Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/73a06bc1-2b12-3775-96d7-aca448a5065c.roa
File:                     73a06bc1-2b12-3775-96d7-aca448a5065c.roa (raw, json)
Hash identifier:          6wYJtVRbfZT0UqsMiNy2/quAsrPqRkCfodvqadCkl4M=
Subject key identifier:   FB:0F:DD:73:33:2E:8B:2B:3F:7E:C0:A2:75:80:97:AE:06:C9:D0:CA
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858404B4EC349B75E98244C3A7BC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/73a06bc1-2b12-3775-96d7-aca448a5065c.roa
Signing time:             Mon 19 Dec 2022 12:00:00 +0000
ROA not before:           Mon 19 Dec 2022 12:00:00 +0000
ROA not after:            Tue 24 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        136.134.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:4b:4e:c3:49:b7:5e:98:24:4c:3a:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 12:00:00 2022 GMT
            Not After : Jan 24 05:00:00 2023 GMT
        Subject: CN=fd2df10f-99f8-44e0-b392-2fa9112f50a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9b:3a:da:33:fb:c8:77:ef:a4:d9:8a:5e:50:
                    81:e9:7a:c6:80:70:c3:b9:9e:20:fe:02:4b:f0:f3:
                    cd:ca:1e:27:0a:8e:b9:e5:f7:11:a7:2e:a9:8f:02:
                    fe:25:ea:5d:5d:31:3c:cc:27:6e:de:05:b4:75:a3:
                    64:38:a2:38:32:63:57:8c:a1:50:97:a1:00:e1:20:
                    f0:11:9b:22:c2:26:73:3c:74:4d:37:24:1e:57:22:
                    a1:b5:66:bb:4b:2d:b7:e8:58:54:3f:92:47:24:74:
                    29:5f:d7:7f:3d:9d:d9:2b:b3:11:bd:eb:67:c2:85:
                    8c:bf:4c:4f:70:a9:b3:cf:6e:b7:be:a6:33:a5:39:
                    ea:40:70:d9:e0:1f:0b:af:43:ff:45:cb:32:fa:f5:
                    7f:e4:bb:0f:47:13:d1:69:cd:2b:ef:c1:53:b6:29:
                    8d:a2:86:64:79:05:a2:33:40:4e:dc:b4:94:15:fe:
                    72:d6:fd:a8:ed:77:62:a7:52:f1:30:20:18:c4:b9:
                    7d:85:9a:96:f5:1e:78:84:65:91:f1:aa:cc:88:18:
                    a2:0f:53:45:56:c8:16:df:ca:78:d1:ea:b4:da:2a:
                    f1:7c:0f:0e:32:b5:59:70:fd:da:fa:bf:0a:b5:b8:
                    a7:e8:41:cb:6f:3a:c1:8e:b8:ea:81:2a:3e:30:4e:
                    35:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0F:DD:73:33:2E:8B:2B:3F:7E:C0:A2:75:80:97:AE:06:C9:D0:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/73a06bc1-2b12-3775-96d7-aca448a5065c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.134.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:88:eb:05:da:56:42:46:f3:16:c6:ac:2b:89:0b:a6:d4:11:
         eb:24:3a:65:55:75:76:f2:ec:54:ed:3e:52:f9:e2:33:5e:ed:
         db:f3:26:31:3e:7a:d1:b6:c6:43:79:2e:47:97:78:cb:c0:08:
         a7:fd:cd:52:e6:0b:58:5f:d7:97:17:3b:d5:4a:8f:53:9b:56:
         53:63:ce:e5:75:62:7d:2d:da:a7:21:ea:cf:8c:50:0a:c9:2c:
         6c:78:a6:81:23:c8:20:16:9d:2d:85:d6:d1:4e:47:1e:b6:89:
         5c:c1:27:62:6b:14:eb:38:89:53:61:77:aa:6c:87:d1:c6:b9:
         3f:59:de:03:93:d2:a6:77:b2:39:46:84:7f:ff:03:b4:62:d2:
         91:31:0b:1b:cd:65:2a:7f:82:60:98:03:98:d2:94:b1:0c:ca:
         33:3c:1b:5a:14:53:e0:ca:58:e2:70:0c:12:f2:25:fa:98:3b:
         6a:9e:cd:0b:75:a1:38:86:09:e0:61:5a:e1:c3:57:a5:29:d4:
         5b:7f:1f:0e:4d:d6:23:b2:c8:1c:32:fe:e3:3e:0b:65:f6:59:
         ee:7d:ed:26:f2:32:95:1b:42:96:48:25:22:61:41:90:76:f4:
         06:6b:12:da:b5:6e:ae:c8:18:8e:52:7c:98:14:ad:d3:76:cb:
         67:66:64:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----