Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/271c1ea1-f9b2-3da3-896a-b420c27b9fde.roa
File:                     271c1ea1-f9b2-3da3-896a-b420c27b9fde.roa (raw, json)
Hash identifier:          NZuYcCey6oySoMiDH7QKhjYkyND97p2gM2sfW7TTQ98=
Subject key identifier:   15:F6:14:71:2E:AE:87:B4:2A:1F:3B:52:6E:65:7E:C1:72:91:F7:22
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840A04F2B4213FFE3C4D5361AE0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/271c1ea1-f9b2-3da3-896a-b420c27b9fde.roa
Signing time:             Wed 18 Jan 2023 12:00:00 +0000
ROA not before:           Wed 18 Jan 2023 12:00:00 +0000
ROA not after:            Thu 23 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        15.141.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:a0:4f:2b:42:13:ff:e3:c4:d5:36:1a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 18 12:00:00 2023 GMT
            Not After : Feb 23 05:00:00 2023 GMT
        Subject: CN=ab70799f-8163-45cb-b7bb-0bb0551e83ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3f:7b:dd:c9:4d:dc:20:cb:95:cf:87:e8:b9:
                    86:e7:27:25:d1:e1:0c:11:42:36:04:4c:17:3d:f0:
                    01:e9:fc:28:a8:4e:42:89:06:f8:22:75:4c:98:8e:
                    9e:65:77:2d:d7:2d:ce:ea:cd:b1:3a:38:cc:36:90:
                    c5:ea:4e:7a:e7:e3:7a:a0:5f:12:30:71:71:ea:e6:
                    e7:39:6f:17:75:b2:e9:20:9b:86:e9:0e:98:7c:55:
                    6c:5d:37:bf:b0:59:bf:fd:fe:ce:f7:83:51:69:fd:
                    a9:bb:94:95:b1:a2:03:25:b4:05:66:63:10:0d:19:
                    73:9e:e0:2d:aa:84:df:bc:1c:3b:e2:8b:04:05:e1:
                    37:7e:69:ec:68:03:e2:2f:1f:d2:17:40:50:7c:f9:
                    7d:1d:2a:b4:d2:13:e0:af:21:b0:44:d1:75:4a:76:
                    e5:17:f4:be:29:98:81:5b:96:11:3e:c3:3e:7e:92:
                    d0:c0:a8:4b:e6:79:b5:90:b3:72:af:ed:c6:58:b4:
                    ff:dd:b9:79:19:f1:41:5d:0c:c4:64:38:f8:6d:ed:
                    5c:14:82:41:9b:56:b1:d1:56:40:59:91:2f:cf:c9:
                    d2:cd:31:40:c2:50:2e:03:a2:17:86:4c:51:3e:2a:
                    b9:c6:51:6f:8f:05:96:72:0e:a0:4d:d2:5c:a2:45:
                    d8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F6:14:71:2E:AE:87:B4:2A:1F:3B:52:6E:65:7E:C1:72:91:F7:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/271c1ea1-f9b2-3da3-896a-b420c27b9fde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.141.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:13:d2:b4:7d:bc:ea:cd:29:b4:13:31:02:9e:35:73:0b:47:
         5c:bd:52:5b:bb:49:59:9f:0b:7d:56:ff:66:49:06:3a:c0:81:
         29:36:46:8f:20:9b:26:ef:9e:8e:7e:7e:01:c8:de:05:da:97:
         b6:26:0a:57:23:e9:c7:2a:4a:bd:44:46:c6:c8:19:30:b7:0e:
         4f:e9:d9:8e:dc:68:55:c8:9d:aa:34:d8:0e:13:b0:95:de:73:
         88:41:19:a2:e5:e1:9e:fe:cf:0c:8a:a9:c6:a9:48:9f:6b:dc:
         63:55:a3:9f:67:f8:8f:2d:be:f1:24:33:65:0b:9c:01:8e:e5:
         e7:ae:1d:9b:3c:cc:4f:17:ac:ea:e3:f0:bb:86:ab:f3:36:f8:
         97:70:76:71:04:1d:f7:6f:94:cb:c9:64:38:39:4c:1b:c1:67:
         bc:d2:23:f1:74:ac:fb:f5:e5:70:68:7e:ee:e6:af:68:08:87:
         48:1b:9f:78:1c:4d:24:8d:69:29:a2:15:55:44:e8:6f:7d:90:
         11:b1:0f:70:4b:db:57:f3:f9:ee:60:52:0a:30:fa:5b:05:23:
         0b:f5:49:a0:71:67:0f:b9:09:67:fd:ad:51:22:e5:55:e9:f3:
         a9:72:06:df:65:a6:95:ab:35:9e:8d:e7:64:9c:bc:96:c6:3b:
         04:51:a0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----