Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/66300286-278b-3bdb-bbc0-9851c53bcd4b.roa
File:                     66300286-278b-3bdb-bbc0-9851c53bcd4b.roa (raw, json)
Hash identifier:          4hdAUysrDl27A9VTPE+zF3dQQByYpQD5nZ2YMkSoTQ8=
Subject key identifier:   E4:C0:98:EF:78:2F:08:ED:E6:E9:BA:B5:EA:19:D6:2E:08:99:B7:62
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840B31F8CCF35327F6AC37D0E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/66300286-278b-3bdb-bbc0-9851c53bcd4b.roa
Signing time:             Wed 25 Jan 2023 12:00:00 +0000
ROA not before:           Wed 25 Jan 2023 12:00:00 +0000
ROA not after:            Thu 02 Mar 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        15.200.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b3:1f:8c:cf:35:32:7f:6a:c3:7d:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 25 12:00:00 2023 GMT
            Not After : Mar  2 05:00:00 2023 GMT
        Subject: CN=8e4dfe1c-14b3-4744-a4e2-d6c4ff982193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:39:1a:fc:8a:b0:ee:19:1d:6b:e3:a3:3e:d9:
                    e2:97:f6:36:8b:a4:68:02:65:04:bc:84:0c:b6:38:
                    89:b4:85:73:49:05:54:3c:7e:3f:d5:c1:f0:a0:a6:
                    0a:43:4d:fd:22:11:6b:87:bc:54:04:0e:93:29:f6:
                    96:8d:63:ad:cf:ee:a6:13:2e:52:d6:5b:81:c6:76:
                    34:8c:13:6b:68:43:93:82:f1:90:47:05:40:52:19:
                    0d:45:98:b4:c4:d3:ec:4a:90:f1:bf:3a:38:7a:72:
                    9a:81:4d:b1:90:7e:24:ee:20:65:e1:4b:28:48:b9:
                    fd:c3:6b:39:bd:75:4f:23:01:1b:f0:eb:5e:f4:66:
                    e9:9a:4d:ea:60:2a:4d:96:82:16:18:dd:32:14:de:
                    49:a4:09:9a:c8:94:dc:88:7f:af:14:4c:bd:66:7e:
                    6e:c9:3d:1a:f7:5b:be:67:bb:4e:04:ad:f4:fc:e3:
                    a7:2b:a6:1a:36:09:15:76:43:ce:98:cd:54:fc:bb:
                    a1:49:09:b0:75:46:4d:cb:71:8a:3f:cc:75:b3:ff:
                    61:b8:66:c4:8c:82:7c:db:15:95:28:08:d6:3c:cd:
                    3d:3b:6b:52:7f:2f:e8:79:8d:b0:6e:1e:e7:35:13:
                    a0:38:ed:d1:4e:02:7e:8d:1d:96:86:6d:c0:6b:e5:
                    09:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C0:98:EF:78:2F:08:ED:E6:E9:BA:B5:EA:19:D6:2E:08:99:B7:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/66300286-278b-3bdb-bbc0-9851c53bcd4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.200.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:0d:e0:a0:2a:f4:ac:87:93:d4:9c:97:96:7e:7d:25:62:85:
         75:73:87:cf:aa:ff:4f:f6:14:4c:c3:f3:fc:7f:0b:07:91:f3:
         64:22:95:f0:53:83:77:4e:03:84:56:20:8e:17:ba:20:dd:e7:
         87:dc:4f:86:71:93:8c:09:cf:45:9d:3b:cb:e3:27:7f:6d:fb:
         40:e9:56:7d:33:84:3b:d9:02:b0:68:45:f5:d5:00:04:cd:5d:
         4d:8c:44:c6:1b:01:69:32:71:f8:a7:c1:b1:33:45:7e:7b:b5:
         38:63:d1:df:29:aa:bb:cc:14:60:1e:aa:0b:d6:91:ad:8d:3f:
         eb:2b:fe:59:06:84:70:9f:98:77:79:59:e4:95:f7:9b:59:e5:
         73:24:bf:42:3e:be:27:80:b5:cb:c1:a7:a5:93:ed:32:be:aa:
         a3:d8:c5:c7:9b:93:fc:09:4d:fb:03:cf:dd:53:de:b2:08:4a:
         fd:6a:94:5e:7d:c2:c2:4e:3c:56:d3:4b:71:1d:50:b4:30:3b:
         3a:7e:dc:89:2d:65:da:7f:cb:4b:05:f9:b8:92:df:1c:58:d5:
         63:92:d8:63:cc:39:c0:f7:5d:b3:cf:67:9b:10:a4:d4:61:a7:
         2e:e2:15:61:cf:fa:0f:0e:d1:62:09:35:69:6e:92:1f:b5:fa:
         2b:ae:29:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----