Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/36646f2e-45ea-3b53-a1af-d87d5ee909c9.roa
File:                     36646f2e-45ea-3b53-a1af-d87d5ee909c9.roa (raw, json)
Hash identifier:          pCdItGnzKb7/sQAilPIydrTxkYtfI5WIOq3h/T9DJRE=
Subject key identifier:   89:76:27:CC:61:75:AF:30:35:04:92:E3:E0:84:7C:3F:F0:1D:7C:E1
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858406AD4789E7F1E6C9FBC8DBD00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/36646f2e-45ea-3b53-a1af-d87d5ee909c9.roa
Signing time:             Fri 30 Dec 2022 12:00:00 +0000
ROA not before:           Fri 30 Dec 2022 12:00:00 +0000
ROA not after:            Sat 04 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        34.192.0.0/10 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6a:d4:78:9e:7f:1e:6c:9f:bc:8d:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 30 12:00:00 2022 GMT
            Not After : Feb  4 05:00:00 2023 GMT
        Subject: CN=58d8ba7d-32d6-4d33-b7ac-7e9608e0d4af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4a:cc:46:7a:5a:62:b9:3d:aa:78:b7:1a:08:
                    a4:58:d1:1d:71:1f:fc:ce:e1:15:a9:b7:3d:85:97:
                    32:c9:fa:18:9e:11:47:98:c0:51:ce:a0:4b:8e:75:
                    72:5a:e6:a7:0e:6a:a4:9e:aa:ef:4a:60:bb:bb:eb:
                    49:8d:b0:08:49:c3:67:e9:65:d0:78:48:0e:b8:f7:
                    d7:2c:b1:95:25:7d:5d:e8:74:6d:83:2f:48:2d:7d:
                    90:ae:98:8e:39:48:6c:e0:c7:42:bd:9d:73:2f:ea:
                    11:45:4d:8b:eb:54:fa:bc:b8:9b:12:e1:41:8d:7b:
                    9a:2f:13:14:45:37:41:05:6c:86:e7:43:ec:f1:3b:
                    64:4d:3a:95:1a:50:d5:ee:e0:7b:28:47:cd:e1:cd:
                    b3:1e:ef:47:0e:f7:2f:01:95:de:62:c1:78:13:22:
                    e7:06:d2:e8:e8:6e:83:54:f5:04:11:ec:87:01:29:
                    6f:cf:41:67:c9:af:dd:ee:c3:b1:25:df:75:be:99:
                    95:20:c0:13:a0:0a:17:aa:d0:ce:e9:45:26:7c:ee:
                    70:69:4b:b7:06:41:1c:a4:49:a2:0a:11:25:16:01:
                    14:4e:81:d4:f8:09:7e:f0:a4:86:bb:51:af:71:4d:
                    41:62:cc:93:ac:a1:62:4a:f1:83:d3:92:ce:f4:57:
                    18:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:76:27:CC:61:75:AF:30:35:04:92:E3:E0:84:7C:3F:F0:1D:7C:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/36646f2e-45ea-3b53-a1af-d87d5ee909c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.192.0.0/10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:e1:3b:f4:fe:b7:0c:e5:3b:70:d6:71:d8:2d:08:0b:2e:79:
         fd:ce:74:97:02:ed:fc:51:18:e2:07:12:46:79:dd:ed:ea:cc:
         2d:19:d7:f7:6a:93:4f:51:e6:c6:f9:49:ec:12:55:b4:53:01:
         3e:1a:42:d9:69:79:47:33:91:bc:97:bb:5f:53:12:1c:87:94:
         59:3f:ea:8d:48:22:e6:d7:12:19:ae:e4:ac:d4:42:89:3f:7f:
         fd:72:2e:27:9a:31:c5:27:47:55:fa:1e:cf:df:63:5d:6a:df:
         69:ea:63:38:e4:99:dc:cc:0a:d5:80:54:43:e3:6b:7d:59:90:
         17:a6:8b:c1:7e:63:79:77:c4:b4:59:7b:a7:fc:db:cf:8c:e3:
         f0:68:57:e9:34:95:02:b8:7e:b1:2d:61:7a:a5:9f:9f:56:2a:
         f7:47:d4:e3:44:77:ca:ef:10:56:4e:dd:bb:e1:a3:e4:f6:7c:
         6a:2f:d5:66:dd:e2:0d:52:90:bc:28:ed:73:55:69:ad:70:07:
         a1:af:e1:f4:d9:23:66:ec:02:0d:4b:ea:2a:24:29:c0:35:b8:
         55:54:a0:e5:01:c6:c7:cf:dd:1f:b1:9d:25:23:87:f4:ac:5c:
         31:8c:71:ba:1f:9d:dd:5f:53:4a:48:00:da:75:34:2e:a1:2c:
         e8:6a:dc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----