:0a:3e:
         6b:ce:22:69:c5:94:5f:de:2b:5a:26:ee:d3:1a:3a:70:31:a1:
         00:a5:0f:3a:8a:12:49:fb:20:b4:e7:0a:27:2a:97:42:8b:91:
         1e:cd:90:3f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECfLJhpZ5AKOu/jWPAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDExODEyMDAwMFoXDTIzMDIyMzA1MDAwMFowLzEtMCsGA1UEAxMk
NzIzNGM5N2ItNjYzMi00ZjZmLWJkMWMtZmI4MjExZjhhNzJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9pz9zTOIeVe4w4O2hhdkH/q0nfEB7eSyU1kp
gnqBqS0leO/V4pSmvzN6VFLPZDJsa63aEB95YDMb8jwADKf3VzUS+kiObxW5N9wP
rolqx7cW+KhRb/JL452ToCtuCjwm95S0O068Bldq/5jt2g8sbF8naS6XQYOKNni9
riFWO+aSWxNPyQ+k+dzaz0jVFplEhgQp+B8xqOo6U1xrL/PdxtQczQ2IYKrup/pj
dwYdOhzfnus0BaC9E+nZvtAvPEdMF+1/yXgnATUBHSFKZF/kl90yJ2INfA1hcMpZ
H3LqCGDApSym6KWY+jEqCu7mH1neT/cNv0wcm6qgb3JdbsczOQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCPEd8w83eBpEdQ2LzWhRPl+7EEpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZjQ1NGU5ZDAtZDU5OS0z
NDVkLTk0ZDQtMjMxZmRmMDcyYzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD4EwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAsVsUh9JzXL9OXVyNpD7zSd5+C51/jRNQTb8nmf3A3BOODsC7f0NPLNFj
4rw+yoWIOOujBmwN+3EBxgUa1dJ7nVL62FdJsb0OfdSME0ggxuRKnwxDKIAdScqd
sahoDERg9+DWOedZ1jAlnuoKcI9CvG5TwAxzXbUlIwarWv9FVS4k+UFYuqZ221GU
KDqcP/cdk5ZvRvbxkQIuMEyauHq7cEnlbCQQeaol4sHa1mmIFQt14ih3C+3yxhRJ
o/el4PCaqlrSSGx/6R9VSeyHfPTqGosq53EJjQo+a84iacWUX94rWibu0xo6cDGh
AKUPOooSSfsgtOcKJyqXQouRHs2QPw==
-----END CERTIFICATE-----