Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/56b59049-fcf4-3162-9553-397485e595ae.roa
File:                     56b59049-fcf4-3162-9553-397485e595ae.roa (raw, json)
Hash identifier:          Bxvgw4E1Zuitg3reRGM+qkw7aAbSLGHjs6QZHByOPHI=
Subject key identifier:   54:60:96:AD:EF:F1:27:1C:D1:E1:7B:49:C1:03:B0:E3:5E:13:1A:F4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DCFDDB5FD8CF043C861257780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/56b59049-fcf4-3162-9553-397485e595ae.roa
Signing time:             Thu 05 May 2022 12:00:00 +0000
ROA not before:           Thu 05 May 2022 12:00:00 +0000
ROA not after:            Fri 10 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        165.94.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cf:dd:b5:fd:8c:f0:43:c8:61:25:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  5 12:00:00 2022 GMT
            Not After : Jun 10 04:00:00 2022 GMT
        Subject: CN=989551ab-9e13-439e-83ed-6118e3da2134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:60:28:04:08:8e:18:e6:c2:d4:0f:11:a7:71:
                    58:bd:79:82:82:2e:8e:17:56:82:ce:cf:6a:94:12:
                    ac:9a:a4:e9:05:68:06:ce:32:10:17:c7:95:8b:d4:
                    12:3d:2d:2f:4a:47:bf:8e:84:11:35:df:7a:2c:11:
                    d0:e4:07:86:f0:3f:67:29:56:bb:a4:79:6a:bb:b1:
                    8b:17:6d:51:2d:ca:d5:31:c9:26:45:0f:8b:c9:e7:
                    8e:06:65:d3:20:5b:75:bd:0b:5c:70:2c:83:e6:48:
                    89:ab:46:f5:a6:c4:e4:eb:48:bb:17:42:4f:ef:02:
                    96:78:2e:06:d7:25:9c:af:64:35:57:47:63:87:72:
                    67:d1:25:74:ad:0a:78:11:c0:c2:2f:a7:5e:e3:a4:
                    8c:1f:8b:30:0e:80:85:0a:b7:32:59:08:45:af:5d:
                    51:bf:53:87:f3:5f:f6:ab:4c:9f:6c:2a:57:99:2c:
                    c0:b8:dc:9d:b5:60:b5:43:64:22:ed:14:66:6c:72:
                    6c:b9:d4:6b:d7:d1:19:ec:d2:ac:a6:cf:9d:26:24:
                    f2:fe:b4:05:82:29:56:5d:f2:31:4c:45:d0:30:12:
                    17:a4:f6:44:bb:73:11:a1:18:fc:45:f7:63:c8:7f:
                    3f:9f:5c:4f:36:87:17:54:5e:5e:8e:8d:04:c9:1d:
                    8b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:60:96:AD:EF:F1:27:1C:D1:E1:7B:49:C1:03:B0:E3:5E:13:1A:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/56b59049-fcf4-3162-9553-397485e595ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.94.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:7f:0a:fe:89:57:70:10:46:f3:1a:78:0c:ff:13:9f:11:86:
         f5:5d:df:d6:10:13:24:2c:ea:9d:a2:02:d3:09:85:03:9c:50:
         3e:3e:f5:34:43:75:99:99:c2:a4:4d:f2:e3:af:73:ec:d1:8c:
         c2:1e:fc:fa:1b:a8:38:31:61:64:f8:45:b1:1a:ba:e4:47:a6:
         3f:bf:c9:29:69:84:e8:48:f6:68:79:2f:c8:f5:36:81:3a:23:
         45:1e:f9:d6:96:61:04:36:59:18:07:3e:7d:9b:5a:c7:fa:10:
         79:d9:6a:69:03:bd:aa:67:60:fc:63:6c:fa:c9:cc:7f:c4:16:
         a1:82:e4:6c:22:1d:96:93:5b:94:67:ab:a1:2c:ee:2d:d2:e9:
         a8:d1:18:b3:ee:8f:a3:8e:80:17:eb:c0:7e:b1:28:77:73:62:
         20:72:4b:ef:5f:74:4e:ca:fe:06:10:90:9e:e7:e1:7a:b9:ed:
         2f:d4:2d:19:13:89:01:12:73:8d:8e:cc:54:d3:7a:1b:80:c4:
         ad:8e:04:47:d8:91:ce:35:41:88:94:5c:2e:d3:dd:3c:b9:4c:
         30:19:02:da:1d:c8:c7:81:e6:65:53:62:06:43:94:09:9a:1f:
         87:2b:a2:25:8e:f2:44:51:ae:a4:a7:94:d2:86:65:85:98:ec:
         24:b7:c5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----