Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8564cd2e-ca85-3692-95bd-e5fb67d00ffc.roa
File:                     8564cd2e-ca85-3692-95bd-e5fb67d00ffc.roa (raw, json)
Hash identifier:          1T99idqKWfCB6pbgCWwro8ToRSxyOFy9T/gFaSsd7jM=
Subject key identifier:   4D:15:CF:40:C2:B0:96:9D:20:4A:44:BD:BF:4E:4A:7E:F6:33:80:10
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858403EDC0E3ED94461690E263E60
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8564cd2e-ca85-3692-95bd-e5fb67d00ffc.roa
Signing time:             Wed 14 Dec 2022 12:00:00 +0000
ROA not before:           Wed 14 Dec 2022 12:00:00 +0000
ROA not after:            Thu 19 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        15.239.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3e:dc:0e:3e:d9:44:61:69:0e:26:3e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 14 12:00:00 2022 GMT
            Not After : Jan 19 05:00:00 2023 GMT
        Subject: CN=52756997-cf5d-4cf7-a2c8-dc5ae56d7258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:04:d1:db:f2:1b:2b:4c:54:2e:70:73:95:3e:
                    27:e9:c9:d0:52:6b:ab:a8:95:01:17:29:37:e2:b9:
                    66:c1:4c:8c:90:c0:6a:75:90:84:b0:34:97:95:e9:
                    a6:c1:4a:d0:e9:a7:27:4e:e6:bc:11:74:44:95:80:
                    fa:8b:bb:4c:2d:ab:eb:e7:2a:cd:d0:9c:92:1f:f2:
                    fe:9d:e4:b6:56:5a:32:2a:8f:2a:bb:12:81:bd:2c:
                    69:c0:73:52:c1:1a:62:22:1e:b2:b7:4a:e5:c4:d9:
                    e1:ae:3c:ee:5b:7b:3e:e9:51:31:38:b1:06:88:0a:
                    0f:0e:ab:69:30:68:fc:58:2b:7d:bb:34:aa:3e:2b:
                    04:6c:e7:e1:8a:69:d9:1b:3b:66:f0:00:c9:16:0d:
                    42:42:80:ff:b3:10:c0:37:c1:fa:82:9c:9f:56:ba:
                    83:23:ee:81:97:64:8f:ba:3a:17:73:91:08:53:3a:
                    f3:86:ea:9b:30:e1:30:9a:ec:b4:47:a9:2a:44:bd:
                    34:54:77:f7:2a:01:8e:46:39:7e:0e:bb:24:eb:99:
                    5d:b2:0d:67:1b:54:a4:55:62:b1:52:40:84:aa:b3:
                    2f:ca:8d:0e:2a:99:c2:59:ea:cd:9b:6f:79:83:02:
                    a3:76:52:06:11:cd:5a:7e:26:71:3b:6c:97:9a:15:
                    13:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:15:CF:40:C2:B0:96:9D:20:4A:44:BD:BF:4E:4A:7E:F6:33:80:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8564cd2e-ca85-3692-95bd-e5fb67d00ffc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.239.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:51:cf:d9:fb:2e:fc:1c:f4:c5:9a:d7:c5:28:21:52:cd:4d:
         cf:23:c0:5a:dd:e9:e3:e9:2d:e4:dd:a1:30:0c:24:61:d9:54:
         bd:23:65:7e:a8:e6:23:7c:f9:bb:1b:26:84:03:ba:e2:5e:b0:
         6b:7d:04:e1:7d:5d:fb:ef:64:ac:c6:1f:57:8a:45:c5:2b:93:
         8a:6a:a7:45:9e:4e:5a:49:df:33:75:4f:82:f8:bb:17:a2:39:
         cf:3e:3a:32:ed:40:a8:0b:42:db:c8:a3:01:36:d9:8a:04:62:
         bf:fd:65:af:51:0b:cc:95:fe:66:ac:c9:ba:57:7e:4b:c7:e6:
         ac:27:46:0a:67:8a:50:ba:af:69:77:6b:7d:64:b2:f2:51:39:
         e5:55:08:2f:a2:e8:8a:fc:61:2b:7a:e3:50:ac:92:e4:13:71:
         5d:b7:a1:ff:ca:7e:e7:9c:bb:34:f2:a0:30:b2:05:1c:7e:a0:
         67:87:0c:ee:7a:22:b9:bf:c5:62:5c:aa:e5:a1:11:f3:a3:6a:
         25:ff:fd:52:5d:a7:cf:d3:70:bc:e8:11:39:de:06:b7:ec:c1:
         b8:77:77:13:7e:13:d5:5f:fa:a9:29:14:4b:f2:52:e2:f3:b6:
         45:82:71:82:72:b7:cb:ae:c0:e8:36:63:6e:2a:85:0a:73:de:
         2a:1f:35:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----