Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2e43564f-7f65-3991-8a59-12716ecf90c1.roa
File:                     2e43564f-7f65-3991-8a59-12716ecf90c1.roa (raw, json)
Hash identifier:          +/oxAk1IAi5VYYYXWDqpu2euijXT2C5+EpUZOrn3Kkc=
Subject key identifier:   60:F2:9A:75:85:FF:C1:D3:23:4C:1C:2B:AC:9B:B3:1F:C1:66:46:6E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E456912FB79FAE51436B80230
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2e43564f-7f65-3991-8a59-12716ecf90c1.roa
Signing time:             Thu 16 Jun 2022 12:00:00 +0000
ROA not before:           Thu 16 Jun 2022 12:00:00 +0000
ROA not after:            Fri 22 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        143.204.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:45:69:12:fb:79:fa:e5:14:36:b8:02:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun 16 12:00:00 2022 GMT
            Not After : Jul 22 04:00:00 2022 GMT
        Subject: CN=b0c3618b-1629-48e9-afab-195115c9aa7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:06:0b:5b:11:0a:8f:e5:68:98:8b:8f:c0:d3:
                    95:e3:26:b4:45:d0:1b:36:48:42:33:d6:71:0d:13:
                    7d:44:67:36:bc:56:08:e8:56:c7:a6:dc:81:05:3f:
                    2e:41:6e:eb:86:df:b8:d9:94:db:f2:b1:e9:81:91:
                    76:28:09:e4:e2:a2:f2:68:6e:5c:bf:cc:d3:3f:f7:
                    28:0e:48:09:86:eb:af:f4:04:f7:d6:ce:15:e3:22:
                    ef:a9:00:44:bb:83:80:21:15:34:f3:a9:96:d4:f5:
                    32:77:8f:58:ab:9a:7c:e9:7a:6c:b2:f9:62:9d:76:
                    09:4f:60:27:69:a4:37:91:e8:f9:a8:f6:45:0a:53:
                    88:1b:ae:0f:72:97:7a:55:90:5a:61:0a:0d:2f:50:
                    2a:0f:4e:89:70:e6:72:52:24:06:34:d1:71:d4:18:
                    c9:e9:85:74:51:25:62:4a:1b:0a:d4:e0:78:c6:c0:
                    71:7b:6b:fb:2f:b4:41:5a:a5:ed:a3:28:18:f6:18:
                    fa:17:a2:75:84:93:b3:6c:5d:60:30:68:13:a4:d6:
                    b8:7b:26:0c:79:d9:70:0c:81:db:6e:26:56:ac:86:
                    2d:1e:fe:30:6c:25:9f:ee:62:e0:46:6b:07:c9:aa:
                    0e:32:d5:83:a9:e6:70:76:bc:5a:20:42:9a:02:87:
                    12:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F2:9A:75:85:FF:C1:D3:23:4C:1C:2B:AC:9B:B3:1F:C1:66:46:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2e43564f-7f65-3991-8a59-12716ecf90c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.204.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:5f:a3:bf:b4:67:89:b8:6d:c5:38:31:ef:16:e4:9b:92:db:
         02:e4:9b:5c:23:e7:ed:e3:e1:26:ba:7f:37:d2:93:15:9a:99:
         7f:80:53:63:b2:01:bd:52:5a:ca:32:b7:38:6f:7c:21:7e:cf:
         65:a0:da:ea:fa:31:df:03:8d:d4:83:02:71:4b:04:0e:f1:ce:
         03:74:c0:21:bc:6d:2b:9a:04:c4:38:a7:a5:4c:08:5b:ff:7d:
         fd:33:13:e5:54:65:de:9c:b5:5c:65:ec:ed:80:32:de:f5:f2:
         de:22:93:82:7f:8a:36:47:41:0f:7c:f6:1f:17:25:36:18:86:
         27:f9:53:23:9a:a8:cb:9d:95:65:1e:d2:01:75:f2:9b:1c:d9:
         dc:09:d9:00:f3:df:21:67:03:4d:ec:ff:29:9c:20:a2:d5:5d:
         12:73:8f:5b:10:1f:07:f4:6b:00:2f:6c:3b:1c:7c:05:1f:b5:
         c2:cb:3c:cf:bc:36:49:9b:de:26:02:f4:2d:3a:e9:66:ab:d2:
         fe:8e:78:ef:68:6b:61:b1:06:f4:36:4a:93:64:88:e3:10:dd:
         bf:40:ec:43:01:15:c6:e3:0a:6a:a3:2d:df:ac:96:61:89:14:
         2a:af:49:37:89:a6:35:8b:64:09:48:0b:0e:c1:df:c9:05:70:
         0a:c3:4d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----