Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/336e2c1d-c756-3be6-aa8d-d06ce1394600.roa
File:                     336e2c1d-c756-3be6-aa8d-d06ce1394600.roa (raw, json)
Hash identifier:          jjykdhMDNzjqV8NPPW30pX6gd5D2aE843g1aE9bJ9fo=
Subject key identifier:   48:23:AD:B7:1A:F6:9C:EB:BC:8A:20:47:5C:A1:A7:F0:3E:C1:CE:74
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DF98268B5F337048938F8BF70
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/336e2c1d-c756-3be6-aa8d-d06ce1394600.roa
Signing time:             Fri 20 May 2022 12:00:00 +0000
ROA not before:           Fri 20 May 2022 12:00:00 +0000
ROA not after:            Sat 25 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        54.176.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f9:82:68:b5:f3:37:04:89:38:f8:bf:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May 20 12:00:00 2022 GMT
            Not After : Jun 25 04:00:00 2022 GMT
        Subject: CN=435224e7-d3c2-4726-a610-9005bf933a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:65:5c:82:6c:51:38:be:96:a4:c4:3e:db:2e:
                    49:5b:3f:d8:44:4c:57:a5:ee:9a:98:91:e5:82:3a:
                    53:81:ef:67:e4:1d:24:51:76:1e:fc:7d:6d:b9:ac:
                    ab:d0:c1:33:38:a7:6c:45:e6:67:0e:03:7c:bc:35:
                    d8:c7:43:ad:98:d5:bc:49:83:7d:6d:ae:40:ff:d2:
                    76:33:c6:73:e8:a7:e0:e1:77:51:32:9f:e1:7a:2a:
                    0c:d0:9b:66:3b:87:42:e1:d1:ed:7f:05:0d:a3:28:
                    d9:24:a9:4d:5d:85:e5:78:aa:a4:79:1c:06:04:0a:
                    54:3f:aa:e9:03:ae:4d:1d:29:e1:c6:45:97:57:fd:
                    be:bd:f5:36:82:5a:ce:33:8b:b8:ae:9e:a3:89:13:
                    cf:76:fd:9f:28:c7:55:bd:fd:75:84:90:50:7d:57:
                    3a:a5:c7:4d:c7:b7:fa:37:2d:8c:a5:25:f6:cd:59:
                    e6:c8:c0:a0:cf:69:f3:59:19:0e:f3:5e:08:00:c2:
                    7f:3a:82:79:82:c3:2f:38:15:20:ca:a6:74:40:fa:
                    54:5a:ac:67:47:bd:97:2d:fd:e6:0b:6f:6e:bc:b6:
                    85:3b:0c:45:9f:78:59:6c:5e:91:96:bd:89:d8:d2:
                    8b:f0:7d:93:36:3f:1e:27:9a:3b:2a:91:d1:c6:d5:
                    57:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:23:AD:B7:1A:F6:9C:EB:BC:8A:20:47:5C:A1:A7:F0:3E:C1:CE:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/336e2c1d-c756-3be6-aa8d-d06ce1394600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.176.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:91:3a:50:b4:28:18:45:af:22:cc:b4:70:de:8f:cd:c6:22:
         36:81:6d:1c:b7:4f:b8:4d:26:ce:5b:aa:61:7e:b3:56:82:fa:
         af:2c:ec:34:64:50:b3:4f:41:10:2c:96:3c:2e:34:95:3a:31:
         c3:8a:d7:a9:5d:32:98:5e:5c:a4:22:c0:ec:e9:21:57:24:81:
         4d:74:8e:35:28:d7:29:86:e4:7b:eb:64:aa:38:01:5b:f8:81:
         5b:9c:28:09:0f:d0:4f:fc:82:31:1e:3f:21:73:b5:8e:87:d1:
         09:d3:29:12:58:06:c4:46:b7:4b:ab:36:cf:ee:58:23:e8:7d:
         69:aa:58:5f:68:a8:21:6a:ce:cb:27:bd:3b:70:01:5f:5a:53:
         ac:d2:1f:ec:fb:6a:ff:6a:c2:b7:d2:21:de:2d:94:88:f9:34:
         00:e7:86:fa:1c:c8:01:dd:02:e2:63:cd:e3:09:eb:6f:e7:02:
         74:68:e1:93:c7:a1:72:b3:91:b4:a6:18:4b:1e:30:23:df:7a:
         b0:f8:0c:30:0c:ec:41:9d:ba:59:16:b4:54:27:72:e0:fe:56:
         7d:30:79:13:cd:8d:b6:0d:b0:da:ed:0f:4d:d7:71:53:83:91:
         e2:a1:7f:3e:9e:18:4f:13:48:87:e5:c6:90:81:c6:2f:7c:88:
         d6:c9:d6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----