Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3e64e666-a692-38cc-a8aa-ecdb2cee9ca4.roa
File:                     3e64e666-a692-38cc-a8aa-ecdb2cee9ca4.roa (raw, json)
Hash identifier:          0sog6URRCrmKnFWwYXxs1R8gaI5e5mpnAsfUbGRHGnc=
Subject key identifier:   23:40:9D:AA:3B:DC:37:F9:05:8B:9D:F9:B3:39:48:B9:41:81:B7:68
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D3396AEE3A2B8E7A489F459A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3e64e666-a692-38cc-a8aa-ecdb2cee9ca4.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        144.220.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:96:ae:e3:a2:b8:e7:a4:89:f4:59:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=bce7e5c9-6bf7-4474-a1c9-63b3acdebd25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:97:3f:c4:d5:8f:16:fe:f4:8c:61:a2:04:8f:
                    f9:2b:38:c3:2d:48:17:05:36:9d:dd:4d:00:06:1c:
                    93:02:42:fd:cd:0d:7e:e5:91:ac:bf:02:4a:26:ea:
                    28:ea:bc:29:30:a3:74:54:83:15:74:d2:45:61:5e:
                    f3:d6:ce:c6:3f:99:f3:43:6b:67:30:2d:c8:9f:58:
                    1d:03:ec:92:20:7f:69:4d:32:40:67:01:29:a3:12:
                    57:f1:24:bc:5f:e9:56:b8:48:31:ef:d7:da:c5:ed:
                    37:28:c3:16:c6:4b:2f:cb:19:d7:8d:14:e0:23:60:
                    5d:4f:55:4b:e7:ce:68:3c:52:62:1c:12:30:20:81:
                    1d:61:87:f3:8f:69:f9:9d:77:ea:db:e5:9d:5b:7a:
                    e9:b7:16:03:c1:b5:3e:a6:2f:3c:32:54:99:3d:3f:
                    67:fb:98:eb:19:3f:21:03:8e:3e:67:ca:30:7d:c3:
                    da:e5:0b:63:70:fb:81:c1:b5:43:4c:0b:87:9e:a6:
                    32:3c:30:5f:91:7d:58:92:5c:43:b9:a9:e6:fb:58:
                    a3:b5:4a:fe:7d:2e:3a:94:5c:79:87:49:44:9f:ba:
                    04:c4:7b:a8:61:74:15:3f:26:26:26:da:5a:8b:c5:
                    e3:47:2d:9e:48:af:e7:e7:7f:e2:06:ce:69:96:34:
                    01:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:40:9D:AA:3B:DC:37:F9:05:8B:9D:F9:B3:39:48:B9:41:81:B7:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3e64e666-a692-38cc-a8aa-ecdb2cee9ca4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.220.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:ea:bd:2e:cf:c0:9b:51:04:55:51:78:a7:91:1a:7b:e7:26:
         86:6f:28:f6:49:11:6a:8e:3e:c1:43:aa:2b:69:e3:bf:ba:3d:
         6e:6b:6f:73:28:6f:6e:40:c8:8b:f8:92:59:f0:a7:fa:f9:3b:
         2f:5a:f8:4a:38:3d:4c:26:99:fc:da:47:5b:48:72:1a:7c:1e:
         23:2f:53:91:aa:7b:4a:96:c3:a8:d3:55:77:5b:78:ed:9e:01:
         17:df:e5:ae:4e:ea:70:d8:27:a8:fd:79:d7:57:53:28:11:e8:
         b9:10:5b:74:88:79:cc:e9:93:5e:48:02:43:e2:7f:89:de:8e:
         1b:bc:2a:d6:df:58:38:45:e0:ca:95:39:48:65:79:4d:fd:2b:
         78:ca:1d:04:8b:41:c0:d2:8e:0d:3b:f0:8b:16:39:77:4b:9f:
         69:6c:3c:2a:a2:18:70:5b:76:1c:c1:7a:ef:ba:be:2c:94:33:
         95:7d:e2:dc:bc:18:db:dc:61:b1:35:ea:ef:21:d0:b0:29:5a:
         80:4b:08:b6:21:24:09:75:23:5b:8d:34:b3:31:a0:e1:39:14:
         69:3d:0e:16:fa:24:2a:5f:86:3f:64:7a:76:31:d0:09:fa:7b:
         2f:7a:9a:ef:ba:46:c8:e2:44:1d:f6:5e:3f:15:9f:b0:4a:fc:
         76:2f:a0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----