Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/96f8c9d8-d992-361e-8550-9c52d8c8f711.roa
File:                     96f8c9d8-d992-361e-8550-9c52d8c8f711.roa (raw, json)
Hash identifier:          jKa8YpEcRquwfCn5KiSXp4hQxdI6S0Nig6lS8IBIrc8=
Subject key identifier:   1E:50:C1:A8:54:F3:19:95:7D:4F:15:16:40:98:FD:AE:1B:95:33:25
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EE430D0B02CB9E1D23C6A0380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/96f8c9d8-d992-361e-8550-9c52d8c8f711.roa
Signing time:             Fri 12 Aug 2022 12:00:00 +0000
ROA not before:           Fri 12 Aug 2022 12:00:00 +0000
ROA not after:            Sat 17 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        54.192.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e4:30:d0:b0:2c:b9:e1:d2:3c:6a:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 12 12:00:00 2022 GMT
            Not After : Sep 17 04:00:00 2022 GMT
        Subject: CN=c8d73b52-e0d7-4965-956c-c49ac68ccbad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4f:f1:b2:2c:74:46:3c:8f:a4:aa:15:f7:e0:
                    fe:cb:e4:84:6e:2e:f2:ed:13:ac:33:51:13:52:a0:
                    30:ac:a6:a5:58:13:66:50:cd:35:9e:f5:e7:df:ff:
                    ba:87:d1:68:34:af:eb:c8:4e:34:45:7d:53:fa:24:
                    83:f3:86:26:95:70:b5:99:f5:51:d4:19:58:22:39:
                    67:91:92:d7:20:20:72:23:ce:f3:3f:c1:3f:39:4c:
                    cf:17:5d:3a:0c:8c:2f:02:23:73:cc:05:b9:ce:bf:
                    d1:f9:b3:43:ed:0a:90:84:b1:2a:9d:70:7f:32:48:
                    3a:16:dd:14:1d:ff:ac:59:2e:27:d4:1f:af:5d:3c:
                    07:98:1c:20:b2:fc:98:ec:76:8b:63:25:1e:f0:1d:
                    b9:44:d5:69:e2:47:5f:8d:5d:8b:0f:ce:23:c1:ab:
                    1c:f3:c8:56:23:68:ca:1b:79:bb:5b:d0:a5:3e:d1:
                    55:04:41:f3:d0:46:bc:70:27:be:fe:59:8b:bb:a2:
                    87:96:5b:a1:cb:c5:c0:c1:49:d1:38:f6:ca:bc:ac:
                    e0:df:3b:5d:7f:a7:e9:14:c7:bd:41:49:18:99:34:
                    e8:f2:80:bf:a8:78:17:e5:fe:dd:8c:40:46:2b:50:
                    41:c9:48:80:91:b8:e3:60:3d:78:9f:c8:8e:d4:f5:
                    8d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:50:C1:A8:54:F3:19:95:7D:4F:15:16:40:98:FD:AE:1B:95:33:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/96f8c9d8-d992-361e-8550-9c52d8c8f711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.192.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:92:7e:bc:30:50:bb:00:b0:74:67:39:43:8c:cc:4e:62:86:
         d2:b9:54:1c:92:75:51:35:4b:b8:09:3a:ab:21:56:95:1e:6c:
         98:05:21:26:74:d7:7c:7f:e8:ec:cc:79:54:d7:17:49:03:1b:
         1f:35:f4:59:fd:88:53:ff:e1:b4:fa:b6:4e:56:45:75:3e:8c:
         77:ef:47:5c:7e:c7:02:b3:1b:37:e8:da:d7:13:76:31:3e:be:
         bd:5f:91:9a:63:4c:c4:b1:1a:ff:7c:87:f0:d7:66:a3:90:ba:
         8a:4e:cc:c2:19:18:9c:78:0e:e2:bf:bd:cc:16:68:16:3d:a0:
         61:d6:c6:78:dc:52:bd:f5:f1:d5:30:ba:70:d4:23:e0:c4:f0:
         29:35:8b:d6:d2:07:48:56:2b:1d:7e:3d:ec:b2:b4:81:b5:79:
         02:f6:5d:34:c8:fc:77:0a:b5:1f:c7:af:7b:f2:e6:ec:c3:8b:
         94:67:b2:c9:e3:24:46:65:7a:2d:f9:27:d0:e7:d1:8a:b3:21:
         ad:5f:64:27:64:77:e7:84:7a:60:42:a7:3f:3f:76:70:00:12:
         2c:f5:eb:02:a7:96:42:57:fb:a2:3a:6b:9c:48:00:5d:2c:d4:
         32:57:9e:c7:c9:da:5f:28:51:0c:6b:bf:ca:cf:2a:7d:a5:56:
         46:3f:93:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----