Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f743851-492c-32ba-b22c-de7ba92b9651.roa
File:                     1f743851-492c-32ba-b22c-de7ba92b9651.roa (raw, json)
Hash identifier:          Buz7aWR2906JUz+QYrgJU1AKrLWgZ3V/fOSaaIqEugE=
Subject key identifier:   FE:FE:05:FE:26:9A:2D:50:E2:30:17:C2:AB:CC:90:1A:84:FC:75:2D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858403A8E2B04961418C4497CD400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f743851-492c-32ba-b22c-de7ba92b9651.roa
Signing time:             Tue 13 Dec 2022 12:00:00 +0000
ROA not before:           Tue 13 Dec 2022 12:00:00 +0000
ROA not after:            Wed 18 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        13.212.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3a:8e:2b:04:96:14:18:c4:49:7c:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 13 12:00:00 2022 GMT
            Not After : Jan 18 05:00:00 2023 GMT
        Subject: CN=c639e7b0-7d6d-4607-82c4-a63e601fac14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:41:fe:ce:e6:6e:04:57:94:3a:19:24:1b:27:
                    93:45:51:db:13:c4:cc:32:a4:7f:f6:3c:fc:59:93:
                    21:e3:47:27:6e:9f:39:6a:e7:11:d5:5b:00:fa:5d:
                    c8:81:92:cc:de:7f:82:f1:00:43:b5:27:b7:a5:4f:
                    dc:d0:f6:72:3a:3a:18:6b:15:f6:d3:ac:a6:b2:27:
                    1a:9b:99:72:71:32:44:ca:51:94:cd:09:15:12:8a:
                    93:03:26:35:43:b0:52:37:a8:8f:b6:15:6a:ff:fd:
                    5f:61:4f:26:cf:e5:5f:a3:e3:20:2e:ec:f2:b2:93:
                    da:60:4d:2b:0e:23:bb:2b:1d:19:78:87:d3:60:be:
                    d7:76:bd:92:db:fc:3b:01:b8:dc:26:19:81:44:24:
                    9a:f9:c8:58:bd:7d:2f:27:f7:9c:3f:1f:d8:cc:bf:
                    ed:7b:92:5d:64:a5:13:a5:1f:cd:c2:6e:5e:4c:88:
                    9d:67:db:38:10:38:95:7b:bc:4d:ee:93:b4:08:b7:
                    73:af:8b:25:f1:47:30:00:ef:92:48:62:a6:78:d0:
                    94:b7:d7:e4:d4:08:3f:84:ad:f5:f2:ba:cd:4d:d2:
                    36:aa:d7:86:08:ed:0e:59:d8:0d:fe:18:b6:d4:9c:
                    3b:e2:b5:07:6c:1b:a0:61:3d:1c:24:4b:2f:ed:09:
                    3d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FE:05:FE:26:9A:2D:50:E2:30:17:C2:AB:CC:90:1A:84:FC:75:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f743851-492c-32ba-b22c-de7ba92b9651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.212.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:81:f0:f0:83:c9:47:d2:1c:1a:dc:41:84:9b:a7:01:52:7a:
         ee:29:38:da:66:00:5c:6f:99:70:6d:38:6a:19:b3:23:64:c7:
         8e:44:65:3b:de:42:75:7d:7a:2d:6f:7d:52:1b:59:7c:5a:51:
         5d:98:93:10:69:a3:7a:40:99:b1:bd:2d:4a:31:08:76:44:0e:
         15:2d:f3:e4:e9:88:52:81:14:ff:1b:90:98:dc:86:e3:d7:9f:
         03:8e:52:86:03:73:b1:11:1c:78:12:91:41:5e:9a:7b:1c:4f:
         c4:d8:e2:88:9e:aa:6c:2b:f3:e0:99:c7:b4:88:5a:76:dc:4a:
         79:33:a4:b0:4e:da:60:37:fb:cc:a5:6b:b8:83:4c:d6:c3:d3:
         d1:b9:48:95:9b:1c:cc:26:60:a2:dd:94:b9:b1:cd:5d:fc:bb:
         6c:34:fe:71:59:68:e4:2f:25:59:f5:eb:4e:b9:97:f2:cb:db:
         d6:53:4d:ad:01:89:0a:39:03:f0:0c:f4:90:73:e1:15:da:bd:
         88:5c:3c:3a:a4:7c:f6:dc:e5:07:0d:22:44:a2:41:ff:0f:56:
         d1:2c:79:48:f9:ae:fd:de:31:8b:62:c6:35:9e:15:5e:01:1b:
         96:01:38:d0:37:14:5a:9b:1f:b9:af:9d:95:7b:75:d1:40:24:
         c5:23:90:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----