Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6ca3c081-5db3-32df-9562-3f69bdcbfd8a.roa
File:                     6ca3c081-5db3-32df-9562-3f69bdcbfd8a.roa (raw, json)
Hash identifier:          HheXIqEGaUQV3ERLe8/f38Y2tkVNIIjk6rjsp9FyKro=
Subject key identifier:   09:02:28:7C:AE:75:9F:A7:D9:62:A5:D3:F3:1C:51:CE:4F:2A:AC:16
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E44825FCEA28DE9F48A57A580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6ca3c081-5db3-32df-9562-3f69bdcbfd8a.roa
Signing time:             Thu 16 Jun 2022 12:00:00 +0000
ROA not before:           Thu 16 Jun 2022 12:00:00 +0000
ROA not after:            Fri 22 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        35.96.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:44:82:5f:ce:a2:8d:e9:f4:8a:57:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun 16 12:00:00 2022 GMT
            Not After : Jul 22 04:00:00 2022 GMT
        Subject: CN=8f2fe1be-f870-4c95-a071-ba02af7130b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:35:23:70:e5:a8:83:9d:c9:9d:51:12:00:54:
                    10:c9:1a:2e:a0:0f:26:7e:cc:c3:7b:85:77:fc:9f:
                    8e:5b:43:5f:21:4b:a6:f9:ae:11:29:8e:72:ef:2e:
                    76:1f:d5:31:5b:4d:6b:ed:b8:d8:ee:a5:1b:3d:b5:
                    fb:2a:4a:dc:06:73:53:56:07:b3:f4:54:a5:3a:0f:
                    3f:aa:08:9a:32:83:97:78:82:dd:25:87:0a:6f:d6:
                    aa:87:c9:84:fc:4c:c7:5f:75:c9:8b:25:ec:92:bb:
                    58:f9:32:3e:84:f6:99:40:0e:0b:36:e8:17:ec:0e:
                    40:92:95:15:c9:a6:0f:e1:3e:79:41:99:d0:41:a3:
                    8e:45:d2:da:62:33:c0:e6:b3:03:b8:7d:90:2c:f3:
                    53:46:a4:23:2d:32:dc:30:d7:dc:44:4d:f4:cf:11:
                    35:f2:51:0c:1a:7a:3c:c8:5c:07:7f:b9:8c:ce:ce:
                    6c:1d:fc:98:e0:e3:1a:33:ca:80:29:f8:91:ca:9f:
                    8f:db:0f:0c:7a:49:a9:e7:69:d0:19:b2:65:a0:15:
                    71:9b:f9:a9:0c:f8:57:f8:48:80:a7:e1:aa:66:af:
                    41:5a:e2:ab:8b:b9:c7:05:58:cb:00:2f:f2:c6:c2:
                    23:42:0f:29:06:45:a1:1d:65:d8:39:a0:1e:c5:e9:
                    9d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:02:28:7C:AE:75:9F:A7:D9:62:A5:D3:F3:1C:51:CE:4F:2A:AC:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6ca3c081-5db3-32df-9562-3f69bdcbfd8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:32:ff:6d:89:33:cc:14:50:8f:60:07:f1:b9:4e:37:c9:81:
         f6:2a:71:98:ec:4e:10:17:63:9d:a7:90:b3:82:e0:cf:cd:b5:
         07:ad:7e:b3:b6:ea:62:2d:14:8e:cd:08:09:ef:4a:d5:cf:08:
         5d:fd:87:4f:ff:23:d9:17:c2:88:b3:93:4a:42:09:5f:ca:fa:
         02:ed:95:29:68:b7:c4:54:57:a6:df:af:e4:a5:52:8e:7d:1e:
         aa:99:f7:79:af:5c:bf:1e:2b:dd:8f:b2:e7:8f:c7:a5:e0:9c:
         a5:71:b5:01:0c:31:75:39:c2:9a:df:43:61:7a:58:1c:80:14:
         f5:4c:1f:9e:24:67:45:83:bf:b7:57:46:aa:ad:be:79:60:32:
         68:f3:3c:f7:6b:90:bf:b8:f6:42:df:8b:61:8b:6b:92:04:ef:
         e7:f0:3b:4b:8b:01:5d:93:98:7e:63:06:70:6b:b3:37:d2:47:
         fc:7f:d0:bf:f7:24:ec:26:98:b6:d8:25:f9:97:66:3e:78:f6:
         1c:09:4b:f8:67:fd:69:f6:09:10:fc:c0:27:0d:4c:c2:73:0b:
         ac:dd:4a:f3:d3:dd:b9:01:e6:dc:2f:7b:27:90:fe:6c:af:2b:
         26:47:67:ed:71:9a:7b:53:25:a8:7b:99:00:af:8f:93:4a:69:
         9e:32:e6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----