Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0524f73b-7418-34ba-b764-f5873ec0f285.roa
File:                     0524f73b-7418-34ba-b764-f5873ec0f285.roa (raw, json)
Hash identifier:          qBKh+xPRNfF61+KeDs3cLzS9IcGFYi0RqLMA0K/ZAuk=
Subject key identifier:   58:3B:93:D4:88:EE:0F:31:E1:7D:82:0F:6C:48:5E:7C:56:86:A5:87
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840B344CED373F6CB37F4D4E140
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0524f73b-7418-34ba-b764-f5873ec0f285.roa
Signing time:             Wed 25 Jan 2023 12:00:00 +0000
ROA not before:           Wed 25 Jan 2023 12:00:00 +0000
ROA not after:            Thu 02 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        15.190.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b3:44:ce:d3:73:f6:cb:37:f4:d4:e1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 25 12:00:00 2023 GMT
            Not After : Mar  2 05:00:00 2023 GMT
        Subject: CN=f9b040ce-d523-4a2d-8ad3-2b979a4bba0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:55:b2:b5:f0:99:a5:bc:76:c9:03:75:50:97:
                    64:08:9f:b4:e7:09:54:a4:6e:7d:6a:76:77:7b:ac:
                    24:2f:aa:ad:79:28:92:3f:b8:e3:77:48:7c:1b:3d:
                    ef:71:b8:6e:b9:76:42:98:9c:9a:b1:1b:de:9f:c9:
                    f9:27:99:7d:54:aa:8e:30:c0:b6:b7:56:63:c2:15:
                    a8:ff:e5:51:fc:05:80:ef:36:7a:fb:4c:ae:c4:fa:
                    c9:4e:14:56:f4:a7:99:a5:8a:bf:18:f6:7d:d4:fb:
                    9b:14:8f:3f:98:d0:78:76:10:ef:8e:fd:77:45:48:
                    ec:7a:12:b3:79:14:81:a5:0b:ce:79:00:4a:73:a2:
                    99:0c:d3:f5:b8:a8:2a:f8:4a:23:3b:07:14:4d:bc:
                    2d:9f:a2:8e:6e:05:e5:64:80:58:5c:ae:86:b8:6c:
                    48:9e:91:d6:ef:e6:d2:f4:82:af:fd:df:44:10:b5:
                    15:2e:08:e2:b1:28:d6:4a:ad:53:58:7b:4e:06:a6:
                    1e:38:fe:f1:c8:74:54:13:3f:7e:b8:bd:bf:57:0b:
                    63:42:73:f6:cd:7a:16:b2:f1:48:1c:1f:7a:02:95:
                    91:4a:aa:cf:46:2c:b4:9f:67:fc:5d:53:41:01:55:
                    22:4d:bb:5c:fd:46:89:12:f2:39:17:aa:3f:19:ee:
                    cc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3B:93:D4:88:EE:0F:31:E1:7D:82:0F:6C:48:5E:7C:56:86:A5:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0524f73b-7418-34ba-b764-f5873ec0f285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.190.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:0c:e9:31:1b:5f:80:98:d9:95:80:be:2e:40:2b:10:5e:c1:
         bd:59:98:95:1c:b8:b2:af:48:28:7d:16:71:e0:29:93:86:81:
         6d:db:bb:95:7d:ab:50:fc:f7:51:8d:9c:4a:15:71:9f:22:41:
         4b:ad:71:34:ca:96:be:eb:6e:ba:0c:63:20:1f:85:ff:bf:63:
         ed:f9:9d:e0:0e:66:69:15:89:2b:45:c1:5f:43:e1:2e:a0:fd:
         81:f0:f9:46:aa:a5:cd:a3:0e:a8:39:70:ba:9a:d1:11:c4:83:
         3f:28:d5:3d:cd:9d:c3:fc:38:03:90:d8:75:24:48:6e:b8:1b:
         81:c9:79:ef:a3:17:32:c6:92:94:d5:69:49:86:a6:f8:32:a7:
         1f:09:fd:a8:9c:cf:6a:ab:fa:3a:0d:ed:f6:cf:44:a6:73:fb:
         c1:5f:21:73:dc:64:03:f3:68:44:cc:e5:d8:bc:1c:0f:6d:c7:
         40:d2:fb:65:82:cf:6e:cd:3f:7c:54:f9:72:32:93:0b:d5:88:
         04:cb:10:83:ae:e5:e3:75:34:4a:cc:90:a2:33:8a:0f:43:c1:
         20:1b:58:5f:c7:bd:77:e0:31:8a:a7:b5:b9:8f:81:56:13:8c:
         f8:36:b7:7d:a1:55:68:2a:cc:4d:93:51:14:54:ff:35:70:85:
         fe:c7:b5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----