Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/db3e0121-44b1-3182-9edb-c8be853b6035.roa
File:                     db3e0121-44b1-3182-9edb-c8be853b6035.roa (raw, json)
Hash identifier:          rXNuQFbzNc5LnsW7+udqTaCYHUvbXQrhj0TXmuEhY5g=
Subject key identifier:   A9:27:37:12:98:6C:D0:6E:79:75:68:06:2F:1A:25:66:C5:FE:32:B1
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F3FAD86BBC731D0BC2E42C080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/db3e0121-44b1-3182-9edb-c8be853b6035.roa
Signing time:             Wed 14 Sep 2022 12:00:00 +0000
ROA not before:           Wed 14 Sep 2022 12:00:00 +0000
ROA not after:            Thu 20 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        15.129.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:3f:ad:86:bb:c7:31:d0:bc:2e:42:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 14 12:00:00 2022 GMT
            Not After : Oct 20 04:00:00 2022 GMT
        Subject: CN=f22b1028-0c37-4cca-be84-d6ece9a9af31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:71:10:0a:43:0e:7c:f6:7a:6d:95:84:8a:3a:
                    b9:fe:7f:62:c2:c5:80:31:23:dd:81:c1:63:8d:e8:
                    a3:87:70:e2:d6:be:82:43:c7:05:ec:a6:18:ee:b5:
                    75:9c:0b:49:09:83:2e:16:0a:8e:e4:6a:04:a6:4c:
                    74:c2:3b:f2:a4:68:f6:a4:c0:e2:94:df:42:a2:51:
                    d2:f2:cd:fe:36:3b:57:a0:da:1c:b1:e6:73:a9:4b:
                    8f:b9:0c:0a:da:e2:55:34:6f:85:dd:17:2f:b7:4f:
                    97:5c:6b:f2:c9:a9:f1:d1:c3:0c:ba:62:10:87:a1:
                    61:8e:ea:3c:a1:32:ec:8c:33:c0:1f:56:c4:18:cb:
                    86:df:c0:96:87:f2:07:d4:cb:a1:fd:ec:e9:3f:22:
                    ea:ca:67:9c:c9:81:58:7c:36:ec:71:59:b7:72:67:
                    eb:6e:06:d1:dd:86:e4:26:60:e9:85:bc:49:46:9e:
                    e1:84:7d:b5:ff:92:b5:62:99:82:1e:e7:41:65:9c:
                    00:6d:e9:ce:66:e3:47:f2:d6:7d:50:9b:45:e6:6f:
                    31:15:5c:2d:2c:81:52:18:b7:9a:7f:93:9a:76:b0:
                    4d:b0:2e:f4:63:97:6b:15:19:65:c3:f4:83:52:db:
                    ce:d9:41:39:f4:4c:a9:b4:fe:9d:bc:2c:83:44:4f:
                    72:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:27:37:12:98:6C:D0:6E:79:75:68:06:2F:1A:25:66:C5:FE:32:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/db3e0121-44b1-3182-9edb-c8be853b6035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.129.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:39:af:82:5c:b5:f6:2b:18:b0:92:92:1f:e9:b2:cc:07:17:
         b1:ab:0c:6e:22:b7:d6:37:45:cc:c8:48:38:eb:af:b2:3f:d9:
         2d:5c:43:ed:b2:ae:c9:89:64:9a:07:21:20:5c:ba:81:43:39:
         68:92:d9:23:56:9a:da:7a:e8:d0:96:1b:7b:a4:ec:55:07:f1:
         c3:74:0f:5f:43:80:2d:94:b4:0d:af:ec:0d:48:45:76:8d:c2:
         66:4b:38:dc:36:bf:3e:5d:3e:e1:f3:44:0f:1d:e9:c3:9e:73:
         35:84:c8:ac:20:8d:30:0b:94:68:60:ff:3d:62:9d:b1:4a:9f:
         c8:ee:e7:f3:8f:e6:dc:eb:45:b6:3c:38:04:7d:e2:26:69:53:
         20:75:ff:a2:72:4a:37:b9:c6:14:ec:d4:13:81:97:f9:e1:f4:
         67:04:c6:f3:55:d7:cd:37:1f:8e:ac:32:7c:8b:29:d4:fb:51:
         4d:7a:d6:51:3a:2c:44:65:c9:b1:2e:30:ce:c4:65:96:79:17:
         37:d8:3b:1a:30:7c:4c:70:fd:35:bb:ae:0d:d3:c4:31:cf:ef:
         96:15:70:18:52:ff:4a:b8:cd:14:c4:13:21:ad:49:cb:c1:40:
         14:2e:c1:ae:66:90:0e:97:9b:ff:49:54:7b:7c:10:52:5c:75:
         4a:b9:3c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----