Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a893647-a848-30d8-8f57-0bef3efea020.roa
File:                     0a893647-a848-30d8-8f57-0bef3efea020.roa (raw, json)
Hash identifier:          68Hitms3rbu0AVJzKXnN60SpW2J5feFxQllqb02OOw4=
Subject key identifier:   14:61:DE:7C:F3:E6:CE:14:C8:79:63:15:5D:42:07:88:3C:64:3A:9B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E53F33104A1E6B5D6E0A00280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a893647-a848-30d8-8f57-0bef3efea020.roa
Signing time:             Wed 22 Jun 2022 19:36:07 +0000
ROA not before:           Wed 22 Jun 2022 19:36:07 +0000
ROA not after:            Wed 27 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        15.202.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:53:f3:31:04:a1:e6:b5:d6:e0:a0:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun 22 19:36:07 2022 GMT
            Not After : Jul 27 04:00:00 2022 GMT
        Subject: CN=1f5baf7f-15fb-4653-abbe-71f315c6fccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:99:64:e5:06:d5:26:d2:26:72:93:9c:e8:77:
                    85:f3:60:f6:d2:a6:d5:0e:b6:38:86:94:b6:bb:24:
                    66:f2:0b:5d:e3:28:c9:c8:02:7b:e9:74:6b:e5:a6:
                    44:31:8b:73:e8:4f:5a:72:2c:07:e2:5d:c4:3a:fe:
                    8f:1d:45:8c:89:99:05:95:ae:ba:bc:bb:dd:8b:d4:
                    61:f3:23:77:f5:e7:d9:51:fd:be:f5:44:99:88:2d:
                    92:c5:a4:24:10:28:e8:8a:7d:26:55:13:c1:37:bc:
                    f7:3a:df:c4:7f:9c:51:d9:d5:a5:0e:fb:27:14:da:
                    fc:7d:50:b0:39:94:24:9c:e1:66:32:f7:35:cd:8d:
                    7b:59:4c:70:df:2a:eb:96:33:39:d9:67:8c:11:85:
                    fb:62:ed:18:78:b7:3c:c8:c0:27:ac:66:ea:da:e6:
                    61:54:8c:b3:c8:fb:80:42:38:57:60:19:3c:96:fb:
                    a2:bb:f7:41:31:b7:3c:f1:ff:38:57:f7:18:1e:4c:
                    47:a4:75:c5:91:dd:2d:71:85:19:d9:9c:ac:39:bd:
                    dd:48:55:85:8a:07:42:03:5c:2e:f7:cd:ab:30:aa:
                    76:c2:e9:7d:c0:7e:cb:d9:3a:6b:83:2f:9a:79:f7:
                    45:01:10:8d:26:b1:6c:27:a6:3e:1a:4d:0c:9b:4a:
                    69:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:61:DE:7C:F3:E6:CE:14:C8:79:63:15:5D:42:07:88:3C:64:3A:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a893647-a848-30d8-8f57-0bef3efea020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.202.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:7f:bb:2b:c6:a1:e7:d3:18:b7:d9:95:c1:e3:35:fa:e2:70:
         31:ed:76:53:7a:2f:e3:f4:65:0e:5d:30:b3:9d:e7:52:65:74:
         4e:15:1a:83:35:d0:db:e1:61:33:aa:4a:eb:eb:9c:fc:ad:05:
         bd:49:ee:28:6c:36:f4:9f:51:32:b5:e0:56:f6:ce:09:60:2c:
         b3:a9:db:52:14:20:22:9b:b3:fd:95:54:1f:80:1f:c5:a3:f3:
         01:2c:29:c2:35:97:35:3f:ef:56:65:bc:ce:34:77:22:22:6f:
         7c:b0:f5:75:18:b5:f3:92:b3:b6:e7:fb:1d:37:f8:1a:a7:89:
         e4:d8:e1:2a:d7:a7:55:0a:1c:1d:c4:8f:f2:bf:c7:bd:fa:5c:
         ee:f2:86:a0:5d:bb:6b:0f:78:71:d7:1c:08:10:68:28:6a:b7:
         58:f0:63:c3:8d:6a:d5:75:ac:fc:6b:42:38:c3:af:ea:b0:f0:
         39:7f:76:36:b8:33:e8:56:ab:a5:2f:14:76:c3:c3:ba:28:67:
         80:3d:fb:01:8f:23:8b:d6:af:59:e7:a3:2b:26:b5:4f:11:4b:
         c8:fd:3b:93:b9:a3:8d:39:d7:61:a1:4c:7b:3d:fe:ca:4d:74:
         21:b9:e7:29:bf:6b:63:1d:55:66:e1:e7:a7:c7:59:04:f7:53:
         1f:57:6a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----