Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4b9ee310-a92d-3de9-a2e4-5e43a5b64291.roa
File:                     4b9ee310-a92d-3de9-a2e4-5e43a5b64291.roa (raw, json)
Hash identifier:          ScGuAyhUOgDJfnc0pkxbOIzd+aGG/p8zidL/WK7gz0A=
Subject key identifier:   0C:3E:F3:3E:94:DC:BB:E2:C1:D5:2C:4B:D0:ED:7C:0A:64:49:2F:CB
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E8FE2B70AB721FA3A7F143FC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4b9ee310-a92d-3de9-a2e4-5e43a5b64291.roa
Signing time:             Wed 13 Jul 2022 12:00:00 +0000
ROA not before:           Wed 13 Jul 2022 12:00:00 +0000
ROA not after:            Thu 18 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        15.221.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:8f:e2:b7:0a:b7:21:fa:3a:7f:14:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 13 12:00:00 2022 GMT
            Not After : Aug 18 04:00:00 2022 GMT
        Subject: CN=fc2ad467-59d6-4d3c-81e0-7f9d8b5462ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:49:ec:22:d5:8a:39:67:f5:af:50:d4:2e:62:
                    8e:16:70:0d:eb:fc:b1:52:fb:87:f3:6e:fc:79:2d:
                    d4:eb:66:56:da:cc:33:49:d5:15:a8:fd:11:58:0e:
                    6b:ff:86:35:46:d8:d8:e6:50:38:29:d0:06:f0:53:
                    7d:7d:28:36:30:72:ad:42:98:bb:81:75:0c:bd:34:
                    0d:67:45:d4:6b:b6:92:6e:6e:9b:74:32:de:a4:1b:
                    bd:56:bd:d8:3e:1f:8e:4f:7b:00:10:26:8b:a1:75:
                    31:53:46:e0:0d:7c:0e:47:31:38:f5:9e:b4:6d:d1:
                    80:7c:84:48:72:7f:97:d0:6e:b1:52:88:35:5c:bc:
                    3a:40:74:39:36:6c:56:28:d2:90:2c:5d:75:f4:8c:
                    24:f1:3d:a0:c4:d4:46:f7:ca:d1:60:8b:76:db:44:
                    64:a8:63:11:09:07:dc:e6:3d:e8:04:5e:17:81:07:
                    cd:93:78:20:ea:b9:d3:09:55:a9:ea:3a:54:9d:8f:
                    ee:ff:51:e2:1b:f7:49:af:cc:be:ea:18:f0:78:88:
                    75:99:18:77:76:0b:d9:dc:7e:53:fa:1e:f1:46:d5:
                    26:b2:d7:89:31:bc:cc:03:7d:c8:5e:b2:8c:39:74:
                    23:38:04:92:65:92:55:e0:2d:e9:00:e1:41:e9:65:
                    f0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3E:F3:3E:94:DC:BB:E2:C1:D5:2C:4B:D0:ED:7C:0A:64:49:2F:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4b9ee310-a92d-3de9-a2e4-5e43a5b64291.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.221.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:85:d5:42:cf:6a:c2:63:89:25:60:0c:de:2f:81:56:12:15:
         0d:f1:2b:08:e6:1b:58:5c:6d:3f:8e:88:e9:bc:ea:21:05:48:
         9f:dc:85:90:8d:09:9d:62:13:47:ae:7b:d9:a4:c2:e9:17:b3:
         38:1e:18:f9:71:b2:12:e8:8a:03:6f:08:0f:a1:6d:78:d2:fd:
         dc:1f:84:d2:54:73:a4:8b:f3:f0:1d:23:7b:f6:1c:9d:46:2c:
         8e:da:eb:15:d5:ea:36:ce:06:63:85:68:7f:5b:00:fe:82:86:
         51:e0:45:0a:84:55:cc:56:c9:72:c1:2e:84:fb:69:8a:39:1c:
         17:0e:f1:fb:ca:86:f4:7a:40:5c:8c:74:0e:71:09:9e:f2:32:
         18:fc:f5:d5:df:5d:77:06:1a:4d:5e:19:15:5d:5f:4e:25:4d:
         3f:cf:53:e1:f7:87:5a:26:0d:9a:28:90:a7:58:16:5c:72:8d:
         c7:92:3d:ed:f9:3e:2f:ff:13:7c:4b:db:b3:95:b5:3b:96:60:
         c1:45:7a:a8:60:d8:ea:98:65:22:70:78:75:38:f3:f4:ce:86:
         3a:37:3c:9e:6d:81:49:68:00:38:b0:e8:5b:47:6c:61:90:a8:
         55:f0:34:a7:07:e1:de:36:ec:fa:c7:ca:bd:ef:cc:93:1c:68:
         cf:a6:14:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----