Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8900ecaa-82f6-34a3-8ead-16cdf93a2aa2.roa
File:                     8900ecaa-82f6-34a3-8ead-16cdf93a2aa2.roa (raw, json)
Hash identifier:          pw6VBoUmDAT2HRyQ/hNwvTefZecjJDmNg6a8WH4e0nA=
Subject key identifier:   15:41:AE:BA:C8:3A:49:BD:23:15:27:F3:A1:B9:9F:70:FA:FD:96:D9
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FE13FDFA9D3D41E243CB4A800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8900ecaa-82f6-34a3-8ead-16cdf93a2aa2.roa
Signing time:             Fri 11 Nov 2022 12:00:00 +0000
ROA not before:           Fri 11 Nov 2022 12:00:00 +0000
ROA not after:            Sat 17 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        159.209.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:e1:3f:df:a9:d3:d4:1e:24:3c:b4:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 11 12:00:00 2022 GMT
            Not After : Dec 17 05:00:00 2022 GMT
        Subject: CN=564db2e0-f62f-48f0-ba74-32a353f0e414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3e:fc:89:fc:43:5f:63:15:ff:2f:bb:ff:c8:
                    c2:c6:10:1a:23:97:55:24:df:9b:4d:d8:95:f5:5f:
                    38:ba:d6:f4:78:a7:d7:06:95:30:1e:5f:61:90:df:
                    89:ea:f8:07:ca:73:84:93:cf:c7:d9:d4:c0:a8:5b:
                    18:76:9a:dd:c0:2a:ba:71:a2:60:4e:0d:b4:ec:b8:
                    31:09:08:58:6d:a6:e9:a9:e8:60:01:6c:cc:09:a9:
                    7b:8c:37:4a:9e:89:8c:88:b3:04:37:19:d2:ea:7f:
                    00:80:27:21:0d:47:fb:f5:74:c6:4d:5f:fd:53:39:
                    1f:09:43:32:6f:54:8e:e5:39:5b:f6:c9:2b:9d:38:
                    be:64:43:e2:3b:82:01:9d:c6:4a:3b:29:81:dd:a9:
                    6b:52:42:dd:8c:8e:a7:fc:1f:cc:86:bb:15:5b:78:
                    19:4c:98:3c:37:ea:ea:0c:33:a6:98:bd:16:62:e6:
                    ef:ff:18:33:0a:05:04:01:5d:44:ff:ae:50:82:e4:
                    c1:fa:43:8e:9e:fc:b7:8c:5c:a7:05:4e:ed:97:db:
                    92:98:95:a9:3e:7d:bd:c2:cc:76:ee:15:88:a3:3a:
                    ee:a3:5e:9c:e5:4b:84:8e:38:62:4c:78:16:cf:ce:
                    1b:10:bb:aa:60:ae:fb:19:8e:11:19:4b:ba:a5:aa:
                    5a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:41:AE:BA:C8:3A:49:BD:23:15:27:F3:A1:B9:9F:70:FA:FD:96:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8900ecaa-82f6-34a3-8ead-16cdf93a2aa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.209.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:2d:6f:a1:1e:5a:4b:3b:9c:f1:38:83:46:bf:07:bd:d2:c5:
         8b:ed:f3:70:c6:eb:bf:4c:7f:cb:79:75:9f:ec:e2:94:17:d9:
         8f:94:a0:7d:f7:d6:f6:c0:08:a0:ca:d8:1e:3e:2b:ff:82:e1:
         cf:53:12:10:9e:08:57:c4:23:fc:8f:c1:50:cf:de:e6:d4:5e:
         b6:21:9b:a1:c7:35:3a:84:ae:d3:e4:e3:6d:a6:9f:e8:b9:b1:
         61:89:3c:79:31:d8:13:2b:12:c1:2d:1d:f2:75:7b:55:01:06:
         ea:a9:df:5c:f2:61:54:9c:07:23:ee:f2:00:72:93:8c:ff:51:
         84:f0:58:6e:c8:75:f1:97:76:cd:db:84:3f:f0:80:9c:4b:1c:
         98:ce:2a:45:ca:5c:3a:4e:ca:31:f7:0e:9c:2c:d1:74:84:1d:
         9c:64:a8:f6:41:e3:db:b0:36:84:1f:e2:fd:58:80:3d:01:1d:
         50:62:15:de:27:cf:0d:39:a3:3a:de:e1:38:db:c0:ef:13:f7:
         b7:96:bc:04:11:83:4f:1a:4a:c0:77:33:c5:5f:ef:cd:b0:f1:
         70:e7:1d:55:39:69:99:6f:00:c7:8e:ec:c0:49:d5:3f:40:b9:
         f9:52:0e:7b:a7:6f:1c:7a:d5:1f:6f:ea:a9:af:ee:5e:3d:00:
         dd:64:51:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----