Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/74ca597c-d965-3ee9-8446-042b6bd6464f.roa
File:                     74ca597c-d965-3ee9-8446-042b6bd6464f.roa (raw, json)
Hash identifier:          +mMcEgGDLd20TAEv7JjKVeXsDHz2DOsV0xq3ntTlfuE=
Subject key identifier:   71:A2:F3:09:92:9B:F8:C4:3E:BA:15:C6:26:D1:DC:77:44:59:75:70
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E41B00025D8C98F1504FA2B00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/74ca597c-d965-3ee9-8446-042b6bd6464f.roa
Signing time:             Wed 15 Jun 2022 12:00:00 +0000
ROA not before:           Wed 15 Jun 2022 12:00:00 +0000
ROA not after:            Thu 21 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        15.161.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:41:b0:00:25:d8:c9:8f:15:04:fa:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun 15 12:00:00 2022 GMT
            Not After : Jul 21 04:00:00 2022 GMT
        Subject: CN=e9be399a-3c87-465e-99f5-d43fc8f582ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:38:31:dc:ab:23:d2:19:61:90:85:fa:c7:b7:
                    88:37:d0:ca:be:25:f1:3b:e3:63:0b:38:fc:03:dd:
                    c4:5c:72:a4:c8:c5:1d:ab:c9:8f:b2:9d:31:93:30:
                    46:cd:fd:24:fe:31:ac:fd:4c:d7:d7:14:7f:75:8f:
                    af:34:01:5f:ff:97:60:d2:db:e6:03:74:f2:ca:34:
                    f8:56:4b:50:69:80:ae:3e:4f:17:a3:82:ee:75:75:
                    2e:27:18:a8:97:7d:65:2c:1e:bc:dd:53:e5:53:59:
                    b2:c8:e0:f4:e6:43:42:d3:c7:c9:57:01:e1:8f:db:
                    05:0a:6d:b2:bd:3e:03:14:89:a7:ff:69:79:5c:d5:
                    91:bd:a5:79:66:a3:e3:07:52:51:f5:13:4d:8e:7a:
                    7a:36:0e:8d:d7:40:71:79:ee:89:f0:3d:1c:e1:60:
                    2c:c4:04:2f:ac:c9:3b:2d:74:51:a5:1d:8d:2a:2b:
                    76:99:81:02:18:e3:78:64:74:4a:ef:ca:e4:a9:60:
                    8e:49:b0:8a:90:92:1f:6c:4f:2f:ed:7c:4e:17:e7:
                    f9:de:e5:53:51:e7:b8:80:e2:3e:a9:ae:2b:8a:e2:
                    e6:3b:23:24:37:9b:3c:0f:8c:27:f7:68:5a:ed:7e:
                    9f:85:ed:a4:be:c9:23:c0:b7:7e:33:31:a0:28:18:
                    f9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A2:F3:09:92:9B:F8:C4:3E:BA:15:C6:26:D1:DC:77:44:59:75:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/74ca597c-d965-3ee9-8446-042b6bd6464f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.161.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:55:5a:d2:07:ff:29:f1:26:36:85:51:32:25:14:b9:bd:5b:
         23:35:bb:0f:a9:ef:20:ac:01:1b:d6:95:30:83:6a:bc:fb:12:
         4c:73:6e:8d:75:a1:2b:1d:15:e6:53:02:eb:da:6e:70:f7:6a:
         a5:ae:60:f4:9c:1e:ca:9d:5c:b3:bb:83:f8:b0:54:1c:1f:a2:
         8e:2d:f3:6c:40:96:bd:a7:d8:1b:b1:fd:9b:e6:23:c1:61:7f:
         3c:68:7f:70:33:57:4e:e4:f3:92:80:99:33:54:f4:a5:9e:bb:
         3e:cb:01:da:01:4c:d4:43:be:f7:c3:f7:10:d7:4a:e6:de:7e:
         58:0c:7c:6f:ab:c8:e7:67:4e:6a:0f:22:d2:df:57:84:75:41:
         24:1e:12:e0:49:0f:71:c8:95:f9:05:62:59:4e:b7:ec:bf:e4:
         53:16:a7:7a:4c:1f:59:42:b0:cd:1e:8d:06:52:5c:d0:38:af:
         f7:ea:e7:89:cf:6d:e2:fc:94:5f:8b:15:7c:8b:e1:9d:05:e2:
         9b:56:bb:cd:6e:a2:a7:8e:82:cd:b7:8c:db:7b:66:10:c4:cb:
         bb:e8:a1:e9:d0:e0:89:42:af:d0:17:cf:be:86:e3:bf:64:ce:
         71:60:e0:c4:32:9d:cc:43:be:01:08:2a:77:9a:fc:95:9b:1c:
         4a:77:ea:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----