Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ec6f8e2-bf44-3f34-9e0c-a209ce803a0f.roa
File:                     3ec6f8e2-bf44-3f34-9e0c-a209ce803a0f.roa (raw, json)
Hash identifier:          rJWSchmslbBr3NlwMBc2+dhrUlsRG8Lg/55fKu9UIiE=
Subject key identifier:   A1:17:47:91:6D:61:07:97:84:E0:BD:1E:32:B7:F5:75:C4:1E:12:E0
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858403DCFEBAD9E4857BB8102A880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ec6f8e2-bf44-3f34-9e0c-a209ce803a0f.roa
Signing time:             Wed 14 Dec 2022 12:00:00 +0000
ROA not before:           Wed 14 Dec 2022 12:00:00 +0000
ROA not after:            Thu 19 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        15.158.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3d:cf:eb:ad:9e:48:57:bb:81:02:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 14 12:00:00 2022 GMT
            Not After : Jan 19 05:00:00 2023 GMT
        Subject: CN=c0ddb0bf-293a-4f03-8c39-340697055fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4d:11:9d:fb:f5:87:4a:b8:b5:25:a4:a0:a6:
                    74:c7:95:4c:ad:98:46:38:6e:8a:92:0d:10:e5:7d:
                    74:ad:a7:69:a3:d5:1e:00:51:c5:e6:52:ee:02:a6:
                    7a:f1:e2:21:65:aa:34:ab:e8:28:84:c2:de:59:03:
                    68:c0:6d:82:86:83:15:98:bf:a9:b8:49:c0:ff:fe:
                    e6:d0:16:7c:c1:07:8f:74:c7:a7:07:d7:80:3a:8c:
                    b9:e9:d6:e7:e9:97:02:01:2a:ab:da:7a:10:2e:db:
                    31:f0:e0:d2:c4:99:bf:98:38:0f:1a:ae:6d:65:d4:
                    73:d5:bd:d9:61:9b:ae:19:f1:3e:b0:d0:d2:d0:65:
                    75:23:01:51:85:d9:e7:af:ea:97:29:34:1f:28:da:
                    a7:b9:13:2f:c8:35:df:f8:47:ee:56:7b:05:30:82:
                    12:31:5c:1c:d5:7f:01:3c:60:ce:30:1f:ce:54:ec:
                    6d:6f:d6:af:66:73:5a:a5:53:bf:c8:a8:fe:ca:76:
                    8a:70:be:42:15:de:51:8c:96:b1:32:45:2c:26:01:
                    9b:a2:cd:47:23:9a:ef:18:24:f2:d3:57:4c:b2:b3:
                    21:2e:db:2a:a1:51:8b:f1:5a:6b:6d:bd:34:27:a8:
                    76:1d:40:47:33:bd:de:6b:67:2a:fa:ad:3f:50:ab:
                    9f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:17:47:91:6D:61:07:97:84:E0:BD:1E:32:B7:F5:75:C4:1E:12:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ec6f8e2-bf44-3f34-9e0c-a209ce803a0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.158.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:b0:39:2c:3a:e2:57:d5:0e:bd:46:94:02:55:24:17:a6:30:
         98:fd:a1:c9:9b:5f:00:1f:35:79:d2:11:76:06:70:3d:aa:37:
         52:e2:df:69:b8:94:53:b2:de:12:e0:f9:e1:0c:de:e6:cf:aa:
         a4:00:27:b7:37:e6:27:22:f1:2b:22:df:a5:fb:4b:3f:55:5d:
         f8:a5:18:85:a1:1a:10:18:9c:99:f6:95:16:78:fd:e6:43:ef:
         1a:8f:49:85:d7:c8:ab:49:57:48:c3:74:d2:e1:41:8f:1f:ea:
         c9:1e:04:f9:78:db:06:f5:ed:b5:0d:98:d9:41:a2:e3:8c:97:
         26:02:6d:85:a0:9d:5a:cb:92:9d:33:d4:10:f1:f9:0c:6b:98:
         e3:fc:c0:e5:17:6f:a8:e3:b5:38:08:ab:dc:d7:e4:84:23:26:
         9b:ed:03:fe:0d:16:2c:39:72:dc:28:07:3d:e5:04:d6:d7:a7:
         08:bd:bb:ee:c1:24:23:48:bd:fa:fa:fc:f8:13:b9:a6:16:24:
         d4:3e:f7:91:ea:82:cb:1a:5b:e6:64:39:8d:3d:73:78:52:14:
         27:06:49:41:31:15:d3:1b:df:d4:63:6f:e4:75:36:e6:9e:6f:
         f4:0f:36:54:cf:26:24:92:94:e7:44:b5:d8:5a:01:15:6c:05:
         11:0d:33:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----