Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd652912-513a-364c-9b46-99793b716d22.roa
File:                     fd652912-513a-364c-9b46-99793b716d22.roa (raw, json)
Hash identifier:          9YtMKYl0MHj4qgDL5rfMJxwiPJ96NYX5qOV8/ezFn58=
Subject key identifier:   36:5F:FB:DB:D8:4F:84:64:F8:03:96:82:20:E1:E3:0B:B0:CC:65:C0
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584003F88F8A4F56008BFF574980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd652912-513a-364c-9b46-99793b716d22.roa
Signing time:             Wed 23 Nov 2022 12:00:00 +0000
ROA not before:           Wed 23 Nov 2022 12:00:00 +0000
ROA not after:            Thu 29 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        15.146.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:03:f8:8f:8a:4f:56:00:8b:ff:57:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 23 12:00:00 2022 GMT
            Not After : Dec 29 05:00:00 2022 GMT
        Subject: CN=9b479081-be43-4f95-9669-acd28db7416c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:47:81:ac:49:6f:21:bf:63:bc:0c:84:9a:30:
                    cb:03:2d:7c:f0:ae:f7:48:2d:ed:15:14:92:87:ba:
                    51:0a:56:70:1c:14:54:a8:db:1e:5c:d3:ae:dd:aa:
                    68:0d:8b:39:a3:b9:66:b9:bf:d5:e3:a7:ac:55:4e:
                    a6:4f:96:fd:1f:b7:fa:29:b8:88:4f:fd:48:12:86:
                    75:85:a4:05:45:0a:c0:f2:8f:dd:d1:d0:d5:69:e9:
                    0b:3f:75:1a:bb:7e:bc:b6:98:25:d1:93:9d:26:78:
                    7e:eb:6d:08:14:0f:88:9f:31:6a:07:cc:bd:1d:c8:
                    f7:1b:8c:ca:2d:ba:43:73:0f:3c:56:aa:77:2b:81:
                    3e:dd:e4:de:b5:55:f6:46:e1:ad:2a:af:e7:89:0f:
                    c7:5a:56:3e:eb:4d:fa:b7:19:6b:26:3b:c7:47:3b:
                    64:d0:ff:7f:7a:73:7d:e4:13:a0:15:4e:3d:e3:22:
                    06:8d:36:0c:4c:cb:ea:a8:94:f9:a5:51:6d:cc:71:
                    8a:f9:33:32:5d:1a:0e:63:f9:12:1a:f7:27:7c:92:
                    c3:11:fa:69:c2:1f:59:20:84:ce:5f:41:29:2b:ba:
                    4d:a7:b9:ad:33:c6:6c:ea:35:65:13:ec:e9:57:d9:
                    ac:a8:3b:00:84:f4:38:cb:8b:da:db:7f:3b:72:e7:
                    dd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5F:FB:DB:D8:4F:84:64:F8:03:96:82:20:E1:E3:0B:B0:CC:65:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd652912-513a-364c-9b46-99793b716d22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.146.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:44:6c:0c:e5:c9:3e:b6:bd:d5:4e:b7:e9:51:39:28:b8:e5:
         9d:96:f6:c0:1e:4d:70:93:6c:b1:6f:69:5d:78:db:93:00:ca:
         32:81:40:06:39:e4:91:c4:41:91:24:c3:9c:f1:ae:18:af:e4:
         00:4b:a5:76:31:ab:cc:9e:f8:4b:f7:56:a4:20:f7:fc:1f:f9:
         d6:9d:3a:38:8a:21:15:cc:7d:7a:8f:f0:e5:5f:78:ee:c9:ea:
         a9:b7:98:35:62:19:f3:09:fc:40:e5:02:b6:47:70:3c:0e:b5:
         fe:1a:39:11:ac:13:cc:ac:e7:2e:e3:11:4b:8a:5f:59:22:f6:
         1f:5a:89:4b:aa:a4:9a:74:87:dd:e5:4d:e6:05:76:b8:f3:bf:
         75:97:7a:1d:ad:15:56:11:1e:5f:35:56:bc:51:9b:aa:b3:8c:
         f5:fc:d3:d1:23:62:78:9f:41:25:84:24:ed:51:80:45:26:0a:
         3d:a7:1f:54:2d:77:c2:49:3e:74:01:08:91:87:0a:38:e2:ce:
         c0:e7:c5:24:89:5f:f3:ed:ea:2b:ff:1e:12:23:ae:99:ea:5c:
         32:61:8a:46:db:a0:12:dc:11:71:17:fd:5d:54:7f:ec:7e:11:
         b3:94:59:f8:8d:67:a8:ca:94:40:8f:c1:35:91:44:0a:7a:57:
         a1:87:8e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----