Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ffcd3e84-8934-3abc-a262-0926979f6008.roa
File:                     ffcd3e84-8934-3abc-a262-0926979f6008.roa (raw, json)
Hash identifier:          bBsLnXwEJEV9L9xsMdSrxczXtBVH9sb87qooarMGonM=
Subject key identifier:   69:0F:A2:80:50:11:95:2F:80:AA:F5:F6:B0:02:F0:13:78:48:CE:50
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840B02FCF9F62DDA822AEBC0340
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ffcd3e84-8934-3abc-a262-0926979f6008.roa
Signing time:             Tue 24 Jan 2023 12:00:00 +0000
ROA not before:           Tue 24 Jan 2023 12:00:00 +0000
ROA not after:            Wed 01 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        13.244.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b0:2f:cf:9f:62:dd:a8:22:ae:bc:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 24 12:00:00 2023 GMT
            Not After : Mar  1 05:00:00 2023 GMT
        Subject: CN=5a923de7-1665-4058-82c0-ed798da076d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cc:bf:7a:04:54:6c:a8:77:f4:c4:94:67:1e:
                    aa:96:10:16:3d:67:2d:b7:19:9b:84:d2:91:f4:34:
                    1f:bf:50:7e:cd:57:0e:db:12:f7:63:27:e3:91:52:
                    82:b7:5d:5e:5f:5f:a4:de:f0:fb:50:a2:37:fd:d6:
                    b3:c3:36:92:b3:ea:ec:54:33:1a:9a:32:5e:d4:c1:
                    81:48:83:ae:2b:70:9a:d6:13:07:06:56:fa:c1:ba:
                    c3:b4:20:2d:52:f9:8d:ad:7b:7e:6b:64:d2:21:99:
                    a9:e6:ae:81:7a:77:de:6c:0d:63:36:d8:63:2b:b3:
                    87:67:ed:dd:92:76:65:4c:10:d0:a3:49:ce:2f:03:
                    15:1e:c6:7a:68:6c:16:e2:12:9b:c5:2d:f4:c0:2b:
                    3b:3d:0f:67:fa:55:4b:11:b6:fe:3a:6c:fc:da:3b:
                    ce:23:03:39:e3:36:0b:19:81:62:ff:19:94:bf:94:
                    70:64:57:9b:0b:10:dd:27:ed:fa:6e:48:ec:65:c9:
                    46:10:cb:8a:28:3f:0f:8d:b5:4e:95:35:a5:91:6f:
                    9f:75:27:3b:44:f7:1f:d8:f4:a3:9e:5f:63:e2:1c:
                    2d:45:d7:59:0f:9a:ea:56:61:5e:98:ef:c8:38:cb:
                    ff:78:6f:d4:6c:08:26:d9:90:dd:e6:e5:26:ef:0c:
                    20:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0F:A2:80:50:11:95:2F:80:AA:F5:F6:B0:02:F0:13:78:48:CE:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ffcd3e84-8934-3abc-a262-0926979f6008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.244.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:00:f8:b5:94:ad:f9:f4:44:3b:9a:16:b3:d7:51:00:86:17:
         cf:73:05:73:29:17:d7:d3:8c:54:dc:39:cd:d7:5e:cd:da:d8:
         b3:2e:cc:03:69:9c:4e:71:93:aa:4a:bd:34:b4:66:99:66:db:
         69:60:02:76:fb:2f:f1:e6:91:90:96:9d:11:47:91:c7:60:8f:
         11:0f:48:5c:6d:4c:54:4d:ce:a2:be:30:1a:04:80:7f:13:74:
         61:d8:96:17:4e:6b:a5:6d:c5:82:cd:95:a1:aa:19:ab:de:b4:
         10:37:9c:57:cb:e8:15:40:66:c4:89:39:62:73:b5:98:41:07:
         4b:fb:07:08:e4:62:85:d5:73:e8:af:cf:a4:ad:aa:b8:f5:73:
         56:40:05:20:a4:a5:aa:8b:6b:2c:df:44:f5:67:31:b3:ff:db:
         f7:a6:c3:21:41:23:3f:b0:49:cc:49:ad:82:a2:8f:72:bf:25:
         52:90:9b:f9:bb:eb:dc:ed:2c:74:7a:55:8d:06:5d:f9:13:fb:
         79:f8:8c:bd:72:01:ae:74:d2:b6:c1:22:98:7f:a7:9c:a2:15:
         60:e1:ea:9f:65:b8:5f:a1:7c:9a:9e:76:91:9f:0d:60:fc:a2:
         7e:4b:a3:75:86:6c:45:19:a0:e4:eb:24:7c:b8:09:4d:24:61:
         f4:2b:14:fb
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECwL8+fYt2oIq68A0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEyNDEyMDAwMFoXDTIzMDMwMTA1MDAwMFowLzEtMCsGA1UEAxMk
NWE5MjNkZTctMTY2NS00MDU4LTgyYzAtZWQ3OThkYTA3NmQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcy/egRUbKh39MSUZx6qlhAWPWcttxmbhNKR
9DQfv1B+zVcO2xL3YyfjkVKCt11eX1+k3vD7UKI3/dazwzaSs+rsVDMamjJe1MGB
SIOuK3Ca1hMHBlb6wbrDtCAtUvmNrXt+a2TSIZmp5q6BenfebA1jNthjK7OHZ+3d
knZlTBDQo0nOLwMVHsZ6aGwW4hKbxS30wCs7PQ9n+lVLEbb+Omz82jvOIwM54zYL
GYFi/xmUv5RwZFebCxDdJ+36bkjsZclGEMuKKD8PjbVOlTWlkW+fdSc7RPcf2PSj
nl9j4hwtRddZD5rqVmFemO/IOMv/eG/UbAgm2ZDd5uUm7wwgdwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGkPooBQEZUvgKr19rAC8BN4SM5QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZmZjZDNlODQtODkzNC0z
YWJjLWEyNjItMDkyNjk3OWY2MDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCDfQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAGQD4tZSt+fREO5oWs9dRAIYXz3MFcykX19OMVNw5zddezdrYsy7MA2mc
TnGTqkq9NLRmmWbbaWACdvsv8eaRkJadEUeRx2CPEQ9IXG1MVE3Oor4wGgSAfxN0
YdiWF05rpW3Fgs2VoaoZq960EDecV8voFUBmxIk5YnO1mEEHS/sHCORihdVz6K/P
pK2quPVzVkAFIKSlqotrLN9E9Wcxs//b96bDIUEjP7BJzEmtgqKPcr8lUpCb+bvr
3O0sdHpVjQZd+RP7efiMvXIBrnTStsEimH+nnKIVYOHqn2W4X6F8mp52kZ8NYPyi
fkujdYZsRRmg5OskfLgJTSRh9CsU+w==
-----END CERTIFICATE-----