Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d2001a3-2cc8-3995-8c95-c8d28e0af361.roa
File:                     0d2001a3-2cc8-3995-8c95-c8d28e0af361.roa (raw, json)
Hash identifier:          BOiaibWs81L4gfxkW3Bzk5CcVWTLBugat6/uWaBePkU=
Subject key identifier:   C8:E5:38:5E:5E:F9:14:1E:A8:E3:4F:57:08:4C:77:07:9D:F2:D1:5E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858403A8E37D9B51B4A0125B8EB00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d2001a3-2cc8-3995-8c95-c8d28e0af361.roa
Signing time:             Tue 13 Dec 2022 12:00:00 +0000
ROA not before:           Tue 13 Dec 2022 12:00:00 +0000
ROA not after:            Wed 18 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        13.212.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3a:8e:37:d9:b5:1b:4a:01:25:b8:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 13 12:00:00 2022 GMT
            Not After : Jan 18 05:00:00 2023 GMT
        Subject: CN=396373bd-df66-4ca6-a4ab-2d0b7fba8fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0e:64:8b:36:ae:82:c9:3d:75:06:e4:2b:5e:
                    e1:cb:b5:fc:d9:76:a7:04:5a:ba:22:9a:36:de:32:
                    b2:fb:ca:d6:0e:16:54:d7:e5:cb:ed:5d:87:59:18:
                    2d:b4:5c:ac:a2:0d:b7:ef:c0:4a:27:9a:ce:5a:c6:
                    29:c3:53:04:e8:9b:1b:3e:92:92:33:ca:84:db:fd:
                    2a:f0:51:26:2b:b0:4c:b1:52:82:c1:fe:2c:4a:b1:
                    fe:9a:1a:f4:c0:9d:27:61:02:c9:66:7f:00:03:2f:
                    bf:6a:d7:74:5a:bb:65:d3:21:05:4a:31:d1:0e:a4:
                    ce:24:c2:90:80:56:c1:e7:3c:bf:6b:1a:32:7b:77:
                    b2:0d:45:ea:f0:de:9c:f2:9d:9e:89:e3:ba:35:19:
                    26:a2:ac:db:f0:24:a8:56:15:72:7e:8d:0d:02:f3:
                    66:95:63:a3:69:31:5a:2b:d6:bb:93:72:7b:b3:e6:
                    01:92:7f:27:cc:c6:5d:ba:fc:9c:84:66:d2:44:ee:
                    92:05:57:3e:d9:97:96:61:45:26:ad:23:25:dd:89:
                    98:47:6b:dc:0b:66:e0:ef:8c:c9:a3:25:c7:49:9e:
                    33:f8:f5:3a:f7:fc:21:7b:02:41:ee:45:1f:c3:90:
                    d3:d9:1b:45:39:c7:d0:29:3b:78:4c:80:6e:27:b5:
                    64:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E5:38:5E:5E:F9:14:1E:A8:E3:4F:57:08:4C:77:07:9D:F2:D1:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d2001a3-2cc8-3995-8c95-c8d28e0af361.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.212.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:14:1d:8c:0f:2a:22:cc:f9:df:d6:30:1f:b1:0f:c4:ab:12:
         7c:6a:88:50:e6:82:57:79:91:b9:b9:58:74:80:e5:39:4d:d0:
         35:b2:8f:31:12:f7:6a:81:f2:29:bc:56:c4:18:63:e4:f9:23:
         1c:c7:51:db:fc:59:ca:f2:43:77:69:c3:33:7f:c8:8b:9c:fc:
         dd:94:7b:30:d1:e7:91:27:d5:e9:ee:e0:5c:f0:4b:6b:6a:8f:
         9a:c1:ae:31:eb:37:34:82:30:31:03:ec:f8:2d:6e:5d:fe:e1:
         1d:cb:48:11:88:ca:cc:38:cb:de:c5:76:ac:94:e4:94:c1:2f:
         c8:e7:1b:ed:22:d1:f8:1b:4f:a3:86:8a:5e:44:26:3c:61:5e:
         2f:64:0c:c8:1c:71:ae:92:b6:0a:0d:40:79:a7:34:28:46:ef:
         e4:5a:af:79:17:a8:6c:ce:be:47:34:7d:a8:2d:d3:85:3c:88:
         2d:4c:08:24:2f:06:7f:e6:ef:e6:d4:67:2e:75:af:5e:0a:7c:
         92:64:5b:80:81:fb:32:5f:de:81:34:6d:56:35:ad:6a:c1:d7:
         3f:de:e9:d6:df:08:7b:c1:08:18:a6:b6:2e:5e:73:f8:9c:75:
         b3:1a:a9:9c:23:17:d1:d9:fa:e1:f8:a2:5e:71:8d:b8:27:5e:
         40:af:98:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----