Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0c9c8b20-57e1-3c9c-b622-2945ea2e7f48.roa
File:                     0c9c8b20-57e1-3c9c-b622-2945ea2e7f48.roa (raw, json)
Hash identifier:          aC1ZuDyaOa2aJaABlfivazIo76mdtiVmX9OajE2aVgk=
Subject key identifier:   1A:CE:88:DF:91:69:83:0A:B4:D5:6A:03:A7:46:91:8B:17:F0:66:45
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E41A88619E5CEF5DA0E957A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0c9c8b20-57e1-3c9c-b622-2945ea2e7f48.roa
Signing time:             Wed 15 Jun 2022 12:00:00 +0000
ROA not before:           Wed 15 Jun 2022 12:00:00 +0000
ROA not after:            Thu 21 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        15.206.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:41:a8:86:19:e5:ce:f5:da:0e:95:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun 15 12:00:00 2022 GMT
            Not After : Jul 21 04:00:00 2022 GMT
        Subject: CN=4ab8cf4b-057f-4bac-b1f5-de9584abb123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:70:51:8e:04:1b:9e:f5:7c:d2:a2:09:f9:36:
                    30:89:ad:2e:2f:d0:ab:60:e7:7f:04:5d:03:76:dd:
                    06:0c:f3:9a:72:1d:c8:0e:e4:bd:56:d2:f4:fb:3f:
                    04:b8:a5:02:9f:90:71:08:4d:7c:56:92:e8:e4:3f:
                    78:58:29:98:0e:91:30:a2:99:fc:c8:63:76:c6:7b:
                    82:6b:f4:ff:f6:0d:49:62:23:ce:44:9b:31:31:e4:
                    38:bb:3c:df:23:c1:18:eb:f0:c0:82:27:8e:63:50:
                    45:25:f3:d4:ab:3f:28:06:95:c1:e5:98:a5:45:b9:
                    af:00:94:4a:33:0e:bb:ae:9e:86:e4:8d:82:02:1f:
                    14:be:b4:4d:d4:68:2f:5b:16:68:6e:00:f5:d1:e9:
                    64:25:89:92:a0:e3:fb:29:8f:79:5f:85:66:c9:8c:
                    0c:99:2e:00:ff:6e:70:78:6d:bd:5a:10:47:d8:bd:
                    2a:41:75:9f:87:9d:c8:53:29:ea:99:e9:72:74:6c:
                    8b:57:40:f7:10:3c:de:48:84:b5:b1:82:e3:96:ee:
                    8d:74:72:08:a2:0a:45:a6:1b:57:36:12:33:77:d2:
                    bf:5c:45:e3:e1:2f:91:21:af:7d:d9:c7:be:36:76:
                    53:3e:8b:5c:5c:7c:0d:a9:1d:bc:41:c1:0f:d3:85:
                    db:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CE:88:DF:91:69:83:0A:B4:D5:6A:03:A7:46:91:8B:17:F0:66:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0c9c8b20-57e1-3c9c-b622-2945ea2e7f48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.206.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:d9:12:40:32:44:52:03:bb:60:eb:96:54:7b:9e:fe:4c:1e:
         e2:17:ec:c6:59:73:b4:1e:6e:0b:4d:15:64:c2:ca:aa:2d:93:
         b6:2a:58:ec:56:66:62:a3:69:a3:69:8b:8f:33:61:6d:e8:e4:
         87:99:67:5b:0d:d1:c7:fd:fe:ae:1c:b4:23:18:5d:33:4c:48:
         fa:70:f5:de:07:11:34:60:6f:d5:5f:c9:cb:a0:37:dd:a1:af:
         26:1d:69:3d:b9:72:08:a6:cf:36:69:c0:53:d2:90:91:db:37:
         e6:02:3e:77:94:5f:61:7a:72:93:e5:b7:00:ee:84:53:54:82:
         fc:13:f0:fd:70:37:b4:d5:71:48:2b:8c:73:ff:68:e6:8e:75:
         74:cb:d8:18:4b:3c:96:30:a9:36:3a:df:0c:c7:8e:8d:3f:d8:
         bb:b5:76:05:ce:af:0b:61:b8:b7:89:6d:61:a1:9f:aa:fd:2d:
         b1:20:b1:92:94:80:7e:a2:5e:17:86:13:04:64:8d:4e:18:ec:
         b5:70:70:85:ac:48:94:84:eb:c0:d8:a9:3d:2d:33:1c:6b:65:
         6d:f9:ca:a8:8e:62:a0:e6:3c:fa:e3:b4:7b:3f:a5:87:ef:65:
         78:42:fe:81:90:3c:97:a4:35:19:ed:b2:c2:c5:26:7e:4a:fc:
         6e:16:47:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----