Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/73694a03-721f-311e-8f31-985845b06d9f.roa
File:                     73694a03-721f-311e-8f31-985845b06d9f.roa (raw, json)
Hash identifier:          4FcFCAD80gANBy7STwa7hRdZXoPlpC1EX7qz0nZbWiE=
Subject key identifier:   0D:9F:85:53:76:68:DA:41:CE:64:DF:F9:F0:E8:CD:6A:9F:3F:17:2F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CE4ED0719ADB3B0AA0B1DE960
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/73694a03-721f-311e-8f31-985845b06d9f.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        128.181.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e4:ed:07:19:ad:b3:b0:aa:0b:1d:e9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=e25ba64c-83c7-4e3b-b4fc-cd3181114abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:42:64:25:14:9a:7d:27:25:d8:6f:46:9d:39:
                    77:55:e0:35:04:9a:00:e0:05:0c:ef:2a:f3:97:71:
                    ef:87:7c:33:d2:e0:bf:71:5e:31:e6:ac:dd:d3:76:
                    f8:6f:ef:10:87:ac:f6:0d:8e:b2:16:81:9d:2b:aa:
                    18:d2:3b:24:be:46:cc:88:7a:d1:dd:ab:e6:8e:59:
                    e2:d9:39:fb:36:6d:e7:80:28:f1:25:3b:6e:91:ae:
                    10:81:67:c3:c3:b1:81:58:61:c8:bf:93:76:ed:ef:
                    99:15:20:ad:6c:c0:3e:c7:1d:bf:40:51:e7:4a:58:
                    d4:f4:9e:30:f2:ee:3c:00:96:19:94:01:d5:91:91:
                    b8:3b:2f:dc:e5:6f:68:cc:25:65:03:1a:e8:c5:ff:
                    bc:aa:41:e5:27:42:73:4a:6a:ba:13:9d:29:33:d5:
                    17:04:cd:0b:f0:36:0b:ba:9e:68:60:27:d6:9c:90:
                    dd:7e:b7:85:21:1c:0d:02:38:aa:ae:8f:cc:21:f3:
                    70:83:22:2e:46:5e:25:05:49:a0:4b:9b:74:dd:47:
                    df:eb:f8:38:d8:20:08:7b:7b:60:1f:19:51:f2:51:
                    c6:ab:17:f2:83:63:15:e0:ec:80:08:1a:1b:34:99:
                    4d:6c:75:58:31:78:ea:aa:d4:65:db:66:b5:1e:09:
                    87:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9F:85:53:76:68:DA:41:CE:64:DF:F9:F0:E8:CD:6A:9F:3F:17:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/73694a03-721f-311e-8f31-985845b06d9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.181.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:11:0a:4c:ff:ce:d4:3f:e2:fb:31:92:f9:69:b1:a0:25:e6:
         25:98:f9:94:23:64:a1:8c:4a:bd:b3:a7:b8:b5:9f:5c:6a:8b:
         62:2e:a5:13:1c:45:cd:bd:4c:bd:94:e8:ac:a9:e8:02:da:ef:
         56:06:a3:b6:e4:d3:67:35:17:1e:1d:de:3f:c8:eb:4d:95:49:
         db:80:41:42:1a:ea:4b:c4:42:4b:29:72:ed:b2:98:4f:07:39:
         1e:7f:4b:d8:e1:c7:31:53:bf:4a:60:09:59:43:c0:c4:d2:0d:
         0f:b3:45:7b:dc:3c:c4:e3:37:92:fd:fa:27:0a:17:6c:c3:ef:
         cc:a8:36:73:0e:03:f0:21:0f:5a:69:90:7b:d5:60:96:5b:fd:
         9e:b1:95:7e:02:4e:46:b0:5a:34:2b:fd:fd:0c:4a:b2:15:0c:
         7f:44:72:63:35:83:31:a3:5a:43:f8:08:50:05:64:49:3e:de:
         a9:99:1b:35:dd:61:74:96:40:6f:5f:05:51:bc:24:3f:ab:2a:
         22:dd:45:71:2d:25:fb:a1:7e:bc:b7:f4:51:36:d3:de:47:ad:
         43:b1:29:1e:b6:b5:a9:fc:55:f5:d3:ff:01:9f:ee:71:3f:7c:
         8c:b5:35:75:72:39:ad:a2:e9:a0:90:69:9a:6f:6f:b2:a6:da:
         a7:09:ab:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----