Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bf16f6b9-ae3f-31df-8f86-bef10c975439.roa
File:                     bf16f6b9-ae3f-31df-8f86-bef10c975439.roa (raw, json)
Hash identifier:          OuS/OXCvS7WVFLucbWS+pi2DuxcYqt4cBAPn0sIMhq8=
Subject key identifier:   E8:C0:8F:AD:58:DE:24:85:D0:34:C5:36:38:BC:49:6B:C7:E4:BC:27
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858403E6C452EADF971AB497F7100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bf16f6b9-ae3f-31df-8f86-bef10c975439.roa
Signing time:             Wed 14 Dec 2022 12:00:00 +0000
ROA not before:           Wed 14 Dec 2022 12:00:00 +0000
ROA not after:            Thu 19 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        15.231.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3e:6c:45:2e:ad:f9:71:ab:49:7f:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 14 12:00:00 2022 GMT
            Not After : Jan 19 05:00:00 2023 GMT
        Subject: CN=9a798173-d2fb-4251-973d-677ff325b9c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:96:3c:11:18:33:b8:c8:44:9a:ab:6c:bf:84:
                    f3:3c:d9:fb:df:f2:b5:aa:cd:a0:a7:97:23:81:d0:
                    d2:15:53:5c:25:0b:90:b6:4e:d3:5a:ca:ab:52:9d:
                    fc:7f:3d:af:76:55:ca:91:c8:26:39:d6:36:25:39:
                    f0:d4:dc:ca:ee:04:8b:f0:88:c5:2d:e7:37:20:fd:
                    02:c7:80:2f:36:0c:aa:bc:b9:7e:81:d1:c4:a4:c4:
                    c1:76:43:44:dd:f5:7e:f3:08:c1:a7:e9:86:e6:64:
                    41:5d:07:29:c2:ff:1c:b7:69:3c:46:d9:1f:2a:9c:
                    be:65:ad:c6:d7:01:69:7c:58:70:ff:99:38:2d:8f:
                    a0:85:f7:55:10:8c:80:99:cb:61:f4:20:e8:b8:9b:
                    10:65:05:59:2d:3d:e6:64:61:20:a5:94:81:61:2f:
                    83:cb:4c:9c:2c:27:1a:bb:98:7a:95:98:c2:b1:8b:
                    ed:82:1a:55:d1:3e:ca:ad:26:93:93:bc:72:88:fc:
                    da:0b:c0:2c:ae:e8:90:e7:31:77:9c:c1:c6:9a:d7:
                    18:05:1a:4e:91:19:6a:5b:b8:b0:dc:10:2e:a7:84:
                    31:3f:1d:3e:03:63:a3:36:ef:62:6c:d7:48:e3:86:
                    70:d3:48:f0:50:48:e9:6c:8c:b6:e9:cf:1c:6b:ae:
                    e6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C0:8F:AD:58:DE:24:85:D0:34:C5:36:38:BC:49:6B:C7:E4:BC:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bf16f6b9-ae3f-31df-8f86-bef10c975439.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.231.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:87:22:ed:90:02:e2:f5:9f:db:14:ca:35:ec:9c:ba:fe:a0:
         70:f7:1b:6c:0e:08:68:f5:ad:60:a3:15:48:4d:5b:db:8c:c9:
         e8:35:6a:cc:4a:6d:22:e1:62:ca:4a:bd:80:d6:83:ec:77:42:
         a0:e0:c4:f1:e0:43:e9:b9:95:c9:a3:9f:fc:6b:ab:8c:83:8c:
         d8:25:4b:97:da:f9:f5:47:39:f3:ef:25:2a:14:38:89:d0:36:
         5f:3f:8c:1b:06:bd:84:9e:58:16:30:e1:1f:14:65:2b:79:a9:
         e3:6d:0a:dc:6a:7c:05:28:b9:4e:e6:81:82:96:0b:2d:d7:50:
         92:84:e2:02:ad:1e:ac:2c:a2:6e:c2:4f:68:af:9e:db:fc:2a:
         e7:91:f5:4b:49:00:55:4b:2a:f3:26:e8:67:4b:6e:67:48:61:
         db:99:e2:3e:7f:ac:55:eb:73:00:ca:3c:e4:1d:d9:bc:a9:53:
         92:5f:e2:a1:ef:b3:1f:bf:02:9f:74:21:ed:57:a7:f6:5a:fd:
         97:67:4e:5c:a0:b8:18:f7:0d:b3:d2:06:87:8c:c3:01:1d:4c:
         25:97:4c:77:bf:73:cd:d6:98:c9:6e:20:d5:b5:f7:24:ab:c4:
         39:25:3f:63:9d:57:4e:04:9c:85:e8:c1:6d:39:b4:f1:fe:90:
         b4:cb:4e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----