Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/71cc37f6-19a3-32d6-afa9-5d787eaf59e8.roa
File:                     71cc37f6-19a3-32d6-afa9-5d787eaf59e8.roa (raw, json)
Hash identifier:          X+ApJkPYWKRWGxtPbkLeU1HgZsPYAqubVuRv+tpdWOc=
Subject key identifier:   03:53:F5:71:C6:DF:3C:CB:BF:0F:8C:1C:CD:B4:62:89:B3:43:3C:C0
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840540032CDEB2B76CD17105A40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/71cc37f6-19a3-32d6-afa9-5d787eaf59e8.roa
Signing time:             Thu 22 Dec 2022 12:00:00 +0000
ROA not before:           Thu 22 Dec 2022 12:00:00 +0000
ROA not after:            Fri 27 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        13.216.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:54:00:32:cd:eb:2b:76:cd:17:10:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 22 12:00:00 2022 GMT
            Not After : Jan 27 05:00:00 2023 GMT
        Subject: CN=e85202b5-8e82-414a-8e96-b32cd1f5d534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b5:c9:2d:42:a3:94:c6:ea:f7:83:84:76:04:
                    c5:3c:c4:14:2f:fd:9e:97:06:9a:71:2e:a9:f5:f1:
                    31:52:44:9c:4c:c5:6a:c2:5a:ff:f7:eb:c2:9a:71:
                    41:85:5d:f9:13:f9:52:1f:50:b2:49:63:fa:38:ab:
                    f9:c0:89:ce:33:83:56:73:89:63:2d:60:6e:d0:a2:
                    a7:8a:c4:c3:09:fa:7e:cb:bd:fe:b5:ab:fd:20:d9:
                    b5:39:e1:a1:08:75:d6:4b:46:64:a6:de:8f:09:87:
                    1a:5c:df:6d:15:f4:ec:82:0f:5e:e9:78:b9:52:2a:
                    28:dd:68:45:a9:a1:95:80:79:60:aa:fe:b2:89:89:
                    08:8b:c9:4c:ed:0c:24:70:eb:9f:58:80:78:b5:9e:
                    7e:ce:ed:46:86:fa:b2:8a:b4:70:55:ad:6f:af:33:
                    4d:8b:da:b8:f5:c2:cc:9d:4b:34:91:00:45:98:23:
                    a6:5b:0a:5d:ba:24:68:ea:76:c2:6a:df:a5:09:6a:
                    d6:d3:45:e1:c1:da:da:7c:b1:58:5d:ea:d1:da:06:
                    8a:43:f7:45:f0:af:ca:3c:4d:19:29:e5:44:44:52:
                    0b:d4:d1:95:f8:29:76:03:bf:ba:8c:61:53:22:e7:
                    2d:eb:d0:7a:a2:e1:c2:0b:00:d9:03:b4:3e:ce:7f:
                    8c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:53:F5:71:C6:DF:3C:CB:BF:0F:8C:1C:CD:B4:62:89:B3:43:3C:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/71cc37f6-19a3-32d6-afa9-5d787eaf59e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.216.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:15:1e:77:52:da:79:a8:7a:42:40:1f:bd:cc:ba:52:8f:57:
         15:f5:7c:17:5f:bc:82:10:b6:4a:44:6b:0c:77:5a:27:2a:e6:
         23:5d:76:39:78:1c:42:e9:45:56:a8:72:77:8e:76:61:30:f9:
         b2:2c:5e:87:a2:2e:f6:89:4e:ae:f0:ff:22:f3:ec:b3:2c:db:
         9b:f6:84:b4:b1:64:83:9f:50:e4:3c:03:79:64:21:72:9f:92:
         ef:42:b5:c0:3d:26:f1:84:eb:ac:24:74:37:3b:9b:50:5c:3b:
         f0:36:15:1c:a3:ee:85:ac:c0:a1:4f:8e:16:dd:e3:7a:fb:5a:
         b5:35:6a:c5:45:bf:56:99:29:d3:a4:bf:ce:87:63:36:a8:83:
         92:60:b7:ac:bd:72:bb:2f:a6:e6:ca:39:ac:1e:54:42:84:dd:
         d3:c2:a9:62:07:26:b1:22:04:ef:e9:05:1d:10:ac:77:fc:13:
         24:38:7e:da:82:df:e2:04:5c:8a:a9:6a:3d:9c:72:8c:25:6a:
         07:b0:c8:cc:ce:ac:ab:f2:97:29:6d:cc:95:0a:71:97:bc:67:
         2e:c6:53:4e:58:bc:39:5d:8e:78:12:3e:cf:67:24:e9:7f:ba:
         94:cf:2d:12:b1:cb:1e:47:d3:e3:69:3e:63:bf:1c:bb:bb:05:
         f8:05:b4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----