Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/24240ec3-5363-39b9-ae6b-7e6a5de6163c.roa
File:                     24240ec3-5363-39b9-ae6b-7e6a5de6163c.roa (raw, json)
Hash identifier:          ijocHbynyPB94nfHDSEQZHL7GyQz6OgsaVdP8K2VEZ8=
Subject key identifier:   92:73:56:32:E4:43:3F:69:56:40:02:93:DE:13:9C:39:B7:FB:09:A5
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584078C9A0F77AA5EDFEDD938200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/24240ec3-5363-39b9-ae6b-7e6a5de6163c.roa
Signing time:             Wed 04 Jan 2023 12:00:00 +0000
ROA not before:           Wed 04 Jan 2023 12:00:00 +0000
ROA not after:            Thu 09 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        15.162.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:78:c9:a0:f7:7a:a5:ed:fe:dd:93:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan  4 12:00:00 2023 GMT
            Not After : Feb  9 05:00:00 2023 GMT
        Subject: CN=3f4a349e-91d4-49c5-89f5-5e8b0eb70320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:71:ce:66:92:0d:c4:b3:15:a7:29:b4:ed:9d:
                    f1:ca:ef:45:c3:dd:bc:06:52:32:e8:97:8a:d0:83:
                    ef:f0:d2:fe:c2:56:f1:49:29:75:0a:9b:6e:c2:bd:
                    ad:e6:8a:4b:c6:47:73:da:9a:91:ba:e2:fd:f7:03:
                    d0:1d:1c:78:a9:31:5c:c3:82:b9:1f:97:bb:99:ac:
                    14:e4:27:45:2e:9f:aa:c0:bb:5b:12:07:98:bf:6e:
                    da:67:02:27:e6:71:fc:39:9b:67:7c:81:04:b1:f4:
                    4f:99:d4:14:e6:56:cb:59:4e:86:d7:11:37:2e:34:
                    56:3a:82:8f:88:01:f5:0f:0c:b7:21:68:4e:e8:f9:
                    ec:7a:18:ad:83:e9:4e:40:78:4b:06:22:ea:05:38:
                    8a:70:34:40:30:b5:f5:8a:92:11:e9:67:83:12:3b:
                    bc:44:5d:1f:d9:3e:f9:46:14:a1:a7:6c:81:46:e1:
                    a9:8f:c9:3a:3e:88:0f:09:2b:6e:07:e1:26:be:34:
                    18:64:60:48:c6:28:e7:a3:99:43:07:c3:28:e5:b3:
                    66:f1:bf:af:86:54:81:42:d4:1e:8b:4a:c7:18:01:
                    25:ee:ea:82:61:f0:25:91:f4:e7:16:f8:f1:c3:4c:
                    63:58:7d:b5:fb:90:75:98:5a:fb:ec:bd:96:6c:bb:
                    a2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:73:56:32:E4:43:3F:69:56:40:02:93:DE:13:9C:39:B7:FB:09:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/24240ec3-5363-39b9-ae6b-7e6a5de6163c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.162.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:02:fb:f4:5c:6e:01:1e:48:1f:32:ae:2f:f5:6d:cd:0b:7e:
         d6:81:55:fd:75:c5:d9:f1:e3:c2:e7:1d:dd:60:f6:d0:2b:1c:
         39:04:99:d7:99:52:d1:49:bc:76:95:a1:f4:49:5f:1f:0c:49:
         99:95:6b:d1:25:ba:7b:10:e3:31:a1:f9:88:f7:75:b6:35:b2:
         23:04:0c:d3:7e:a7:df:63:3f:00:a6:52:a1:87:68:8a:79:88:
         3f:f1:47:56:45:da:38:93:75:e9:29:6e:1b:ba:da:80:3f:b6:
         8c:0d:46:cc:f6:3c:98:04:78:d6:1d:c3:d7:79:79:9a:0e:88:
         1e:df:02:ce:3c:41:cb:ad:28:7e:32:b3:f0:dd:29:e6:61:2f:
         f9:c5:94:b4:e1:6a:4e:25:c5:1a:c3:14:6a:f1:7c:7e:63:30:
         d2:8b:0b:5d:4d:ec:90:6c:4b:3c:f7:4a:18:bf:f3:50:b2:7c:
         ca:fb:ec:fe:9a:05:f8:da:c5:53:51:fe:7a:fd:5e:57:db:22:
         30:59:16:82:b1:db:c5:d3:54:1e:3f:f1:f8:f0:d9:f7:22:44:
         e2:ea:89:05:49:53:37:d3:39:e7:13:58:bd:39:8c:aa:e9:0b:
         f9:4c:80:ec:d0:16:fa:28:2a:e4:71:24:b0:3c:c5:c0:cd:9e:
         50:1b:b3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----