Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2879a075-7bec-3e7e-af28-4d041c048a13.roa
File:                     2879a075-7bec-3e7e-af28-4d041c048a13.roa (raw, json)
Hash identifier:          aaltHKO3s1idnTV8xQkhJ04KVe20EkIB9IQXNOi/AkM=
Subject key identifier:   93:5E:AE:22:B7:91:2B:5E:65:DF:CE:1E:91:EC:B3:3D:76:E7:E6:1D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E94A02BDB3B7EF651C37EF040
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2879a075-7bec-3e7e-af28-4d041c048a13.roa
Signing time:             Fri 15 Jul 2022 12:00:00 +0000
ROA not before:           Fri 15 Jul 2022 12:00:00 +0000
ROA not after:            Sat 20 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        162.137.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:94:a0:2b:db:3b:7e:f6:51:c3:7e:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 15 12:00:00 2022 GMT
            Not After : Aug 20 04:00:00 2022 GMT
        Subject: CN=e7cb8e22-b9fd-4029-a6d9-a488304fcd66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f0:e9:05:32:85:05:40:04:5e:a5:81:7e:da:
                    a4:17:fb:cc:fb:f4:41:dd:f0:cf:d2:fa:c4:a4:2b:
                    73:af:9f:6a:b4:ec:f9:40:a8:af:42:14:4f:fd:83:
                    c9:43:f4:3c:74:91:c8:2c:98:e5:56:fc:59:17:83:
                    3b:48:30:11:46:29:7c:b0:f1:2f:07:ef:00:0e:da:
                    0f:13:02:ec:ef:47:d3:66:94:91:ed:d1:b8:19:7c:
                    87:42:70:53:6f:24:d1:5f:c7:1d:66:54:98:42:a3:
                    2e:bf:bf:07:ba:51:db:c9:3a:e8:c2:b4:75:0e:b3:
                    3a:01:bd:d0:4e:0f:a1:65:f1:17:74:85:a3:b5:bb:
                    14:d3:94:b5:c2:45:63:9a:89:a8:67:39:d1:d7:50:
                    95:a1:f8:58:ae:47:be:0b:bf:ba:1c:04:3a:b6:2f:
                    60:dd:3f:43:34:35:9a:7f:88:bb:4a:bf:f6:34:99:
                    5d:eb:6a:ad:a2:ba:38:d7:5d:ef:80:9a:a3:99:08:
                    6c:58:12:a0:20:c1:89:2b:91:1e:05:da:f8:cf:8f:
                    54:49:aa:90:10:39:16:a0:44:c6:b6:b7:8e:ae:70:
                    ba:05:de:66:4d:c6:f2:5e:30:84:d9:32:81:a4:79:
                    f7:ab:26:3d:32:1c:53:cf:7a:f8:38:62:9f:c8:9b:
                    9d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5E:AE:22:B7:91:2B:5E:65:DF:CE:1E:91:EC:B3:3D:76:E7:E6:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2879a075-7bec-3e7e-af28-4d041c048a13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.137.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:9f:9d:4f:89:e6:f5:8a:21:0a:e4:eb:db:6d:99:a3:51:a4:
         0a:c3:4b:4f:06:44:91:bd:ef:00:11:ed:ba:20:06:cb:a8:e0:
         5d:7b:ba:93:1b:3e:c9:49:6b:b4:f3:44:2e:83:ed:e2:2c:78:
         2f:7f:2d:2c:ae:51:fa:48:6e:4a:78:41:24:cc:17:af:c6:25:
         1d:44:5a:47:df:b1:53:91:25:4b:6b:8f:5e:89:7f:24:f7:b0:
         8d:52:3f:fa:03:50:ac:80:ad:84:54:c3:39:d0:9a:0c:a3:1c:
         4b:33:43:a8:0b:e1:ec:a7:de:ad:55:0d:e6:bf:40:69:47:91:
         a3:88:06:01:66:c6:0c:ce:4f:8e:a8:60:96:7d:f5:e8:62:0f:
         79:e5:57:65:5d:0a:a4:2b:9f:54:63:46:fb:ca:fc:b8:f0:07:
         a9:19:73:39:68:ef:cb:57:23:13:29:19:3f:92:a1:03:e6:16:
         d8:31:10:bf:33:d3:fc:77:8f:fe:1c:c6:0a:13:ec:84:b2:e4:
         19:17:66:21:41:6b:9a:6f:96:8e:8e:36:18:05:1a:40:67:1a:
         a8:c6:4a:3e:87:6c:2c:9f:6b:d0:3c:98:14:35:c3:e5:09:f5:
         4d:7d:f4:1c:b2:a9:6d:d0:f4:41:4e:49:f6:c2:d8:66:36:0d:
         f3:70:16:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----