Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ce224d24-bdbe-3a4d-ba01-b3d08f99a87e.roa
File:                     ce224d24-bdbe-3a4d-ba01-b3d08f99a87e.roa (raw, json)
Hash identifier:          7RifKVa5VDlnycnbTJ3JG4U3xDYpwXwXsVusJBfr3o4=
Subject key identifier:   DC:AA:9F:07:C9:67:CA:93:BF:96:EA:D2:38:49:50:95:99:AB:5A:9D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CF781F282A337FADBB219DD00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ce224d24-bdbe-3a4d-ba01-b3d08f99a87e.roa
Signing time:             Fri 18 Feb 2022 05:00:00 +0000
ROA not before:           Fri 18 Feb 2022 05:00:00 +0000
ROA not after:            Fri 25 Mar 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        13.24.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:f7:81:f2:82:a3:37:fa:db:b2:19:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Feb 18 05:00:00 2022 GMT
            Not After : Mar 25 04:00:00 2022 GMT
        Subject: CN=5962f6e7-da6e-44c2-b957-2f29b29cccb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:87:6d:d2:92:bb:7e:26:5a:39:7e:22:de:9f:
                    7c:0c:63:d7:5e:47:da:c3:3f:79:78:e2:b2:b6:2f:
                    a1:56:27:56:6c:8a:0a:7c:32:af:f0:41:68:20:65:
                    a8:f5:e0:b7:71:39:88:a6:bb:5b:a8:d7:fc:ce:9b:
                    e3:91:96:74:cd:36:8d:5d:91:ab:5f:2e:9e:76:6d:
                    1e:0f:b1:f4:a5:47:fd:ed:c2:0c:7c:d0:74:36:3d:
                    1b:b5:bc:c0:99:9c:de:fd:d8:54:0f:4b:57:a8:ac:
                    89:a1:08:ca:df:b9:57:a4:93:82:ed:aa:22:c6:5f:
                    2b:dd:63:74:5d:df:cd:62:36:ca:0b:b7:be:e8:db:
                    05:f5:ba:dd:a8:1b:14:e4:21:a0:d9:9c:0c:be:8c:
                    b3:5d:e1:99:d8:35:e8:ca:5d:ed:04:62:a3:48:75:
                    5e:d0:d8:79:5b:18:44:4b:c9:a1:1c:99:00:25:1f:
                    17:4d:62:05:3f:e2:8f:df:10:67:71:97:95:c1:2c:
                    b7:81:cc:2b:22:48:60:04:5f:2b:cf:bd:93:c7:c8:
                    93:8a:b0:ca:ba:6f:e8:37:a9:00:89:fe:a0:05:d6:
                    c9:05:21:71:e5:a2:39:6c:43:94:2a:9a:1f:8b:e2:
                    67:d4:2f:a4:70:cb:df:39:fb:4c:07:6b:53:b3:ab:
                    70:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AA:9F:07:C9:67:CA:93:BF:96:EA:D2:38:49:50:95:99:AB:5A:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ce224d24-bdbe-3a4d-ba01-b3d08f99a87e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.24.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:c2:63:3b:a3:46:2c:40:2e:c6:94:b3:f5:a5:66:09:0f:97:
         7d:f5:43:f3:cf:02:88:17:08:98:43:d7:60:c5:82:3d:4c:f2:
         b0:14:2d:56:10:4c:a6:bb:2c:da:28:c1:91:a1:3a:dd:98:f0:
         03:84:31:94:e7:ab:58:92:cc:a0:d4:6a:83:a0:12:e2:01:a5:
         47:11:2b:7d:86:33:0d:8f:c9:cc:69:68:b1:64:77:09:0b:81:
         d2:3e:e0:d2:ba:02:93:c7:76:b5:b6:fe:0e:a3:45:b4:9f:21:
         fe:3c:2f:a8:0c:79:c4:b6:93:92:22:8a:56:1b:56:97:b3:4b:
         78:e8:5b:3b:24:08:c0:cb:b4:da:44:33:87:5a:c3:12:31:85:
         44:d1:f1:81:29:40:d9:43:2b:ff:00:07:90:1b:d3:60:8d:f3:
         0a:75:e4:e2:70:3f:07:fa:91:bf:c4:51:42:49:62:40:ab:22:
         db:76:f9:3e:00:84:de:d0:b3:1a:da:5f:7b:d9:3b:ce:13:6d:
         c6:c8:43:37:3f:c7:47:fc:fb:fc:e4:96:b3:a4:35:3b:02:cc:
         13:b5:4b:c6:90:d1:48:d8:59:0a:9b:ed:c2:9a:6d:eb:3c:ca:
         07:0f:0f:0f:d8:92:18:9f:5e:58:3d:c0:01:a3:31:2f:b3:76:
         81:d6:d8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----