Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2e471082-f072-3c9a-8d20-bda136733cf1.roa
File:                     2e471082-f072-3c9a-8d20-bda136733cf1.roa (raw, json)
Hash identifier:          HeWl4j68KI2BM1d8VoosSFkFF18PJ8a1tUYxFukSl4Y=
Subject key identifier:   CE:E4:D3:6C:36:56:BB:2D:1A:00:B6:E7:6E:82:CE:08:33:C1:0C:5C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584064A2B730FE0B12B42D58FDE0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2e471082-f072-3c9a-8d20-bda136733cf1.roa
Signing time:             Wed 28 Dec 2022 12:00:00 +0000
ROA not before:           Wed 28 Dec 2022 12:00:00 +0000
ROA not after:            Thu 02 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        15.191.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:64:a2:b7:30:fe:0b:12:b4:2d:58:fd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 28 12:00:00 2022 GMT
            Not After : Feb  2 05:00:00 2023 GMT
        Subject: CN=737cf879-820c-4bc8-af90-30b3956f3e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cd:ae:ea:0c:87:d2:60:af:72:92:bf:2a:20:
                    1b:31:53:14:ec:49:63:3c:b2:8a:5d:d8:fa:e6:1d:
                    74:8e:10:34:c8:ad:da:6a:7a:3f:b0:a3:89:fa:ba:
                    20:f4:65:7c:82:ea:b4:31:20:af:d6:5b:92:8f:e4:
                    30:8e:88:4a:86:4a:ee:20:54:3a:fc:0c:69:e1:28:
                    06:0a:05:a7:ec:04:ae:7e:ca:a3:70:19:76:22:91:
                    54:01:c2:30:57:4a:7b:6f:de:52:db:84:c7:4c:86:
                    98:e0:b6:79:1c:4f:47:f9:be:2e:53:6e:c6:e5:f2:
                    07:02:e2:41:a9:ef:7f:66:1d:2c:bd:a6:96:a8:1d:
                    bb:53:6a:7a:b0:e0:26:1c:7a:fa:5c:d7:33:7f:21:
                    1b:66:fa:de:20:97:65:2a:7d:ea:97:b0:ab:42:4b:
                    e9:bc:35:34:b3:a0:c1:8e:e9:f0:23:97:48:8e:0f:
                    28:92:02:d6:ad:8d:5f:75:b9:cb:59:9e:ff:14:fc:
                    9d:09:27:c7:24:14:c5:a6:77:d8:e9:3f:7f:6d:cf:
                    a7:72:58:a7:fc:d7:71:2a:05:64:68:8a:66:37:ce:
                    74:c2:37:9e:61:a6:ca:ff:0e:e5:b2:bb:bb:87:59:
                    a4:07:bd:7d:36:65:cb:5f:9b:a4:98:53:ee:b9:9b:
                    dd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E4:D3:6C:36:56:BB:2D:1A:00:B6:E7:6E:82:CE:08:33:C1:0C:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2e471082-f072-3c9a-8d20-bda136733cf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.191.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:f7:88:c6:57:74:8b:57:c4:6e:4b:bc:01:82:c9:ee:07:ff:
         b4:69:00:91:30:71:1b:9b:9e:ff:91:db:f8:89:04:65:9c:fe:
         67:b1:b5:1c:eb:f2:07:13:99:d6:d5:17:bd:3b:d7:21:04:65:
         54:6d:b5:a1:05:7c:26:50:bf:b0:df:72:b0:f2:a9:5a:de:eb:
         0c:2a:eb:55:ec:ca:aa:f3:73:34:91:b4:6a:db:d7:f9:a4:b4:
         b2:d4:0f:a0:73:9a:8d:4b:b8:4a:d8:3c:e1:a8:17:99:e1:e1:
         41:0a:29:0e:8d:37:6e:d1:3f:3b:e3:be:25:06:48:21:b9:26:
         f2:1f:73:5f:c2:6e:f2:d7:17:f0:f7:25:4f:d6:5a:08:7f:c6:
         5d:94:a1:35:ce:84:6f:66:f5:23:ae:19:10:b3:70:9c:a2:34:
         df:98:b5:db:72:11:ea:a6:df:43:3b:ea:03:a8:a3:65:d1:f4:
         54:40:8c:82:26:59:7c:db:b3:bc:c3:9e:db:73:80:b0:ee:16:
         2b:9b:1c:c6:4c:e2:7f:f3:63:e3:64:d3:06:32:93:7e:0a:9d:
         01:53:ec:ec:02:2d:1e:22:69:9c:2f:52:2a:8d:06:10:a4:3c:
         31:ea:68:c0:57:65:90:c8:45:5d:ed:86:56:50:a2:ed:96:8e:
         f7:d4:60:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----