Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a7fac023-abb0-3f17-9925-afcd6d8f475f.roa
File:                     a7fac023-abb0-3f17-9925-afcd6d8f475f.roa (raw, json)
Hash identifier:          C08H/wPxaOzk7xvV6Cn8Z0eh1sN/BkwZ2g9yTrsB5K4=
Subject key identifier:   09:3A:1B:35:42:E1:65:AC:62:D4:FA:6A:19:78:E2:F7:DE:61:ED:71
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FF0235217EC9437899E8FBA00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a7fac023-abb0-3f17-9925-afcd6d8f475f.roa
Signing time:             Wed 16 Nov 2022 12:00:00 +0000
ROA not before:           Wed 16 Nov 2022 12:00:00 +0000
ROA not after:            Thu 22 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        15.231.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f0:23:52:17:ec:94:37:89:9e:8f:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 16 12:00:00 2022 GMT
            Not After : Dec 22 05:00:00 2022 GMT
        Subject: CN=8bdb081d-8a90-43e1-984d-4e7490b560a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:25:6c:5d:a3:2a:93:e9:4c:4f:cf:e6:86:04:
                    3f:08:f4:d9:2f:5d:db:bf:38:30:ff:94:b2:cc:df:
                    ec:d2:da:42:7c:4c:8b:2d:0a:d3:d9:d5:04:9b:e3:
                    a1:a2:21:0a:0c:0d:f7:d2:39:75:cf:fa:3e:d3:88:
                    42:e3:fe:3d:9b:42:24:43:3c:63:ad:7e:f6:4e:90:
                    be:ef:c6:5b:05:7e:21:60:d5:a4:18:17:2f:1e:f3:
                    65:44:b5:eb:a3:f7:f0:7b:f9:d1:03:02:83:58:24:
                    c2:f6:53:12:8a:af:de:46:76:ae:f0:28:bb:97:0e:
                    2c:11:6e:02:1c:e0:20:56:a5:95:11:74:3e:3a:8f:
                    49:c8:48:97:db:8d:33:85:9d:2c:85:44:c0:1d:0b:
                    80:bc:f3:e3:fc:6f:90:30:15:5d:77:e0:1b:cf:84:
                    94:9c:14:1b:1d:b5:8e:d4:4a:1e:0e:aa:19:c7:97:
                    9d:89:fe:5c:99:87:01:e6:86:07:84:1c:87:4f:d7:
                    5f:d7:d5:b5:9c:bf:a2:e0:7b:aa:6c:18:56:d4:23:
                    ab:97:cf:cb:8e:85:fc:45:31:35:f8:9d:b4:0a:42:
                    44:25:57:8c:b3:20:14:77:c2:bb:a6:42:c4:a8:b7:
                    5f:8d:a2:d5:77:e0:8c:13:f2:0c:39:5e:4f:8a:b7:
                    b3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3A:1B:35:42:E1:65:AC:62:D4:FA:6A:19:78:E2:F7:DE:61:ED:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a7fac023-abb0-3f17-9925-afcd6d8f475f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.231.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:03:0e:c6:55:43:3b:bf:a2:2e:e6:20:9d:95:18:6f:95:20:
         05:55:3b:7d:53:0d:5e:35:16:f1:09:8e:91:7d:02:e5:2a:4e:
         67:bf:19:83:bf:a3:05:90:27:cc:55:97:99:d2:dc:fa:91:c4:
         3e:08:22:9d:1f:76:3b:72:15:1d:5d:65:a6:40:45:d4:73:24:
         35:34:8c:c8:ce:64:e2:97:78:cc:21:d5:73:b8:02:68:eb:c5:
         18:6a:b1:81:da:fc:c6:9a:54:f4:dc:b9:16:a6:79:b7:2f:8f:
         76:e9:10:ef:d4:03:80:4a:a2:18:4e:f7:4c:5b:e2:4c:7b:35:
         6e:84:06:83:d9:07:ed:8b:85:90:89:e4:d2:a2:d0:ca:16:b2:
         3d:3c:84:a1:cf:2d:e1:69:fb:32:c0:92:dd:0d:ae:b3:b8:96:
         4b:fa:d9:f9:0b:43:10:88:b9:79:cf:c9:cf:48:00:d2:3a:da:
         61:8f:93:4b:38:33:09:12:7e:c9:3c:aa:0a:62:06:4d:04:d8:
         54:33:ec:68:94:53:b2:96:32:b0:ae:ba:c6:fc:c0:0a:9f:cb:
         54:54:e5:6a:fa:4e:29:f8:f5:39:d7:e1:fc:7b:9a:a1:37:c7:
         a1:0e:66:2b:5a:3b:b6:75:5e:92:9b:bd:df:e6:c1:17:15:6c:
         7a:c9:b2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----