Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d3cf7589-b5cc-3203-8880-e8d824950c5f.roa
File:                     d3cf7589-b5cc-3203-8880-e8d824950c5f.roa (raw, json)
Hash identifier:          uBBBVs4aSQR/guM7Z2Y/NuX7Ypd9Cjk0K7K7imqFDhE=
Subject key identifier:   E3:BC:AB:EB:B7:04:A0:EF:E2:7F:56:DA:27:84:E3:64:AB:7E:FA:4F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583C96F691DFF31358681B878180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d3cf7589-b5cc-3203-8880-e8d824950c5f.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        170.58.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:96:f6:91:df:f3:13:58:68:1b:87:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=fc4770d5-1c7e-493f-88ff-7a048a5d73a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a0:21:dc:9d:88:4a:c0:ef:05:8c:38:5e:ef:
                    8f:b3:2a:fc:e7:5f:4b:19:4b:56:4e:ab:a7:19:d2:
                    42:e4:e0:db:02:59:88:1e:a0:99:df:8b:fd:98:5d:
                    28:e5:c6:d2:85:ff:33:4d:47:0a:59:99:11:23:4d:
                    b1:85:6b:0f:a3:83:c1:c2:fa:ec:f9:75:3f:17:a9:
                    a2:66:68:8a:af:7e:85:14:c3:88:79:37:c0:a8:e5:
                    be:f6:13:7a:fa:84:28:a8:1e:15:7c:b0:32:14:de:
                    07:70:25:26:41:7a:4b:24:0c:df:67:de:e8:6e:87:
                    e1:5d:3c:26:31:1a:13:2c:2b:91:e3:8b:97:88:7b:
                    b0:6d:67:62:63:3f:a1:f4:ce:b6:0a:b3:75:59:b8:
                    ce:4d:1c:a9:bb:db:61:b3:82:87:cf:8a:c2:a8:33:
                    61:9c:6a:d6:dc:42:d0:59:a5:d3:e8:4f:1c:45:8c:
                    84:4c:0a:03:2b:f5:3b:f1:22:a4:bd:46:29:13:8e:
                    09:e6:e1:76:4d:9b:c0:62:0c:99:8f:de:36:63:34:
                    d8:c0:21:da:92:28:2e:be:c7:18:c7:db:d0:de:81:
                    c8:e2:cc:84:08:aa:9c:66:40:15:8f:1c:c2:f1:98:
                    81:58:64:32:4a:bf:1b:4a:4a:47:79:bd:06:ee:94:
                    d9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BC:AB:EB:B7:04:A0:EF:E2:7F:56:DA:27:84:E3:64:AB:7E:FA:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d3cf7589-b5cc-3203-8880-e8d824950c5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.58.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:b2:dd:5c:32:68:fd:c6:59:64:28:cf:82:3a:6f:b0:18:df:
         7e:1a:ac:e2:f3:e7:89:0c:0e:84:62:63:47:ac:4f:16:d5:35:
         40:c0:b0:66:25:79:38:0f:d3:47:36:eb:df:f4:a3:ed:3c:ca:
         66:1b:c0:06:9a:14:d8:66:a2:51:08:4b:a6:39:e7:ec:f7:de:
         e8:be:35:42:48:7f:73:73:b9:84:75:a2:c8:a1:86:8f:3b:03:
         53:78:8d:67:5f:89:b0:9d:fc:ea:9d:47:78:86:03:ec:46:17:
         2f:fe:14:70:bf:08:d0:f6:27:76:c1:41:89:a5:ab:9a:c3:90:
         a2:b1:06:ac:6b:e3:69:5c:e0:0f:c2:68:0b:06:c3:65:75:18:
         a8:c3:d9:f6:c5:9d:51:0f:ce:c9:79:f0:3d:ac:4a:3d:b0:f9:
         2c:25:e4:3e:d1:7a:75:cf:f0:ae:eb:64:cb:32:9f:fc:8f:e7:
         ee:0b:b5:7f:93:eb:60:ce:48:da:c5:18:ae:4a:c1:7b:47:9e:
         a3:ae:6a:9b:eb:68:91:b0:83:02:8d:e5:8b:61:b2:4c:95:f5:
         1e:23:27:cb:2b:95:b1:c5:38:7f:0e:5a:2b:84:7a:e8:15:fc:
         36:fb:1f:f5:ed:74:40:03:e3:3f:f1:bc:f2:9e:d1:36:06:d3:
         60:8b:3f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----