Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4cbff793-0cdc-3af6-9804-d5aab90dc8ab.roa
File:                     4cbff793-0cdc-3af6-9804-d5aab90dc8ab.roa (raw, json)
Hash identifier:          vPVPpdnR1KKIN0zUrhdawUdmynXULz4g4zktrFvwA2Q=
Subject key identifier:   BC:B6:AD:BB:58:C1:42:90:6B:0E:C7:31:AD:4D:6C:75:DB:15:A6:6A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E53FACFCACCF0225690716F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4cbff793-0cdc-3af6-9804-d5aab90dc8ab.roa
Signing time:             Wed 22 Jun 2022 19:36:07 +0000
ROA not before:           Wed 22 Jun 2022 19:36:07 +0000
ROA not after:            Wed 27 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        15.166.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:53:fa:cf:ca:cc:f0:22:56:90:71:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun 22 19:36:07 2022 GMT
            Not After : Jul 27 04:00:00 2022 GMT
        Subject: CN=f4c48d73-8f89-451d-b07e-8a17ba1d8727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e9:29:ca:fa:43:30:23:9e:a1:d5:7d:c7:b1:
                    3c:29:2c:f8:12:e8:21:e4:fb:cd:72:31:0b:45:10:
                    99:70:52:d4:a8:aa:58:31:aa:4e:6a:89:fd:39:33:
                    02:3e:56:2e:00:0a:c8:ef:82:bb:fa:65:26:98:fd:
                    93:49:ee:6c:2f:6c:ae:e0:ca:8e:6c:30:aa:13:45:
                    52:6b:66:92:a9:94:c9:dd:0a:f7:83:35:90:3b:50:
                    80:d2:ea:8c:7e:7c:24:bb:29:6b:8b:81:af:29:7b:
                    99:ce:ec:de:80:d6:e9:b8:3d:2e:da:10:a6:e6:88:
                    b4:9a:41:25:2f:24:d2:77:cf:0c:38:e4:86:9c:7f:
                    e5:ae:e6:8f:b8:a6:a3:d0:bc:4d:8c:f0:21:7b:8c:
                    5a:8f:ab:a6:ab:98:8a:84:09:e0:d3:41:e3:44:b5:
                    91:b7:54:47:4e:87:85:4d:c3:21:2d:dc:12:63:64:
                    99:92:db:c0:25:52:58:8c:5b:fa:23:ae:df:71:77:
                    c9:a1:fd:c0:e1:91:8e:30:08:3a:ce:77:cd:c3:2a:
                    1f:b8:c1:76:70:27:85:31:47:1e:18:e2:79:d0:58:
                    00:fd:e7:9f:90:7c:e8:53:87:de:d2:d4:ad:f3:d3:
                    33:6d:f3:30:4a:37:73:e0:67:9f:23:45:97:de:83:
                    3f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B6:AD:BB:58:C1:42:90:6B:0E:C7:31:AD:4D:6C:75:DB:15:A6:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4cbff793-0cdc-3af6-9804-d5aab90dc8ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.166.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:4c:31:b6:f6:ee:71:2c:a7:13:2d:c7:bb:ef:83:f2:7a:1a:
         f8:61:4e:ed:07:b2:ba:38:0f:92:b4:18:15:d5:5d:a4:39:7c:
         b1:b7:e5:92:8f:ec:f5:c0:18:8e:b7:95:87:1d:e6:48:8f:7b:
         45:df:55:41:0d:2f:93:3a:91:41:fa:76:0f:a7:e8:63:90:60:
         8b:f9:19:2e:25:18:52:03:11:51:8f:0f:0a:be:91:5c:55:12:
         2c:51:b7:d2:4d:8f:a3:81:40:bf:5c:e2:9d:ef:0f:56:c5:bd:
         e0:c5:4c:13:2a:3e:4c:e3:99:98:c9:04:08:fa:38:cf:2c:d8:
         fa:00:83:7e:33:c3:3f:fc:9d:cd:5c:e4:83:6b:69:25:20:5d:
         e5:58:8f:11:1c:41:63:8e:8b:cc:a3:de:de:21:dd:8b:ca:26:
         13:89:36:c5:26:f3:60:a2:d7:00:24:94:14:e3:c3:4b:e5:b4:
         86:b4:35:cd:94:74:bc:a4:84:05:b9:c9:d8:eb:11:71:da:2b:
         61:81:3e:80:f8:31:15:37:c0:64:57:82:df:1c:a3:65:1f:6d:
         8c:42:0a:f4:4a:40:59:ed:0c:dd:2e:83:92:c3:71:10:e9:ee:
         37:20:7a:ba:a2:1e:17:e9:6a:fd:51:41:34:03:29:dd:9e:61:
         7e:90:8a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----