Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ec078b6-1b55-32f0-901d-4a673ed48708.roa
File:                     4ec078b6-1b55-32f0-901d-4a673ed48708.roa (raw, json)
Hash identifier:          0pUcmVtiyZFKEMhiibuWy2c+ez3qs353fVieDGXYKxo=
Subject key identifier:   01:26:F0:B2:12:5A:56:FA:A2:0D:F3:6E:4C:CB:3C:CF:EA:64:B0:31
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840A2331FABE0506C6897D8CD50
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ec078b6-1b55-32f0-901d-4a673ed48708.roa
Signing time:             Thu 19 Jan 2023 12:00:00 +0000
ROA not before:           Thu 19 Jan 2023 12:00:00 +0000
ROA not after:            Fri 24 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        13.216.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:a2:33:1f:ab:e0:50:6c:68:97:d8:cd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 19 12:00:00 2023 GMT
            Not After : Feb 24 05:00:00 2023 GMT
        Subject: CN=a7426590-fc9c-4bad-82bd-2f20be23e0e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:21:5d:03:29:71:d8:24:78:50:0b:8a:2e:98:
                    b1:23:a2:8a:c7:cf:cc:b8:dd:82:6d:c5:1b:91:b8:
                    eb:33:58:c8:f9:8c:6a:db:55:f1:5e:29:8b:45:d8:
                    6f:c6:20:91:05:5c:6e:04:c4:36:7e:43:04:e8:57:
                    1d:47:ad:5e:ba:2c:ea:12:dd:07:ee:b8:00:85:cc:
                    0c:ac:44:65:ed:03:3e:7e:f0:0f:e2:2d:d8:80:c1:
                    12:7b:cd:59:70:10:bc:d3:7c:eb:ca:80:83:c9:1a:
                    2b:d9:3a:28:4b:06:9e:2e:ac:4f:1c:ae:39:71:d9:
                    a6:89:f6:aa:29:6e:c1:75:c6:3f:a4:33:ae:a2:82:
                    b7:ca:dc:8c:aa:5d:c9:26:b4:07:36:67:3e:1e:94:
                    ea:34:9d:21:a5:6e:1e:2b:c3:5d:62:2a:a3:ad:7d:
                    f0:ec:53:f1:d1:df:29:b3:77:39:47:81:94:22:44:
                    b9:f8:ac:5f:e2:e3:8f:e1:fe:9e:e5:93:c9:b9:72:
                    52:fa:d8:6a:18:d2:d7:f5:57:24:55:76:f0:5a:7c:
                    42:ae:f1:dc:b4:6c:06:8e:d3:c3:70:96:e8:1b:36:
                    cc:e1:b0:d2:8b:e7:9f:2d:fe:a0:83:89:1b:72:9a:
                    81:0f:1f:e6:6b:76:3f:02:50:33:a4:a4:a1:74:b4:
                    f8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:26:F0:B2:12:5A:56:FA:A2:0D:F3:6E:4C:CB:3C:CF:EA:64:B0:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ec078b6-1b55-32f0-901d-4a673ed48708.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.216.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:b3:25:37:b4:6e:b2:6e:dc:fb:de:58:2e:08:ab:9e:aa:79:
         4c:e4:5f:21:4a:11:70:0f:0d:5c:8e:32:02:5a:40:4b:bd:fd:
         ca:a5:c7:16:e6:e7:1f:c7:6a:6e:5e:a3:c5:76:56:ec:21:53:
         96:25:0d:39:b5:04:ad:5e:31:1d:54:dc:8e:fb:94:f2:3d:9b:
         fa:aa:de:58:08:6c:e3:44:5f:35:b8:0c:da:a2:6a:01:85:b2:
         69:20:93:dc:74:92:81:e2:c9:58:bc:3a:30:20:2b:07:ef:4a:
         0f:6c:7f:a4:bd:b7:52:29:9e:09:8f:5c:7f:34:4e:ec:a9:c5:
         7b:a7:a1:28:6a:fb:48:f5:fa:fe:db:c6:8f:96:0a:f5:b2:b3:
         ab:dd:b3:d0:d5:b4:df:38:4c:da:df:59:b1:d5:4b:ba:33:9a:
         62:37:56:e1:86:13:1c:8a:b6:05:f2:da:57:ad:b6:f1:5d:b3:
         1b:83:56:81:3a:86:5b:ba:0b:57:09:db:00:c8:34:8e:8d:a2:
         03:2c:8c:34:90:77:b4:50:6c:75:a8:e8:79:85:f0:f8:0c:25:
         b8:14:18:d8:26:51:d8:5f:32:b5:eb:6e:ae:76:6f:e5:f5:e7:
         b6:19:02:c2:1e:dc:cd:db:6a:d7:30:2e:fb:1f:c7:4a:39:22:
         38:8f:a9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----