Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a7f7ea0-2aa8-3842-b3c5-d9abc0513d04.roa
File:                     0a7f7ea0-2aa8-3842-b3c5-d9abc0513d04.roa (raw, json)
Hash identifier:          gXX1qodAjpaaJupLtoesUHvt503ZfHdTkP4MnP9syWs=
Subject key identifier:   3E:CE:9A:5B:16:7B:94:23:7F:58:F4:21:DB:9F:57:C2:B2:07:46:D7
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840860CAC70290F0773E475B6E0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a7f7ea0-2aa8-3842-b3c5-d9abc0513d04.roa
Signing time:             Mon 09 Jan 2023 12:00:00 +0000
ROA not before:           Mon 09 Jan 2023 12:00:00 +0000
ROA not after:            Tue 14 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        155.146.64.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:86:0c:ac:70:29:0f:07:73:e4:75:b6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan  9 12:00:00 2023 GMT
            Not After : Feb 14 05:00:00 2023 GMT
        Subject: CN=9b9cad5e-51ae-46f3-b148-65645da4281f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f4:46:e0:b8:13:75:16:6e:e7:52:7d:07:48:
                    ea:1d:0b:58:df:eb:2c:88:cb:e3:f3:d0:a7:5c:d7:
                    39:a2:48:86:91:d9:4e:0f:08:2c:d5:aa:40:db:01:
                    7d:56:75:bb:d5:f0:75:87:5d:1b:52:dc:32:41:d1:
                    d6:39:19:ed:f9:7f:7c:f5:54:fb:3e:56:1d:8b:f7:
                    66:45:ce:27:c5:89:ae:3f:b5:93:e8:4c:ed:8a:e4:
                    1e:41:8f:c1:67:f9:05:d5:0d:a4:e3:06:59:1b:d1:
                    f3:4d:73:39:a7:ae:ba:80:6c:d3:a6:fd:ef:57:bd:
                    80:09:a7:bf:31:02:df:ed:76:c9:ff:2d:1b:63:51:
                    28:98:93:8f:14:6e:15:73:00:7c:17:ea:dd:5b:26:
                    60:1d:d2:71:65:cc:31:79:5c:16:17:17:08:fa:3a:
                    f3:25:a7:c8:3a:06:0b:00:7a:62:c4:96:0d:29:c5:
                    ee:ee:f7:98:63:df:28:24:92:0d:53:92:f6:22:8a:
                    8a:9d:62:3c:7b:ce:ad:c1:d3:95:d4:e9:ee:c7:b2:
                    5a:ac:3d:47:fe:76:48:c8:ce:d0:aa:3d:29:fb:28:
                    a4:53:be:72:a8:ed:1c:32:07:8a:9a:b8:5b:9f:d9:
                    d3:ae:77:fe:70:43:e0:94:5f:89:38:65:44:0e:41:
                    7d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CE:9A:5B:16:7B:94:23:7F:58:F4:21:DB:9F:57:C2:B2:07:46:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a7f7ea0-2aa8-3842-b3c5-d9abc0513d04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:6d:4b:94:54:7a:f3:30:e4:5f:18:3f:84:ad:a6:c3:44:e3:
         e8:42:da:cc:c6:8f:b5:b6:5f:2f:c5:49:32:7d:75:71:f2:a0:
         42:83:f1:54:3d:fe:3b:6f:35:61:0a:2c:e2:16:bc:bb:6e:ee:
         bb:9d:cd:6d:d5:d0:77:39:a8:17:16:34:e6:3f:2f:95:c6:d5:
         dd:01:3a:1d:58:aa:0c:c5:56:45:d8:21:65:90:13:ef:59:f7:
         c5:89:54:f6:9c:3b:20:0e:4d:ae:8d:fe:ab:4d:61:1c:91:d9:
         2e:e6:73:45:47:b8:74:a6:10:10:34:0b:2f:84:e4:8e:eb:66:
         37:b1:cd:ed:58:b7:bc:b7:90:21:8b:83:a5:f2:49:03:9a:bf:
         e7:f0:22:71:0c:24:25:9b:95:24:10:13:28:20:62:04:1b:b0:
         3f:5e:83:d0:06:5f:b6:fa:28:2b:b0:ba:3c:fe:e5:c2:a4:cb:
         d0:e1:9a:68:4f:91:2a:9f:e2:44:dd:c7:8e:32:5f:9d:ad:d4:
         fb:aa:d9:f8:bb:01:f8:bc:50:99:48:b8:3e:b2:bf:ef:06:11:
         3e:8b:70:28:17:0d:cd:19:99:11:01:58:a0:ce:c9:2b:aa:0e:
         3e:55:b1:79:1a:a3:cf:8a:fa:4c:69:54:28:31:da:3c:f5:a1:
         7b:24:10:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----