Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/27c90183-24cf-3d4f-b696-c09768e52cea.roa
File:                     27c90183-24cf-3d4f-b696-c09768e52cea.roa (raw, json)
Hash identifier:          DarBDWr/QXcYjoXXHNvaNthl9ZG6ilac9n/jMucKjm4=
Subject key identifier:   13:98:90:EF:A2:A3:AC:27:C4:D2:4A:DC:36:7E:6D:FA:10:FF:44:01
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840BC41664E6074B0A206826FA0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/27c90183-24cf-3d4f-b696-c09768e52cea.roa
Signing time:             Sat 28 Jan 2023 12:00:00 +0000
ROA not before:           Sat 28 Jan 2023 12:00:00 +0000
ROA not after:            Sun 05 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        35.176.0.0/13 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:bc:41:66:4e:60:74:b0:a2:06:82:6f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 28 12:00:00 2023 GMT
            Not After : Mar  5 05:00:00 2023 GMT
        Subject: CN=d91b385f-783c-481b-87b1-2cdf0dd4c2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d6:f0:73:85:b2:89:58:cf:25:15:ac:02:3f:
                    c1:ba:d1:31:08:ca:ae:c5:2f:44:0f:e5:62:67:b8:
                    90:5a:e9:27:2b:46:c4:4e:80:01:b8:0e:7f:b4:86:
                    ae:12:b1:60:5c:54:47:22:38:fe:e0:de:2f:a2:22:
                    ce:58:35:59:d1:f7:1d:68:f1:00:42:15:a9:de:51:
                    62:68:76:c9:61:66:38:29:d4:0e:93:ba:ed:5c:03:
                    4b:ee:d8:6d:92:bb:37:c8:81:cd:14:b5:33:cc:a2:
                    91:44:f2:92:e2:b1:da:99:1f:d2:99:f3:a7:1f:41:
                    c5:eb:74:cb:77:bf:c6:4d:5c:95:94:ed:46:f6:c1:
                    07:cf:dc:a8:34:eb:a2:f9:f8:0d:fc:fe:40:89:58:
                    76:41:2a:d1:fe:3b:61:08:6e:05:4e:74:09:7f:c2:
                    e9:70:08:97:a4:fd:0d:64:a8:db:b7:b5:f3:46:ea:
                    5b:70:aa:43:bf:58:44:1e:51:ad:00:e4:ef:f4:b7:
                    9b:b7:5e:f8:3f:fe:3e:27:5e:52:3e:18:1d:13:31:
                    c1:91:f2:1f:c0:ab:24:6c:ac:58:f3:66:66:7d:3b:
                    10:7a:e1:d5:35:75:08:43:8f:b4:a8:9b:53:ee:c3:
                    06:5f:ed:7b:a9:0b:d3:1a:09:b0:41:b3:67:63:38:
                    59:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:98:90:EF:A2:A3:AC:27:C4:D2:4A:DC:36:7E:6D:FA:10:FF:44:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/27c90183-24cf-3d4f-b696-c09768e52cea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.176.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:cb:ff:c4:29:a9:d8:bf:13:c3:86:c9:49:f0:00:9b:e1:1a:
         62:07:5c:e4:97:c6:15:3a:11:d1:ff:4d:f5:c2:02:47:08:d2:
         10:81:a0:b9:19:55:44:63:c2:29:0a:2d:bd:e8:18:d3:4b:d3:
         2c:57:d3:3d:62:ad:67:89:e2:e5:1d:ac:3f:86:94:ae:5e:ff:
         ff:fc:e1:3e:d9:6c:f9:9d:f3:ca:44:fd:5f:88:77:d8:76:4e:
         69:68:0c:12:86:7d:74:8d:9f:c2:7f:49:de:cc:73:d0:08:c4:
         f8:12:ba:ce:7f:9f:3f:31:6a:9b:c3:9a:dd:83:ab:a9:bb:74:
         c5:6d:fc:b1:b0:fe:8c:a5:0e:c0:2f:cf:06:8b:4a:3f:ef:b8:
         82:73:3b:d3:90:21:98:1e:7c:26:66:10:0c:b4:c4:dc:9f:65:
         26:c5:12:7e:0a:e8:38:a8:b8:cd:bd:31:07:ed:a6:b9:10:17:
         a0:e0:cc:39:0f:f2:9a:da:56:f2:d4:e5:6a:f2:79:dc:b8:73:
         3c:0c:44:f0:8c:3b:f9:28:3d:cc:7a:0f:71:b3:b6:0b:aa:69:
         86:57:a2:37:88:92:84:df:36:e2:08:b9:cf:e4:18:4b:b4:69:
         2d:e9:f2:11:c6:23:21:62:00:c0:58:ba:54:3b:83:f1:71:66:
         0e:74:06:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----