Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bd8cb91d-8790-31ac-b3b5-8d64273ba152.roa
File:                     bd8cb91d-8790-31ac-b3b5-8d64273ba152.roa (raw, json)
Hash identifier:          DpiMxXgXBWu+EnZFQJaKlEdkonNs2ogJKTzR1p0bvjE=
Subject key identifier:   A7:7E:BA:4F:79:2E:CB:A6:A8:A9:E6:39:C8:C6:F4:43:89:29:59:05
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F53A7F66F84C50F7BB4F09F80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bd8cb91d-8790-31ac-b3b5-8d64273ba152.roa
Signing time:             Wed 21 Sep 2022 12:00:00 +0000
ROA not before:           Wed 21 Sep 2022 12:00:00 +0000
ROA not after:            Thu 27 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        15.246.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:53:a7:f6:6f:84:c5:0f:7b:b4:f0:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 21 12:00:00 2022 GMT
            Not After : Oct 27 04:00:00 2022 GMT
        Subject: CN=4e9871a7-1805-4b79-9f29-ca0762dab899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:11:a0:1b:eb:a9:ac:41:d2:b1:6a:38:d0:91:
                    cf:1d:5e:32:03:b8:22:39:a0:4a:9a:a2:2e:b4:9d:
                    8c:ec:87:5c:7c:21:56:fa:f8:00:34:7f:b7:62:4d:
                    23:9b:22:8e:c0:82:02:2c:c7:d1:95:9c:c1:fe:56:
                    e6:ed:bc:dc:9a:8d:ea:9b:70:bd:1d:4d:2c:71:3e:
                    fb:d4:83:77:f8:df:ec:48:7e:71:84:9a:07:76:14:
                    d9:a6:23:4c:71:9b:0c:a1:d7:34:90:1c:7b:42:96:
                    26:22:58:20:9c:bb:68:99:ef:e7:24:98:ad:02:40:
                    03:07:e2:6f:40:77:c3:c5:e4:a2:9d:0c:16:66:a9:
                    a8:2d:e0:77:97:1c:ec:e2:b6:d5:fb:46:5f:56:39:
                    5b:0c:ae:2f:ba:02:b6:d9:07:c0:70:48:ab:24:36:
                    b3:af:95:0e:2e:f1:19:18:bb:68:ee:30:f6:55:d6:
                    ef:e7:4f:4c:9e:e6:b9:f4:c4:5d:1d:e9:58:e5:e7:
                    17:03:71:ae:9c:5a:5e:a8:6c:32:6a:6d:fd:4d:1f:
                    e6:70:cb:d0:64:6a:48:fd:1c:2d:13:41:e4:e9:1f:
                    18:c6:8d:42:26:11:ef:81:19:95:f9:86:0b:00:3c:
                    2e:e3:2e:e6:98:22:da:2f:5d:fd:76:67:5a:c9:32:
                    c9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7E:BA:4F:79:2E:CB:A6:A8:A9:E6:39:C8:C6:F4:43:89:29:59:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bd8cb91d-8790-31ac-b3b5-8d64273ba152.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.246.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:f6:e5:5a:e1:72:b8:9d:be:9f:03:20:c4:bf:48:fe:9a:73:
         f6:42:79:ac:57:c9:e7:c6:7f:35:ce:c5:e8:4b:3a:7a:13:a3:
         94:a0:0e:c4:08:3b:05:38:5f:b3:4c:9f:dc:66:ca:1c:ff:6a:
         b1:9c:99:4d:a7:73:9a:ba:6f:a7:a6:cf:3a:89:43:1e:56:5b:
         de:13:c3:33:8f:06:6b:ff:27:a3:e5:31:f7:15:ef:b8:72:fb:
         eb:ab:82:9b:a7:c7:fa:33:a9:95:a2:05:cd:3e:4a:be:b6:37:
         81:6a:d6:3b:5e:ce:ac:0d:5c:be:b8:2d:fc:85:60:53:be:53:
         e9:53:d4:50:57:4f:a2:b9:92:02:5f:8d:63:f5:01:30:c8:a6:
         17:43:02:92:3c:0d:3a:0e:8b:a5:93:1b:6e:91:2f:91:ad:57:
         e6:f8:bc:e5:08:57:8f:b7:30:2e:bf:c0:3b:84:27:ed:1e:dd:
         61:55:79:4e:8c:bb:44:5b:3d:97:a6:05:62:f3:24:7d:c3:09:
         e5:7a:a0:55:9c:c2:b8:88:15:03:ba:ac:8a:f5:3c:e6:41:63:
         62:51:f7:79:ed:f5:14:fb:4e:51:82:7f:a7:bb:88:72:b0:86:
         97:b4:b8:f2:cb:ee:aa:89:ca:eb:39:22:92:26:9d:86:b6:c5:
         e6:3b:1d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----