Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d6a1281-bba4-3b00-b0b5-e3e259b3d18a.roa
File:                     0d6a1281-bba4-3b00-b0b5-e3e259b3d18a.roa (raw, json)
Hash identifier:          RXqXkD4ppT5yZNZDOuNxwz3BjwWHa02WabA1HMDRznI=
Subject key identifier:   1A:68:88:CC:CE:B3:AB:E0:15:67:BB:F6:58:3E:EF:6D:02:C0:05:1E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858408964D4FCC609316296C05080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d6a1281-bba4-3b00-b0b5-e3e259b3d18a.roa
Signing time:             Tue 10 Jan 2023 12:00:00 +0000
ROA not before:           Tue 10 Jan 2023 12:00:00 +0000
ROA not after:            Wed 15 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        161.188.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:89:64:d4:fc:c6:09:31:62:96:c0:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 10 12:00:00 2023 GMT
            Not After : Feb 15 05:00:00 2023 GMT
        Subject: CN=b9d09cc7-64bb-44ba-87b9-66fe224d290c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f9:cf:cb:14:b8:e3:a5:01:1a:86:28:cb:e9:
                    ed:33:99:5a:f2:ca:e8:54:53:fc:b5:82:9d:d4:59:
                    01:09:a7:2e:22:bf:bd:78:46:89:fa:b6:b0:de:10:
                    8a:07:01:f5:1c:23:f2:72:ca:18:b3:de:4b:6d:bf:
                    e2:e8:c2:a3:b6:89:6f:e8:e6:8f:17:c9:35:a6:a8:
                    b9:82:b0:05:00:88:94:43:6e:b4:c7:47:1b:41:0e:
                    f7:20:06:b6:71:d6:fd:51:37:a0:d6:f6:8b:93:60:
                    93:64:47:09:fd:c5:a8:e9:4b:3c:07:bf:46:3a:60:
                    59:9e:a7:5a:96:59:1b:27:df:f1:1a:b6:4a:11:61:
                    1b:17:69:c8:b7:85:1c:b3:ad:fe:e2:ea:82:71:8e:
                    ca:07:b2:27:2c:c8:36:68:09:be:54:93:57:15:b5:
                    12:4a:33:52:4d:f0:a3:23:69:de:c0:ab:be:62:ac:
                    e8:f8:fb:cc:42:11:03:e8:4f:5d:f8:94:23:17:03:
                    a0:26:e7:e6:8f:20:70:78:3c:a7:b9:5c:30:4e:1d:
                    d8:ff:cc:7f:18:2b:ba:a8:b4:27:c1:af:7c:5d:f9:
                    a2:ef:60:57:69:e9:59:1e:2d:81:3b:74:f1:64:7c:
                    51:c8:b1:8d:3b:16:19:92:40:22:61:09:8d:14:9a:
                    85:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:68:88:CC:CE:B3:AB:E0:15:67:BB:F6:58:3E:EF:6D:02:C0:05:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d6a1281-bba4-3b00-b0b5-e3e259b3d18a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.188.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:2f:42:1e:66:39:73:76:e7:e3:5e:93:74:43:98:18:fc:f2:
         e9:dc:ec:ef:a9:a8:17:fd:a5:1c:2e:ce:c9:6c:c2:5e:6f:e5:
         40:6c:9f:95:37:79:b9:a6:72:fc:67:79:8b:b7:76:d7:44:92:
         ca:0e:a1:62:f4:5b:46:3a:32:d9:4e:6c:11:42:2b:d3:df:cd:
         ef:aa:b1:aa:d6:b6:54:89:2b:52:42:fc:d1:93:08:11:e1:09:
         84:a4:e5:45:18:5c:d6:db:b8:5c:8f:d7:16:f2:a4:35:6e:ce:
         20:98:0c:c7:75:95:98:23:db:48:b0:fc:3d:0a:91:10:71:84:
         64:48:93:28:3a:4d:63:b4:53:c4:f3:f0:26:82:af:bb:50:b8:
         e1:5f:05:28:a2:f6:c0:dd:d0:9e:41:73:b0:07:c0:df:ed:46:
         7a:91:9a:87:67:f1:fe:85:5b:55:5d:ce:0e:c7:df:9f:cc:c7:
         2f:be:28:54:9d:d0:8b:d2:b0:b9:b7:8b:25:20:de:9c:b5:e9:
         70:b1:b2:a4:9e:68:c1:0f:8e:38:99:9f:2c:39:4f:95:0b:80:
         17:df:d4:25:30:21:5f:89:3e:83:d8:e5:00:1c:f6:65:23:43:
         6a:2d:ae:9a:48:60:c5:40:de:03:95:10:37:db:3c:a7:37:e4:
         81:68:72:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----