Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/252d0f5f-a5bf-33d9-b0b1-92524f690dd1.roa
File:                     252d0f5f-a5bf-33d9-b0b1-92524f690dd1.roa (raw, json)
Hash identifier:          PlOIyDgdwQN8hZLKi1/OzXBQ6/Vrg6LE4EZ4wQjBn2g=
Subject key identifier:   64:E7:EF:9D:BF:74:D8:6C:3E:69:4E:FC:C7:82:A9:3D:3E:21:E0:FD
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DA53BF44E3E1CFFF9ECDB6BC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/252d0f5f-a5bf-33d9-b0b1-92524f690dd1.roa
Signing time:             Wed 20 Apr 2022 12:00:00 +0000
ROA not before:           Wed 20 Apr 2022 12:00:00 +0000
ROA not after:            Thu 26 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        15.161.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a5:3b:f4:4e:3e:1c:ff:f9:ec:db:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr 20 12:00:00 2022 GMT
            Not After : May 26 04:00:00 2022 GMT
        Subject: CN=bcc02df9-0fec-4e98-bb3a-ed21abd7f38c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9b:b5:1f:b3:f3:e1:45:15:e3:c3:98:27:0a:
                    f4:58:21:05:06:ea:43:45:fb:15:ce:a1:24:62:e0:
                    35:9a:98:94:7a:66:df:4b:b4:ae:bb:33:1f:39:a6:
                    36:b7:98:33:0b:3b:93:a8:b7:8f:74:fb:d3:b0:d2:
                    df:79:36:ae:37:5f:df:86:03:2d:44:95:d7:bc:ea:
                    8b:6f:02:bb:6c:36:37:be:0e:2c:a7:81:8a:a4:a2:
                    0f:6c:02:89:06:39:29:4c:55:6e:ca:6d:2b:96:ec:
                    4e:65:91:44:a3:c6:0f:a4:1b:cc:95:f8:b1:ea:e9:
                    17:51:18:4f:df:45:75:b0:2c:5e:fb:9b:35:8e:10:
                    83:06:20:a8:69:2a:5d:2f:2f:5a:fa:ef:21:b0:73:
                    fd:88:4b:2e:ea:86:06:7e:66:3c:97:ba:6e:39:46:
                    cf:32:2f:68:c1:ec:98:72:30:ab:e4:a3:d6:03:1d:
                    0f:9b:72:50:6f:f7:0e:a7:7c:bc:fc:03:71:d4:6e:
                    73:90:9e:6b:67:0e:23:84:92:7d:08:c9:a4:0a:0d:
                    59:6e:29:bc:ee:a6:f3:49:f9:27:a7:8c:4a:bc:6d:
                    0d:eb:e3:b2:62:3f:9d:57:a2:2e:6a:93:fe:16:47:
                    69:49:6b:9a:70:ac:9d:68:a5:52:10:03:eb:6e:e8:
                    fd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E7:EF:9D:BF:74:D8:6C:3E:69:4E:FC:C7:82:A9:3D:3E:21:E0:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/252d0f5f-a5bf-33d9-b0b1-92524f690dd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.161.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:b7:d5:5d:83:f4:67:50:9a:c9:5b:2f:31:63:04:28:fd:cd:
         d0:85:67:5f:97:13:bb:73:aa:6f:5d:c1:31:d4:87:7f:7b:e6:
         88:67:97:b9:33:d3:0c:42:97:2d:47:95:70:b2:7e:df:02:d2:
         70:84:0f:59:af:d8:5e:06:76:dc:5a:f3:bc:fb:aa:b1:3f:0f:
         9b:37:81:9c:dc:5f:80:69:16:a3:c6:4b:a9:7a:e4:e5:0e:6c:
         5d:e2:ce:54:97:7f:90:c7:f4:1b:7e:03:b7:1b:d9:ff:6b:5f:
         44:6f:46:e8:28:57:7e:4e:ec:e9:14:5b:06:80:dd:26:fb:0b:
         58:d3:04:a2:7e:e7:90:cc:62:68:32:59:8e:f0:f6:d9:94:27:
         4e:5e:7f:b2:f9:a2:9d:e4:53:11:0b:f1:6b:e4:c6:84:ee:5f:
         d3:32:6d:58:ba:f1:18:92:31:b6:6e:43:a3:11:ba:62:53:4e:
         55:a4:46:e6:5b:3e:d6:6d:61:a9:e7:c2:d3:30:f2:a7:1e:07:
         03:eb:da:5a:44:2a:48:76:ad:7f:44:86:b4:ad:b9:68:e7:dd:
         b1:b8:32:71:81:c8:c0:e2:d5:7d:59:8a:1b:d1:47:03:6e:23:
         f0:74:4d:44:30:37:ef:00:83:8a:a5:1a:da:ab:25:c0:c6:4c:
         86:9c:13:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----