Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/91cb67c1-b824-3881-a92c-6ca954d85dc0.roa
File:                     91cb67c1-b824-3881-a92c-6ca954d85dc0.roa (raw, json)
Hash identifier:          kAjQac+WlTV6QBZnnA3jnrKeLQm3uKGlWPPd91ekBPc=
Subject key identifier:   01:F8:84:B7:B2:05:14:02:B4:5A:1E:5A:7E:A3:F4:D5:98:9E:1B:11
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FA7F5F82F5508B3E270C44A38
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/91cb67c1-b824-3881-a92c-6ca954d85dc0.roa
Signing time:             Fri 21 Oct 2022 12:00:00 +0000
ROA not before:           Fri 21 Oct 2022 12:00:00 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        52.64.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a7:f5:f8:2f:55:08:b3:e2:70:c4:4a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 12:00:00 2022 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=8b172d91-b6ae-42c8-9f25-c2c68aec6c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:c6:bf:26:65:66:10:ea:a3:21:7f:1a:c8:
                    52:e8:d8:79:99:f2:8a:13:2a:24:56:6c:02:e0:ad:
                    19:4c:06:1d:21:ca:2e:6c:a9:e9:1b:01:e6:74:66:
                    ed:e8:d4:f8:0a:b3:f7:c3:f3:69:bf:24:f1:e7:d3:
                    50:d6:8f:d5:36:e7:7a:03:5a:09:96:93:98:8b:cd:
                    65:93:34:83:13:ab:55:a9:9d:f9:b7:fe:75:c4:4c:
                    0a:31:9d:de:25:01:c2:3c:47:f7:c9:39:e4:b9:06:
                    c2:9e:24:27:ba:ab:44:d6:51:4d:e4:8c:cd:2b:30:
                    3f:5c:cc:cc:dc:8e:06:14:96:20:94:22:2b:c8:d4:
                    3d:89:6c:7b:1c:f8:ee:98:78:15:ba:db:45:a0:a8:
                    dc:eb:82:ff:71:0b:25:7d:6e:56:28:dd:9a:3a:e6:
                    35:8a:33:56:67:d4:10:72:d8:bf:e5:83:6a:bb:ee:
                    e2:bd:9b:21:0d:20:22:5d:95:e2:67:72:c0:2e:9a:
                    22:09:44:07:41:2c:f8:6c:30:1b:d4:28:96:2d:b4:
                    cd:eb:55:4a:95:da:ae:8d:83:ef:00:27:f3:cd:71:
                    9b:4a:81:6e:d6:15:a0:7b:69:33:76:ea:43:e1:57:
                    43:9a:5b:26:60:92:a0:61:b9:ee:65:37:da:45:23:
                    c6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F8:84:B7:B2:05:14:02:B4:5A:1E:5A:7E:A3:F4:D5:98:9E:1B:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/91cb67c1-b824-3881-a92c-6ca954d85dc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.64.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:e0:7c:ef:0e:3b:6d:dc:7a:d0:fb:35:0e:d0:58:d6:77:d5:
         91:f5:28:f5:f5:7a:37:39:65:bc:d1:b6:d6:10:fd:9e:f4:79:
         ac:45:2f:72:0b:2f:f4:a6:b6:94:7a:73:20:8f:b4:63:d4:34:
         62:f9:4c:c8:51:01:08:61:ac:77:df:54:6f:95:98:7e:57:79:
         5b:e2:15:c8:ca:fb:b3:48:e7:cb:ed:8b:c5:55:ae:bb:9a:70:
         d1:60:39:c6:f9:ea:6c:66:76:be:2b:37:89:b1:45:18:f0:43:
         28:bc:35:d1:1c:1d:9c:30:3e:10:34:d4:cf:05:ab:65:85:bb:
         6e:76:94:2b:d8:fc:a3:c5:7b:44:04:67:34:2c:4c:ca:65:b4:
         c9:00:9f:f6:23:69:b6:63:fe:7a:1e:02:2c:ae:65:5e:e7:41:
         f1:b5:c0:4b:c2:ab:0b:58:d9:d0:5c:e7:40:8e:41:e4:85:32:
         a6:c1:0d:38:39:7d:26:ab:a1:78:56:fb:57:b2:57:a2:49:47:
         c8:07:4a:95:7b:06:1a:7a:3f:28:6a:d8:2d:ec:74:e4:6b:eb:
         c1:12:20:5e:d0:26:2a:c1:83:bd:6c:ec:69:25:e6:ae:a0:aa:
         92:eb:84:1c:45:fd:6e:9e:93:86:aa:ca:ca:77:99:62:a3:04:
         45:5a:59:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----