Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/19a83f7d-44cd-33b9-a49b-bb2a9f5dbc4d.roa
File:                     19a83f7d-44cd-33b9-a49b-bb2a9f5dbc4d.roa (raw, json)
Hash identifier:          rqGPjkA/CUyoul3aLauvEqPslMfCmWShDIgD0cTyygc=
Subject key identifier:   C1:0C:B3:C7:76:1D:8C:C6:9E:7F:84:22:C8:9F:1E:12:3A:43:A1:FD
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CE4A9AE3BDD1D91E228319DB0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/19a83f7d-44cd-33b9-a49b-bb2a9f5dbc4d.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        54.160.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e4:a9:ae:3b:dd:1d:91:e2:28:31:9d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=5dc0bf1c-4cef-41d2-b95c-89b00f120800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ff:57:87:17:2e:39:a3:4d:3d:12:bc:5a:cf:
                    a2:0a:c0:95:2b:59:ab:2f:99:df:fc:0b:e8:ca:5b:
                    c4:27:e1:54:97:93:12:27:44:24:57:bd:c6:64:da:
                    e8:fc:ab:94:f8:c0:73:ed:cd:ce:b7:c0:34:3e:50:
                    20:f9:3b:87:98:3f:c1:a6:13:f2:17:ab:38:02:dd:
                    62:55:ba:7b:0a:87:c2:d3:0d:45:06:e5:92:e3:e7:
                    22:3b:3f:2b:7d:33:63:17:52:e5:25:69:8a:10:76:
                    13:ee:f3:c3:88:34:99:71:be:70:e2:fa:1b:53:37:
                    32:00:92:98:7e:4a:e6:aa:b8:c9:36:fb:7b:65:f9:
                    21:5f:db:db:9f:db:e8:f1:cb:a2:b5:25:6e:a3:25:
                    35:64:02:44:1c:33:e0:3d:68:6f:6f:76:f1:d1:58:
                    50:58:f3:45:0f:19:1d:cc:90:82:d2:c2:66:0c:16:
                    1b:bd:e1:6f:40:6b:f7:df:8c:f4:8d:80:bf:af:c7:
                    15:32:55:9d:36:eb:7e:3b:04:be:0a:9b:a1:8e:1f:
                    3a:8e:39:0d:30:68:3c:1a:ef:a3:69:d4:6c:de:3f:
                    26:5b:14:e8:d7:d5:a0:d0:08:7d:bd:7a:fe:93:1c:
                    e7:79:86:a6:9d:36:e0:4d:60:69:77:b0:2d:50:f9:
                    ba:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0C:B3:C7:76:1D:8C:C6:9E:7F:84:22:C8:9F:1E:12:3A:43:A1:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/19a83f7d-44cd-33b9-a49b-bb2a9f5dbc4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.160.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:fc:ee:5f:7e:d4:bc:c8:e7:66:df:ca:c8:6a:25:49:e6:bb:
         e5:7b:03:23:7b:84:de:23:ce:cb:a1:b4:76:13:87:7f:a1:d4:
         aa:69:69:f2:d3:b7:09:a4:45:89:82:98:47:35:f5:bb:42:f6:
         02:6e:9e:5e:ef:fd:17:e0:d3:f7:a3:1b:6f:48:7c:f6:90:e8:
         36:ee:4d:c4:f7:cb:33:bc:05:e6:e3:27:20:4d:99:d9:cc:0f:
         7c:ec:91:92:e6:fd:91:74:fd:42:a2:cb:6e:05:2e:5a:86:95:
         4e:7e:24:1c:ab:be:b5:3a:10:14:c6:aa:2d:64:7b:7e:17:e3:
         11:7a:3b:5f:48:35:b2:21:1b:ac:12:3a:9b:9c:48:65:12:9a:
         33:b7:23:db:9b:20:37:53:3a:5e:0c:2d:7a:0e:89:a1:3f:de:
         2f:51:ab:f8:56:d8:2e:78:21:e1:53:13:8f:c6:62:d9:24:28:
         39:72:74:53:a6:d7:6d:1d:ab:fd:20:98:70:a8:d8:4e:0c:d1:
         fe:9b:78:d9:a2:55:b7:80:6b:5b:0b:94:df:89:6d:fa:ba:c3:
         c4:cc:e6:d7:81:db:91:36:c9:c2:ef:75:f6:0b:ce:e5:a6:b7:
         74:f4:0e:60:79:1e:8a:45:24:e7:14:63:5b:db:a9:92:b1:ed:
         af:de:62:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----