Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d4ee211-202b-3a74-b347-75a42fb50dc5.roa
File:                     0d4ee211-202b-3a74-b347-75a42fb50dc5.roa (raw, json)
Hash identifier:          Uih1fnJ0SSOaXddGDXK7oVuph/0KYj7zU2XK9Ea9DMY=
Subject key identifier:   BE:29:68:4C:27:A4:FD:46:0D:31:25:26:65:D1:A1:72:8C:D5:39:6E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FF8928780072E45BD98523F80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d4ee211-202b-3a74-b347-75a42fb50dc5.roa
Signing time:             Sat 19 Nov 2022 12:00:00 +0000
ROA not before:           Sat 19 Nov 2022 12:00:00 +0000
ROA not after:            Sun 25 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        54.192.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f8:92:87:80:07:2e:45:bd:98:52:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 19 12:00:00 2022 GMT
            Not After : Dec 25 05:00:00 2022 GMT
        Subject: CN=cb250ba1-5aa9-4167-9f0a-fb76d372816a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7f:f0:72:7d:aa:bc:84:15:99:2e:8b:2b:31:
                    cb:c4:84:94:29:94:69:3b:93:ff:1f:ad:0b:be:0a:
                    69:35:64:e9:50:32:91:d7:35:24:4b:d8:d0:36:86:
                    be:bb:57:09:9d:77:45:ce:23:6c:37:70:06:50:ae:
                    e6:30:f1:75:25:24:df:48:6a:37:bf:63:45:5f:f7:
                    7b:38:51:01:28:94:6b:ab:a2:53:d8:13:d0:fe:1e:
                    15:b4:bc:5c:e9:f7:7a:70:15:a9:8c:98:e1:58:24:
                    c6:4d:3a:e7:3b:89:9a:7d:7f:99:1c:2b:fa:c6:cf:
                    4c:46:1f:09:ce:81:3a:c2:e5:74:8a:bf:dd:06:3e:
                    8c:8d:ab:25:6b:65:50:6c:c3:37:17:b0:fc:65:d9:
                    f3:88:7e:cb:e2:ce:9a:1e:7f:1e:88:bf:6f:d0:7d:
                    b3:8a:b8:5e:dd:a3:9b:9e:58:60:15:2f:96:21:12:
                    e3:d5:86:96:13:5e:e6:da:b7:5c:1d:ca:f9:87:bd:
                    55:5c:71:39:b3:78:9e:e0:2c:ac:44:a8:02:ab:f4:
                    51:85:8a:7d:d0:27:60:6b:91:3a:3e:31:45:3e:2b:
                    90:85:aa:0c:56:03:e7:a9:4c:f8:82:8a:b9:fa:b7:
                    85:9f:8d:d5:29:73:52:c2:5b:fe:2a:ca:26:f8:13:
                    f2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:29:68:4C:27:A4:FD:46:0D:31:25:26:65:D1:A1:72:8C:D5:39:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d4ee211-202b-3a74-b347-75a42fb50dc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.192.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:7b:67:b1:c9:eb:8f:a7:dc:95:8c:ec:79:7a:03:94:d0:1b:
         09:fb:e2:41:90:5e:4a:2c:1c:32:05:8a:0c:43:66:5f:25:91:
         6b:25:4f:d3:ec:56:db:93:29:6f:66:98:0c:bc:40:16:b1:05:
         11:a1:a6:eb:5e:84:c9:6d:c3:2d:67:c0:04:a8:9a:c2:51:cf:
         9c:7b:35:35:89:50:e2:55:df:e9:c3:40:55:19:37:cc:f9:9a:
         49:ff:19:bc:dd:5e:13:d3:5d:b0:28:af:2b:c2:d2:de:a4:5b:
         d9:fd:9f:db:32:14:9a:a9:f0:97:70:f8:2b:0d:3b:34:ab:8b:
         dd:75:b2:f6:a5:09:01:70:49:b3:12:0a:65:d1:17:f2:73:77:
         d1:1d:af:57:eb:45:57:85:04:da:36:fa:0e:02:4a:2c:fa:8f:
         85:7b:e1:79:08:f4:13:f2:1d:66:38:05:0d:5b:8d:41:6c:de:
         46:2e:b2:4a:e5:15:5a:fd:73:d1:14:79:a2:e9:4a:c4:7f:5a:
         dd:9c:21:48:e3:e9:a2:1a:89:bf:20:86:f9:5a:52:f6:31:09:
         cc:92:44:90:25:05:33:3e:51:09:79:82:00:21:86:b6:05:d9:
         38:e0:60:f9:bd:49:24:bd:4b:bb:72:48:c3:42:f7:8a:7d:df:
         dd:44:28:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----