Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/504743b1-1939-376f-a92e-6d4214843e8f.roa
File:                     504743b1-1939-376f-a92e-6d4214843e8f.roa (raw, json)
Hash identifier:          UXsgwumXEh3Pw5fbtFPYBXYLn5qCPZ9CaRe66NnYTwQ=
Subject key identifier:   4B:79:6E:4C:F7:16:92:C9:DD:35:1F:19:B7:B6:5E:E8:66:F0:B8:2B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584046EA33AC86F8D683A28B1900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/504743b1-1939-376f-a92e-6d4214843e8f.roa
Signing time:             Sat 17 Dec 2022 12:00:00 +0000
ROA not before:           Sat 17 Dec 2022 12:00:00 +0000
ROA not after:            Sun 22 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        54.176.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:46:ea:33:ac:86:f8:d6:83:a2:8b:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 17 12:00:00 2022 GMT
            Not After : Jan 22 05:00:00 2023 GMT
        Subject: CN=da64f4e0-593e-4960-af49-a723c9122bec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e8:2d:1c:84:7c:26:dc:2d:76:e2:b2:21:e4:
                    84:ed:1d:c2:9a:59:36:6c:53:02:26:6d:6f:f5:8c:
                    dd:c4:3c:bf:f8:09:9f:1d:b9:68:3b:c1:6e:ab:86:
                    ae:12:bc:90:55:a7:95:cf:6a:1b:7d:33:e5:eb:d5:
                    4e:b1:77:91:c8:2c:2e:9b:0e:20:02:72:c1:96:1a:
                    d6:df:93:97:97:64:72:b7:fa:f1:cc:d8:b6:92:f0:
                    b3:fd:8f:de:2b:73:ed:9f:e5:cd:4b:46:fd:0c:7c:
                    8c:8d:b9:2d:43:e5:3f:9c:44:ea:66:91:8b:3e:20:
                    16:d8:c9:3a:9d:49:9a:ea:b8:27:47:8e:14:a9:6c:
                    78:fa:8a:89:5b:ae:30:e3:40:c9:bc:84:b7:b3:6a:
                    b0:70:91:fe:18:50:81:40:b8:4e:94:a1:c5:da:2e:
                    5b:96:2a:36:d4:32:9c:d1:67:36:de:b5:2e:ab:46:
                    ab:30:ee:85:4b:66:50:df:91:a9:16:1b:d0:a7:42:
                    5a:b4:d1:20:68:b0:be:23:6e:33:a0:e5:13:f5:f2:
                    0a:79:1c:01:87:91:b3:af:ae:1c:1f:26:66:3c:b9:
                    85:0e:b9:c4:23:39:d3:e9:1c:96:f1:28:91:d7:0c:
                    a1:37:1e:4b:d6:55:48:af:46:d8:ff:02:4e:65:fa:
                    4b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:79:6E:4C:F7:16:92:C9:DD:35:1F:19:B7:B6:5E:E8:66:F0:B8:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/504743b1-1939-376f-a92e-6d4214843e8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.176.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:c9:c6:fa:a9:7d:0d:18:93:f3:39:b3:0d:99:0a:c5:68:9f:
         ad:ab:b5:ee:01:14:cd:95:8a:19:cd:0d:fd:ae:39:20:48:3b:
         fe:e7:25:48:20:81:43:f6:83:c7:f5:c3:ef:80:36:d9:e2:a6:
         f3:d8:d5:fa:fc:09:98:b0:4a:4b:27:3a:18:16:24:b8:6d:ec:
         56:3c:54:55:b0:2c:1b:03:f0:0d:44:bb:b9:af:e2:80:e7:69:
         ea:6d:04:ef:58:cc:5f:77:7b:91:b6:5d:50:ad:b4:77:1f:23:
         d3:ee:9b:ca:f3:e5:f3:35:0b:86:a2:56:d4:88:2b:d0:28:cb:
         14:0c:89:63:95:ca:01:16:a6:1d:bb:26:85:f3:50:2b:1a:b0:
         d9:8d:3e:76:c6:8e:07:49:6f:4e:22:e7:ab:6c:7e:05:91:06:
         d7:5c:fc:f6:bd:f0:6a:b6:f8:ca:4f:fb:bb:2f:03:1c:78:10:
         55:0a:f3:6f:ca:0a:9d:d1:60:d6:c3:a3:51:16:e9:26:de:21:
         5c:ad:27:bf:6a:a1:0e:ba:cd:ea:ec:cd:fa:40:c4:b1:f7:a4:
         85:10:37:1f:54:7e:ea:76:15:f3:3d:94:6c:5e:bb:0c:cf:cd:
         d5:c1:11:ba:c1:0b:99:cd:49:97:6a:9e:13:8c:c4:15:14:60:
         71:42:c8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----