Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/03f4dcaa-7fb0-337b-aa43-f306fa3edd00.roa
File:                     03f4dcaa-7fb0-337b-aa43-f306fa3edd00.roa (raw, json)
Hash identifier:          apbDdzgWPtZv4w1ydZUwZU6pUwj8KPLI1+UeUllo/Qk=
Subject key identifier:   50:02:FD:EF:66:51:DD:CC:FF:2F:7E:AE:D2:6E:D6:F6:94:28:33:EB
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F58835583A23D9350BD10F9A8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/03f4dcaa-7fb0-337b-aa43-f306fa3edd00.roa
Signing time:             Fri 23 Sep 2022 12:00:00 +0000
ROA not before:           Fri 23 Sep 2022 12:00:00 +0000
ROA not after:            Sat 29 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        168.163.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:58:83:55:83:a2:3d:93:50:bd:10:f9:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 23 12:00:00 2022 GMT
            Not After : Oct 29 04:00:00 2022 GMT
        Subject: CN=99813a8d-5ffd-4716-a0a8-3aed84ab312a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:47:8a:24:b7:5c:9f:66:05:f8:34:ae:70:de:
                    d5:89:57:3e:34:59:f3:87:cc:ec:77:c2:60:9c:e5:
                    e8:b3:3d:9c:c2:ef:68:4e:58:05:2a:29:79:ee:ef:
                    de:41:db:05:df:84:0e:c1:b1:2f:2b:0b:e5:ee:59:
                    ce:e1:0b:5c:ee:d5:fc:1f:62:9c:16:13:e1:a3:b9:
                    f0:48:a1:e7:3f:a7:99:61:b1:50:11:a9:e1:42:fb:
                    5e:8f:a6:03:76:77:7d:b4:4e:3e:29:ea:1a:d4:58:
                    df:90:44:63:ed:50:09:ef:bb:51:cd:c0:44:2a:a6:
                    93:3b:13:05:01:55:4b:91:8d:13:38:b2:e0:ee:4b:
                    59:df:1d:3a:15:da:b6:84:ab:a1:63:5e:6e:b0:fa:
                    20:7b:67:a7:f0:20:ef:ad:27:9d:90:ce:09:fb:3e:
                    58:53:b2:69:44:20:66:33:1b:6a:14:80:99:10:14:
                    42:d0:93:3f:04:04:2e:cc:76:a8:4e:ab:cf:9a:55:
                    81:d5:fe:40:22:df:49:48:9c:7c:81:63:7b:c3:48:
                    e8:35:a2:e2:85:25:6d:fc:75:10:12:8a:af:90:26:
                    ce:0e:c2:c3:bf:83:26:e2:4e:59:ef:2f:84:5c:bf:
                    58:d7:fb:36:2f:1a:3f:10:b0:be:71:b2:ae:5b:8d:
                    5d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:02:FD:EF:66:51:DD:CC:FF:2F:7E:AE:D2:6E:D6:F6:94:28:33:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/03f4dcaa-7fb0-337b-aa43-f306fa3edd00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.163.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:ec:58:9e:9c:69:d6:fc:1a:60:e4:95:c1:22:f0:63:0f:4e:
         fa:19:12:4c:ce:46:d9:5a:7e:0e:5e:a8:3c:39:16:3f:54:6f:
         c3:f7:ad:36:d7:72:99:6c:16:9e:31:79:14:98:81:6d:1b:4b:
         3c:56:8a:cc:a5:ad:04:27:bb:dd:37:88:fc:21:c9:74:1e:da:
         5a:3a:70:29:14:a7:2c:4b:2b:97:cb:05:d4:f7:77:ae:68:90:
         5c:18:04:48:be:b1:ce:47:ca:ff:bc:7b:ad:d2:3e:f0:65:e5:
         07:c2:78:c3:fd:c5:76:f5:28:9e:49:9e:36:32:e1:65:28:09:
         03:db:19:40:4a:92:e8:25:65:04:3c:7b:82:43:b7:92:7f:9d:
         44:e6:6f:9c:a4:04:47:f6:f9:97:9a:0d:f8:47:cd:4e:09:63:
         6e:40:de:83:98:46:8a:d3:31:ec:63:97:e8:1e:c1:4d:e3:5e:
         34:02:93:45:25:2a:52:33:97:54:70:66:fb:1d:2c:f3:0e:73:
         98:f9:2c:30:75:96:38:ba:72:c9:27:57:d1:33:5c:c3:b4:dd:
         96:c3:4e:fa:7e:34:da:91:ea:75:a2:84:e6:42:20:e5:4f:e5:
         1e:c8:95:3a:77:f9:96:29:55:85:24:81:f7:cc:77:d6:73:1c:
         20:f9:51:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----