Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b8cfe814-92ec-3aac-a564-ae7729f6434c.roa
File:                     b8cfe814-92ec-3aac-a564-ae7729f6434c.roa (raw, json)
Hash identifier:          /0sNtXiGe4SrErGNi/1iuOC5qxYCRvJqdikhm8PmDUk=
Subject key identifier:   D9:5F:21:33:98:B6:44:CC:11:4A:36:A8:80:BB:81:40:5C:7C:96:0F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F3498FCFC589C0D2B480A7400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b8cfe814-92ec-3aac-a564-ae7729f6434c.roa
Signing time:             Sat 10 Sep 2022 12:00:00 +0000
ROA not before:           Sat 10 Sep 2022 12:00:00 +0000
ROA not after:            Sun 16 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        144.220.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:34:98:fc:fc:58:9c:0d:2b:48:0a:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 10 12:00:00 2022 GMT
            Not After : Oct 16 04:00:00 2022 GMT
        Subject: CN=3646cd45-2a9e-4c85-8066-5a33c9c728fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:33:5d:2d:94:f7:1a:ef:bb:66:06:44:f4:13:
                    8e:0d:a1:4a:80:ec:d2:5a:c8:80:d3:58:c3:09:13:
                    41:0f:6e:1e:eb:fc:d9:da:aa:36:f2:64:d4:d6:7c:
                    c0:65:2c:3c:36:27:64:27:e4:64:3c:4b:56:f7:d4:
                    d6:29:f8:41:86:b9:4c:a3:41:f8:c1:a6:5b:e5:c4:
                    14:f8:08:6c:36:98:98:f7:78:a3:2f:84:d2:1e:e4:
                    12:22:73:20:f1:f8:7b:c4:3b:bb:5a:23:26:64:e6:
                    31:26:c4:45:1d:1a:8c:4c:19:f1:1a:59:30:1b:59:
                    aa:e4:7d:e6:a4:b5:f7:cd:0a:36:bb:ae:57:3c:55:
                    a5:7c:2d:42:f1:8f:a0:ae:24:77:51:2a:65:e9:29:
                    a1:14:25:07:dd:4a:43:b0:ac:e7:22:e5:7c:25:b1:
                    f0:ff:ee:c1:13:72:18:1c:00:56:08:e1:39:f5:c2:
                    40:6b:5b:ff:24:ee:91:60:90:5f:87:19:51:b3:14:
                    df:11:a1:7d:24:5b:db:bc:75:a3:61:75:ba:30:30:
                    99:32:8e:19:c3:29:ab:f4:ea:23:aa:26:71:6e:df:
                    e4:85:a2:55:67:74:4a:78:7d:ae:ba:3c:ea:8a:f8:
                    d1:fe:2a:00:99:a4:17:f7:0b:2a:e4:5e:da:46:97:
                    c1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:5F:21:33:98:B6:44:CC:11:4A:36:A8:80:BB:81:40:5C:7C:96:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b8cfe814-92ec-3aac-a564-ae7729f6434c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.220.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:f8:bc:d4:ba:43:72:d5:40:b4:61:8d:a2:fd:82:01:6b:db:
         2c:8c:2f:43:ac:ff:46:5b:03:60:40:6c:4a:9e:2f:bc:8b:e6:
         85:4d:30:cb:8a:7b:2e:65:91:90:10:14:67:6c:86:59:aa:eb:
         62:d2:3a:53:b2:01:24:8f:6b:da:ef:c1:90:2f:b4:1f:a8:73:
         f1:b7:a5:94:c9:4e:6c:51:c1:a5:44:8c:34:6e:6d:57:79:ca:
         3b:16:0b:c3:c5:3f:e0:b5:9a:ab:2a:aa:2e:45:26:5b:0d:5e:
         df:bc:cb:64:fd:93:88:d3:94:c1:78:a7:0d:07:cb:f9:3f:bd:
         86:48:13:7b:b1:7d:ad:39:3e:de:e4:21:f5:9f:5e:57:f9:b9:
         70:ca:ca:e0:a1:06:80:03:38:68:71:74:22:83:a5:ff:62:7e:
         3c:84:fb:27:8e:9c:af:ec:c6:fb:7e:0e:43:5c:e5:11:5e:e6:
         45:31:dc:dc:bf:f2:61:51:77:ed:50:09:8e:2d:3f:35:c8:38:
         51:14:48:a5:ee:6b:3f:04:8e:e6:0e:f0:5a:12:e1:84:77:86:
         cb:b3:92:2f:39:69:11:81:c6:ba:f0:81:99:6e:e5:47:ad:c6:
         07:3d:81:f0:14:17:00:df:77:61:65:3f:ef:ab:2e:88:d2:54:
         6a:72:2b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----