Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b9be3a03-0072-36cb-9ac3-296de4194c41.roa
File:                     b9be3a03-0072-36cb-9ac3-296de4194c41.roa (raw, json)
Hash identifier:          wg0ssuxxh6sRQLcjlAgTQyB84Mm3+9vzoWninuFQn/I=
Subject key identifier:   58:1A:43:97:23:98:F8:EB:7C:29:14:1E:1D:7A:CE:34:4B:B1:52:E6
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E3E41B69B335A262450C80600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b9be3a03-0072-36cb-9ac3-296de4194c41.roa
Signing time:             Tue 14 Jun 2022 12:00:00 +0000
ROA not before:           Tue 14 Jun 2022 12:00:00 +0000
ROA not after:            Wed 20 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        13.32.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:3e:41:b6:9b:33:5a:26:24:50:c8:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun 14 12:00:00 2022 GMT
            Not After : Jul 20 04:00:00 2022 GMT
        Subject: CN=6a820865-7c6e-471f-a8ca-66b4314f1373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:71:7e:f9:21:c0:d2:e9:45:2b:e6:99:cc:84:
                    42:d5:d9:2a:9c:71:5c:fe:72:6a:85:c2:f1:49:22:
                    6b:e2:44:a9:f9:08:6e:2d:33:48:63:9f:c7:e2:31:
                    9d:d2:c7:42:2d:60:ef:29:df:07:10:19:34:5c:7e:
                    a6:de:76:a0:9a:cb:13:7c:af:10:ab:b6:8f:f3:ea:
                    ba:ed:f9:f3:73:c3:6f:60:4b:37:ed:c8:d4:f1:66:
                    3f:a8:db:82:5a:fd:46:c8:4a:8e:01:f4:d8:b2:72:
                    68:b3:22:48:88:38:fa:a2:88:ef:63:4c:48:54:17:
                    80:10:81:cd:6e:a0:d2:b1:7b:66:ca:5c:cd:96:0f:
                    bd:f3:9e:99:ad:dd:e3:6c:5b:ec:f1:8c:f7:41:e7:
                    70:6a:95:05:a0:21:05:9a:00:eb:92:d0:11:49:12:
                    ab:48:df:76:96:42:ec:ae:1a:f1:f4:d7:20:40:99:
                    b4:d3:c6:f0:25:14:c5:cb:45:db:79:df:42:05:fb:
                    42:a9:01:e3:e2:b2:62:02:5b:fe:c6:de:fb:b5:5a:
                    83:94:b7:04:4d:b9:76:a8:fb:f8:48:df:ad:f4:e1:
                    b5:58:96:ff:8d:26:31:18:46:91:cb:13:ea:13:af:
                    ca:68:b8:52:9c:80:99:ce:8c:ad:96:05:c0:28:8b:
                    a2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1A:43:97:23:98:F8:EB:7C:29:14:1E:1D:7A:CE:34:4B:B1:52:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b9be3a03-0072-36cb-9ac3-296de4194c41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.32.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:6d:09:d8:9d:69:50:87:e7:55:22:cf:78:5e:bd:4e:31:ef:
         57:84:af:c3:9a:6b:17:e5:9b:d4:ba:ef:a5:14:bb:61:0c:ef:
         76:72:ca:0f:b6:76:45:af:29:bc:b2:55:c5:5c:51:0b:a3:30:
         d7:6e:70:e5:81:af:e3:b4:3c:4e:72:22:44:23:66:0a:8f:53:
         d3:3f:97:50:0b:2c:16:62:ac:e8:b8:4c:76:0a:66:f3:ff:ed:
         51:39:4c:1b:5d:b7:53:fd:55:49:9d:f5:b9:f0:9e:11:d7:f2:
         98:da:52:99:d5:bc:13:b2:80:93:61:17:88:75:fe:e1:bc:ab:
         32:7e:2a:df:c0:3a:78:46:bc:b4:22:88:9c:c8:0f:59:b5:44:
         e4:a1:17:4a:f6:b1:31:cc:59:6a:a8:f5:73:93:c2:f4:b4:e6:
         af:59:32:a2:1f:10:a1:a1:38:8a:23:e3:6c:dc:28:78:ba:cc:
         30:3f:b2:79:7e:35:d2:c8:6d:75:12:e3:c4:a6:41:18:2e:f2:
         7d:47:d9:6f:25:1f:7b:7f:03:d9:04:a8:ce:e8:a3:fb:fb:81:
         ce:9e:e1:1d:3d:41:02:ee:58:e7:e6:3f:e0:d9:26:9c:c9:d2:
         eb:88:98:14:85:39:86:33:5d:11:bb:4e:c8:e4:f1:fa:8c:4c:
         d7:aa:cc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----