Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f9e7b9a1-b743-3cea-8cd1-f35d9d134453.roa
File:                     f9e7b9a1-b743-3cea-8cd1-f35d9d134453.roa (raw, json)
Hash identifier:          gjPYOly65MyF9EwQUa9ftZlj9doYsFD7lksWTy/FTik=
Subject key identifier:   89:E0:9A:48:D0:E8:E6:59:25:E6:B8:B0:FE:78:2D:A4:F9:96:9E:28
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FA1810FCA2740D81AE615F380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f9e7b9a1-b743-3cea-8cd1-f35d9d134453.roa
Signing time:             Wed 19 Oct 2022 12:00:00 +0000
ROA not before:           Wed 19 Oct 2022 12:00:00 +0000
ROA not after:            Thu 24 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        15.156.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a1:81:0f:ca:27:40:d8:1a:e6:15:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 19 12:00:00 2022 GMT
            Not After : Nov 24 05:00:00 2022 GMT
        Subject: CN=3a493a24-e093-4c43-9146-6244b680c40e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:5e:8a:a2:b2:ea:14:94:6b:ff:17:bd:89:
                    b3:09:a9:98:26:3f:87:45:fc:19:4d:d4:4a:22:77:
                    b5:5c:7d:66:79:5c:9f:b8:75:9a:a2:5b:cc:89:7d:
                    49:7d:0c:18:39:39:f4:d6:cb:c7:c6:c8:98:61:4a:
                    46:8b:9d:34:67:ea:ab:18:79:45:b2:8e:40:0a:d3:
                    0b:02:4c:99:af:5d:b6:09:f3:de:c1:61:14:9a:85:
                    fe:b9:b5:2f:9d:49:a6:b8:c0:60:a0:01:a8:2d:0d:
                    17:4a:05:eb:37:a1:ab:be:46:00:63:15:61:b5:a7:
                    06:35:e0:ec:bb:58:a3:4e:d0:2a:07:36:75:74:2c:
                    5c:1b:35:ea:00:22:cf:b0:51:0f:88:1d:48:19:a5:
                    52:de:8f:6d:8b:0d:2e:bd:ff:86:0e:27:4c:28:1e:
                    86:f0:d9:4d:16:12:89:16:d6:cd:78:cc:d7:d6:05:
                    d1:37:b7:23:c9:62:e7:96:cd:d3:4e:de:8c:62:16:
                    cc:73:83:46:eb:0f:cf:7e:b9:06:2f:a9:b2:36:f1:
                    14:fc:5d:20:e2:20:46:37:01:e9:18:88:f4:99:48:
                    aa:ca:37:1f:a0:0f:c1:15:86:e7:9c:e7:23:6d:94:
                    98:31:1c:25:a8:01:5b:a2:d5:61:38:f2:40:a9:dd:
                    75:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E0:9A:48:D0:E8:E6:59:25:E6:B8:B0:FE:78:2D:A4:F9:96:9E:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f9e7b9a1-b743-3cea-8cd1-f35d9d134453.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.156.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:c2:1c:3a:9f:6d:5b:08:01:59:88:74:f1:8b:e5:1f:d1:48:
         7d:fe:59:eb:a6:b7:c3:51:e0:cf:76:8a:e7:31:d9:75:21:02:
         58:7e:42:ca:53:1d:4d:76:18:b8:55:33:c7:38:a1:cf:83:04:
         07:2d:48:cc:45:ec:01:35:48:ee:ac:7d:ac:b0:70:28:b4:e0:
         6e:39:a1:f2:f3:27:fe:06:02:c1:ae:47:7c:5c:b6:5a:e5:55:
         7d:1d:b9:cb:37:42:a8:8a:cf:5b:19:dc:e5:25:05:87:84:ef:
         df:cf:b9:96:49:88:3c:f0:b5:42:3b:64:25:50:e2:2e:20:70:
         31:2a:7b:1b:80:65:23:bd:a8:f1:6d:4e:19:1a:8e:ec:79:dc:
         21:e3:78:c2:ce:8c:8f:e9:6b:33:66:b7:a5:81:38:27:22:ce:
         47:40:08:11:76:af:2d:8c:5e:ff:63:e3:8a:3a:fe:98:e0:02:
         71:0d:8c:ca:f9:a3:52:2c:95:c0:e0:2b:4c:c1:f5:d7:5c:5b:
         9e:0e:35:f9:75:ee:33:8d:07:47:68:d1:87:70:43:be:f7:52:
         e0:2f:4c:4d:1e:31:ae:88:f3:d2:92:c4:b2:1e:01:2b:89:73:
         eb:3e:2b:20:a9:98:8c:f0:6c:76:59:5c:cb:cf:83:85:c0:b7:
         dc:d3:ca:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----