Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/169033a7-918d-34f1-bb4e-43040231dd35.roa
File:                     169033a7-918d-34f1-bb4e-43040231dd35.roa (raw, json)
Hash identifier:          l66YJauGPFtDv63Rlev935RH2tDllpexdHAvMGxoBho=
Subject key identifier:   7A:61:EB:B4:4D:2B:52:97:4D:31:05:5C:B5:4A:35:9D:F3:88:98:87
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858403E4E82F1E4692BF178040700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/169033a7-918d-34f1-bb4e-43040231dd35.roa
Signing time:             Wed 14 Dec 2022 12:00:00 +0000
ROA not before:           Wed 14 Dec 2022 12:00:00 +0000
ROA not after:            Thu 19 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        15.248.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3e:4e:82:f1:e4:69:2b:f1:78:04:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 14 12:00:00 2022 GMT
            Not After : Jan 19 05:00:00 2023 GMT
        Subject: CN=f9837df5-ff1c-4139-8fb6-d9201f737e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8c:75:40:2d:a7:3d:9f:03:69:b0:2a:41:cb:
                    3b:8e:6e:80:f0:96:d8:5d:92:11:3f:95:6a:45:b2:
                    02:bd:eb:64:f5:b7:aa:79:29:4b:02:6a:fb:9a:a1:
                    8d:c0:3e:dd:dc:28:e5:21:a0:79:c8:2d:8c:24:50:
                    c3:06:7e:21:f8:21:51:ae:d1:38:a7:eb:38:42:ff:
                    cb:4f:85:7c:da:97:50:ff:d3:15:59:39:73:dd:49:
                    5d:c9:ca:23:d4:65:59:f2:3c:ef:90:80:2a:a0:53:
                    a2:31:3a:3b:22:db:09:5f:7e:c0:14:83:ec:cd:6a:
                    5b:6c:37:33:a0:72:fc:94:c0:08:57:70:16:ee:67:
                    e2:c8:8c:e2:94:83:c6:2a:f3:56:68:5f:50:44:10:
                    a0:6b:a2:35:fe:7a:3e:3e:29:4c:e5:c6:a9:c7:44:
                    a1:46:d4:74:b2:f4:e9:f0:5b:14:be:97:b4:e9:23:
                    c2:d5:60:e3:61:f6:07:18:72:d8:41:f7:eb:79:e4:
                    e5:83:62:ce:b5:f4:36:29:fc:bb:89:0f:1f:33:61:
                    f7:ab:f0:86:0b:e6:2b:8b:5d:eb:90:da:ec:de:8e:
                    e1:74:59:3f:0f:b7:a8:98:c9:e3:12:12:ec:bb:e1:
                    af:43:b4:f1:d6:ce:29:4f:84:7e:fd:a5:08:94:68:
                    47:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:61:EB:B4:4D:2B:52:97:4D:31:05:5C:B5:4A:35:9D:F3:88:98:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/169033a7-918d-34f1-bb4e-43040231dd35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.248.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:0a:16:f6:16:72:58:7e:f7:8e:8e:c7:f7:8a:8e:8b:92:cb:
         93:1c:d7:f0:8d:d1:c6:da:a8:5b:7f:95:87:fa:6c:43:43:a5:
         34:5a:31:0e:4e:dc:80:89:15:1d:91:10:ef:64:7f:e3:8b:7e:
         ae:46:ae:f2:db:9f:da:c4:e1:4f:55:e1:60:91:29:a6:c6:db:
         3c:fe:7a:21:24:a6:0b:a8:68:24:e5:1b:93:0e:b1:99:1a:4f:
         2a:bc:e5:14:4b:f2:7a:d3:9e:e2:5d:b6:02:3b:b5:f3:43:cc:
         4e:17:e8:18:e2:0b:87:e6:c3:74:75:1d:b8:d0:f7:bc:69:1f:
         fb:17:b8:c8:45:85:a8:1c:50:66:67:97:36:11:7a:6e:53:81:
         c3:12:31:9f:80:80:ca:68:6a:80:48:ce:db:cb:b6:b0:10:5b:
         2e:b4:0c:48:2a:c6:03:d0:a2:2e:54:b2:e6:f2:39:a2:d6:59:
         46:e2:bc:54:69:93:94:d4:7f:6c:3d:7d:dd:0e:64:fb:f9:e2:
         07:c6:b6:3d:b8:f3:2d:fd:85:71:da:d8:92:5c:4a:06:eb:65:
         c1:06:a7:1f:1f:eb:7a:55:7c:69:52:7a:69:06:38:87:49:de:
         1d:4d:2c:f2:a7:28:a9:2a:76:6e:2a:85:bb:49:83:a5:6a:3e:
         8e:70:e1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----