Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e1e761d3-633e-3c09-b81f-a90178ab842a.roa
File:                     e1e761d3-633e-3c09-b81f-a90178ab842a.roa (raw, json)
Hash identifier:          2zGeJMbmok2YpVGdp4xmAHwMBaGQHctjFO4IzwWlJLA=
Subject key identifier:   26:61:58:B6:C0:1E:04:FA:EB:25:3B:1A:53:50:AA:56:4A:2D:35:CC
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E46BF5E8F0F4F91FB1DDD96A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e1e761d3-633e-3c09-b81f-a90178ab842a.roa
Signing time:             Fri 17 Jun 2022 12:00:00 +0000
ROA not before:           Fri 17 Jun 2022 12:00:00 +0000
ROA not after:            Sat 23 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        168.163.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:46:bf:5e:8f:0f:4f:91:fb:1d:dd:96:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun 17 12:00:00 2022 GMT
            Not After : Jul 23 04:00:00 2022 GMT
        Subject: CN=97f47a0f-bd1d-4f70-9f35-3684af0c68f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bb:5a:39:0f:66:49:ec:f0:11:a9:df:d3:76:
                    19:9e:b3:97:e2:3a:7d:a5:16:ec:b1:a6:9e:a6:f3:
                    23:79:61:96:60:f9:63:fe:72:3c:12:0d:57:8c:d3:
                    30:86:10:74:dd:c6:e5:99:30:ee:30:7f:5e:6f:a8:
                    7c:d8:2a:1a:4d:ff:26:78:1f:ad:b6:16:a6:d7:7c:
                    18:d0:cc:77:21:23:0d:04:13:7d:82:d8:b9:9e:7b:
                    02:9c:88:7b:8d:14:98:0b:98:3a:de:03:a6:be:87:
                    ab:75:67:a0:e6:4d:2e:b0:f5:ef:51:44:03:bb:45:
                    8c:ec:cd:a4:ff:c5:2c:00:44:f1:b3:b9:fa:35:17:
                    10:81:25:e5:85:41:52:46:3d:66:a1:e7:7a:72:f7:
                    73:ce:7e:c8:c6:9c:50:fb:81:7c:a7:d2:2c:91:0b:
                    99:97:c7:10:72:ab:8f:72:01:0c:b3:43:88:dc:d3:
                    35:33:70:50:29:d2:28:6d:b5:a0:b8:86:e1:64:2c:
                    65:ea:c0:a1:35:fc:d1:d8:9b:0a:96:22:19:1b:e5:
                    c5:4d:6f:52:79:6a:27:e8:a6:c1:e8:14:4c:0b:81:
                    16:00:f8:37:aa:bc:7d:55:0d:a1:b1:09:65:7f:f3:
                    4e:cc:ba:6a:3b:d7:52:08:68:e0:62:9d:b5:bd:63:
                    aa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:61:58:B6:C0:1E:04:FA:EB:25:3B:1A:53:50:AA:56:4A:2D:35:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e1e761d3-633e-3c09-b81f-a90178ab842a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.163.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:69:21:93:1c:be:7a:cf:34:49:d8:67:e1:72:6f:da:5f:61:
         79:a3:58:f5:0b:42:11:c1:32:f5:35:08:0d:c6:28:9a:cf:d1:
         3c:1e:b7:9b:84:14:e9:ed:a4:ae:3e:52:6b:83:a6:91:06:d4:
         05:5b:62:90:03:17:31:29:2c:2c:2a:a1:cb:fa:86:ce:da:74:
         41:6e:d5:91:36:fe:41:36:e7:ac:d6:3d:30:1a:fe:07:e9:39:
         f9:53:b5:1b:a8:36:95:10:c0:b3:b5:78:b0:f6:11:5f:bf:2f:
         bc:2a:68:28:17:39:f9:15:c8:33:bf:e1:b4:54:3d:d7:cc:19:
         55:c4:f7:08:e9:5d:96:35:14:7d:91:54:af:99:9b:09:df:2a:
         76:c9:74:fa:98:10:0d:01:a1:cc:6e:fe:ed:13:70:19:ce:eb:
         4b:4c:cf:9b:47:f4:7f:3d:47:e3:77:c3:60:7d:65:1c:53:e5:
         47:98:14:ef:21:83:d1:0b:a3:e5:96:50:bd:5a:71:0d:8d:4b:
         23:2c:e3:9f:51:86:23:ce:ce:3b:14:da:70:45:3a:44:f6:2a:
         30:7d:14:a5:25:8a:4e:23:85:8f:81:1f:64:10:bf:ed:b3:7f:
         c9:0a:10:a3:23:a8:55:ef:4a:51:a8:7c:9f:2c:05:84:d1:40:
         e7:50:c5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----