Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/775794cb-907f-3f79-98a9-157faafed8db.roa
File:                     775794cb-907f-3f79-98a9-157faafed8db.roa (raw, json)
Hash identifier:          EKCHPBSV6FBRkg19Czb6g95MlmixSBPVkK3nh8AtxS4=
Subject key identifier:   12:EC:F2:D7:22:47:4E:7D:5A:A3:07:FA:3C:33:80:85:E9:F4:BE:B7
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F3FBC42887D389D820C575200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/775794cb-907f-3f79-98a9-157faafed8db.roa
Signing time:             Wed 14 Sep 2022 12:00:00 +0000
ROA not before:           Wed 14 Sep 2022 12:00:00 +0000
ROA not after:            Thu 20 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        15.131.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:3f:bc:42:88:7d:38:9d:82:0c:57:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 14 12:00:00 2022 GMT
            Not After : Oct 20 04:00:00 2022 GMT
        Subject: CN=0f4f475c-22c2-45eb-9caa-eae2457e2517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:92:c1:a6:64:02:1c:4b:f6:e5:57:81:d1:d7:
                    8c:f0:13:3f:0c:3b:2c:92:6e:df:b9:1c:75:ce:de:
                    d8:d8:0e:68:28:dd:f4:77:bf:f5:d0:0f:e4:e6:df:
                    bb:be:5f:dc:06:0d:83:e6:1f:e8:82:3a:76:39:1a:
                    56:0e:b7:fd:82:a8:b5:40:0f:80:20:b4:e5:55:ab:
                    9f:55:53:98:2e:75:3c:27:db:05:5d:77:61:80:48:
                    0d:e2:f7:e2:75:85:bb:3f:6c:61:58:6c:cd:85:25:
                    71:3a:3d:20:01:82:32:79:81:54:42:db:52:e2:a3:
                    ec:4a:2f:2a:fd:4e:dd:5e:ee:50:59:4a:7b:09:04:
                    62:19:22:8c:1e:50:96:0d:19:70:f2:31:53:27:61:
                    e4:60:39:4c:e7:71:d9:59:7c:7b:a2:89:e8:61:76:
                    9d:8a:50:02:a8:df:a5:d2:76:ec:59:44:e2:ac:ea:
                    53:18:1d:b2:9b:2d:13:b0:11:37:b5:07:05:af:9b:
                    3d:a9:0f:6c:ba:7e:42:35:f7:e7:39:c1:4a:82:67:
                    02:2d:68:e8:5b:8e:3c:54:bd:b5:8e:f0:36:6e:b5:
                    25:e6:2b:b6:79:0b:4f:5d:f5:ed:36:f0:b0:81:bd:
                    23:9b:98:3a:dc:70:71:77:a2:5e:3b:e5:cf:da:b6:
                    20:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EC:F2:D7:22:47:4E:7D:5A:A3:07:FA:3C:33:80:85:E9:F4:BE:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/775794cb-907f-3f79-98a9-157faafed8db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.131.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:dc:78:04:0a:88:fb:87:5a:ca:ea:73:db:68:6e:bc:1a:e3:
         b4:75:f4:b5:96:3f:5c:f6:99:98:ed:6b:46:6d:b6:ec:eb:6d:
         31:07:98:55:da:ff:e0:a4:31:69:a2:ac:6c:f5:af:d3:a6:be:
         10:c3:5e:de:56:0d:09:10:55:33:e5:98:1b:54:c5:59:28:36:
         29:f8:51:d1:c9:e0:b2:66:b9:ea:e4:f5:67:db:32:3a:c7:23:
         8c:b9:ea:29:a2:c0:d6:9b:4a:ab:81:c4:d0:b3:41:1b:55:a5:
         a4:04:47:8e:bb:5c:ff:c8:3b:aa:57:ab:93:7c:0c:f2:e8:74:
         dd:21:85:5c:ea:aa:30:93:b1:53:90:7b:c2:ca:f9:42:fc:9d:
         ee:23:72:50:61:ed:23:3f:dd:85:9d:61:66:1a:00:82:1b:13:
         90:a8:29:85:53:76:8a:d9:d8:90:9b:50:08:9d:ee:28:1b:c9:
         63:43:c2:20:63:31:64:b2:91:dd:81:ab:99:f9:07:b5:ae:da:
         31:8d:a8:eb:b0:dc:b7:a7:2f:a9:96:2f:a2:86:14:74:df:ca:
         46:41:40:6a:ef:e1:97:51:7f:54:1b:5f:a5:e5:97:58:51:b6:
         3b:15:3c:0a:7e:08:d2:41:f0:fe:71:62:3d:6c:9e:d5:14:17:
         87:a4:0c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----