Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e4d9724f-0cd9-3ad3-bc41-c5965943266f.roa
File:                     e4d9724f-0cd9-3ad3-bc41-c5965943266f.roa (raw, json)
Hash identifier:          4JMJblU2Jlk13vxzNaHts0xPibJ9RbUMx0JpXAZFNGQ=
Subject key identifier:   34:6F:63:79:43:3C:D2:E7:D1:74:36:38:2C:E8:11:C9:3D:34:11:72
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EDDF793A48BAB5564551D9000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e4d9724f-0cd9-3ad3-bc41-c5965943266f.roa
Signing time:             Wed 10 Aug 2022 12:00:00 +0000
ROA not before:           Wed 10 Aug 2022 12:00:00 +0000
ROA not after:            Thu 15 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        15.239.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:dd:f7:93:a4:8b:ab:55:64:55:1d:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 10 12:00:00 2022 GMT
            Not After : Sep 15 04:00:00 2022 GMT
        Subject: CN=438ed4a6-6194-4de4-ab25-c671e1295ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dd:b4:9d:29:96:a9:ae:2a:1f:2c:ce:66:1d:
                    80:fe:63:81:d4:43:d8:72:b1:2c:ff:11:a4:93:aa:
                    a2:4a:ec:67:df:86:20:8a:8d:c7:d3:70:04:c3:54:
                    bf:b4:c0:b3:2d:42:46:f1:08:b6:d2:1d:4a:d0:13:
                    5e:61:7c:a6:a6:ef:12:8c:84:f7:fd:6c:44:9f:fe:
                    a8:36:ac:96:90:a5:af:1d:5a:28:30:c1:35:7b:a6:
                    2f:b6:7e:bf:ce:44:95:74:6d:71:ba:64:48:b7:a6:
                    ab:68:a0:09:c6:3d:25:54:bf:d3:33:07:cb:0e:f4:
                    c0:c1:0b:8e:4e:10:00:a0:87:7a:65:20:12:c0:4e:
                    d5:7d:a5:3a:7f:c1:5e:2e:cc:42:22:05:7d:8a:6b:
                    26:38:96:eb:fe:6c:7d:51:a3:49:cd:97:5e:d0:b2:
                    f6:aa:4a:12:c3:97:34:9c:b1:46:8d:b8:4b:52:8d:
                    9d:a7:7a:aa:2c:b6:6c:25:a4:5f:7e:9b:2b:c9:36:
                    35:5e:6d:16:e0:ae:6f:b7:99:c6:cb:2a:78:1c:a4:
                    08:40:cb:d5:aa:33:78:ce:28:44:29:61:2b:ac:2d:
                    31:ad:76:40:d7:bc:68:87:22:1f:2d:0c:ae:0b:84:
                    d9:d4:6c:10:3e:2f:29:22:33:e4:fe:03:de:e2:55:
                    ab:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6F:63:79:43:3C:D2:E7:D1:74:36:38:2C:E8:11:C9:3D:34:11:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e4d9724f-0cd9-3ad3-bc41-c5965943266f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.239.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:77:15:de:93:04:1a:08:b5:d6:ac:9d:c0:28:c4:13:00:6e:
         e4:e1:56:37:10:3b:cb:b1:4f:6f:d1:d8:aa:91:3c:08:a5:45:
         f1:f5:d2:22:14:19:75:67:b2:16:72:ce:76:fa:8f:e1:ad:18:
         6b:fa:8e:47:3e:ab:52:a2:88:4a:98:8c:8a:f8:48:cd:81:29:
         d2:5e:d7:69:83:cc:6f:36:6b:58:54:c0:7f:c1:53:e3:f7:05:
         df:f5:ff:fe:8a:de:1b:8b:87:68:89:3d:dc:db:e3:e2:d7:9e:
         db:6f:d2:45:6b:cc:d7:1b:d6:8e:72:e3:29:9a:b6:ee:28:c3:
         ae:59:4b:8f:43:6f:55:61:0f:59:6e:b6:bd:19:fe:5d:88:35:
         ab:ed:ba:4b:6b:22:dd:03:01:33:df:93:e6:27:ae:d9:a2:58:
         b3:d0:61:0e:9b:ae:c3:c2:dd:63:78:40:61:ba:59:ac:b1:7f:
         06:d3:b5:90:d1:39:3b:65:a9:1f:5b:e4:44:7a:75:d5:d2:1e:
         3b:ce:53:a1:d5:2c:ff:37:f1:78:9c:e7:8c:7b:13:68:fc:7e:
         c9:cf:90:06:97:d1:4a:7a:c0:d2:b9:1b:9c:a8:18:0d:05:9e:
         f5:54:3e:26:0d:7d:3f:aa:5b:6f:9b:18:9d:8b:b8:48:1b:61:
         6c:eb:da:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----