Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4147e941-cd5b-33e3-ae0b-546ccfb6c019.roa
File:                     4147e941-cd5b-33e3-ae0b-546ccfb6c019.roa (raw, json)
Hash identifier:          IdNjCf0VZmFWWZUi+iBofVSK5QHP8kLsY4rrITBFst4=
Subject key identifier:   B2:16:05:39:33:65:86:48:67:9B:B0:95:BA:59:80:65:D3:63:F7:4D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E3E9388F176447C02603CF7C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4147e941-cd5b-33e3-ae0b-546ccfb6c019.roa
Signing time:             Tue 14 Jun 2022 12:00:00 +0000
ROA not before:           Tue 14 Jun 2022 12:00:00 +0000
ROA not after:            Wed 20 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        15.152.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:3e:93:88:f1:76:44:7c:02:60:3c:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun 14 12:00:00 2022 GMT
            Not After : Jul 20 04:00:00 2022 GMT
        Subject: CN=c99dfba7-cd2b-416e-9b7a-dcaf2862af7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ba:ed:c7:34:37:eb:e7:e1:55:13:50:86:6d:
                    28:42:59:92:6e:74:7e:fd:62:1e:d4:dc:8c:5b:21:
                    ef:5d:a9:2d:5e:cc:c5:0f:91:2a:3c:eb:76:aa:75:
                    c6:c2:99:39:62:57:d0:93:67:01:db:92:cb:11:b4:
                    44:e5:cf:fb:6d:0b:7d:e3:cb:53:a7:61:94:91:7c:
                    bb:3e:68:ae:1a:22:67:6e:bc:67:03:45:30:94:6d:
                    5d:21:80:09:ea:da:2f:4e:9e:b7:35:b0:c4:26:57:
                    8c:90:59:f2:ae:bd:83:92:f3:73:09:b4:7c:b1:b8:
                    c4:eb:06:de:93:74:0f:90:9d:0c:0a:dc:9d:90:94:
                    83:f9:59:77:78:21:c9:fa:46:53:0d:a5:34:0a:03:
                    d0:35:1e:5e:92:b7:ac:49:96:2c:c5:b0:d3:84:6a:
                    a7:a2:f4:b3:2e:d1:73:6e:8a:e7:10:fc:6c:14:77:
                    b1:fb:73:eb:de:3f:ee:f4:5b:03:09:d8:dd:67:2d:
                    5a:ed:7f:19:9e:ae:86:2f:d8:73:92:cf:7d:42:c8:
                    81:eb:5d:49:5b:12:7d:e1:62:4d:7a:cb:aa:69:ff:
                    6f:d9:d9:24:bb:ca:aa:40:56:b0:0b:bb:f0:95:8a:
                    9f:63:06:81:06:a8:c2:5d:ed:61:a1:76:62:71:7c:
                    50:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:16:05:39:33:65:86:48:67:9B:B0:95:BA:59:80:65:D3:63:F7:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4147e941-cd5b-33e3-ae0b-546ccfb6c019.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.152.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:aa:17:89:59:bd:83:3b:fd:65:da:bd:9a:e6:91:9f:2e:6d:
         85:5b:92:b2:36:fb:17:46:b5:49:be:f0:64:17:5c:b3:80:b4:
         12:ba:b1:f0:bc:f8:b0:a2:7f:6a:05:ae:6d:f3:7b:a5:36:e0:
         60:1e:31:19:fe:0f:db:a2:33:47:73:01:38:de:53:1e:76:11:
         2e:99:9d:dc:0b:05:8d:ca:c8:d3:64:d5:47:58:20:e4:23:48:
         8b:d3:14:91:7f:87:34:11:1d:17:b6:07:10:1f:e0:50:f0:0f:
         cc:0d:60:aa:dd:80:d1:77:26:28:d0:88:cb:bd:7d:c1:01:e3:
         08:e7:f6:31:51:df:47:44:e2:93:f1:1c:fd:65:45:fb:3a:f5:
         7b:ce:04:59:ec:81:f5:76:d4:c9:b5:38:bd:18:b8:86:58:e5:
         d6:d9:8f:f9:c8:d9:73:8c:48:c4:a9:59:6e:13:76:0b:2e:e1:
         ce:60:30:b2:ae:cc:e9:a0:6e:11:cd:68:32:19:3d:88:ff:af:
         dd:1d:59:b7:98:e6:36:f3:5d:a2:a4:41:85:ae:ca:00:53:35:
         02:8b:62:70:f1:b2:a9:3f:09:7e:24:88:a7:97:d6:77:ce:3f:
         06:8a:3c:11:d0:59:f8:de:04:8b:7f:34:ae:8c:09:f8:77:6a:
         82:42:ea:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----