Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7a5f185c-a767-3123-bcc7-3eb15f78c66d.roa
File:                     7a5f185c-a767-3123-bcc7-3eb15f78c66d.roa (raw, json)
Hash identifier:          JUdwDt9FWRzPmIj2dKbQ4n0+GK5f0cXB8Z97J4LhW/0=
Subject key identifier:   71:97:80:05:B7:55:29:51:5B:9D:64:40:FD:37:A7:38:62:C4:4D:2E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840B62D3F95D490204C33524D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7a5f185c-a767-3123-bcc7-3eb15f78c66d.roa
Signing time:             Thu 26 Jan 2023 12:00:00 +0000
ROA not before:           Thu 26 Jan 2023 12:00:00 +0000
ROA not after:            Fri 03 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        35.152.0.0/13 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b6:2d:3f:95:d4:90:20:4c:33:52:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 26 12:00:00 2023 GMT
            Not After : Mar  3 05:00:00 2023 GMT
        Subject: CN=2b0194cf-97cc-422a-b1c4-143da4e9a3d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:22:bb:0c:f1:5d:59:68:f2:87:8f:a8:f7:46:
                    bd:ca:12:57:7f:d1:c5:46:59:27:6b:fc:57:3d:bf:
                    ba:ee:cd:6a:db:27:14:01:b1:a3:bd:3e:30:1a:6c:
                    e4:74:af:dc:9b:63:12:bb:7a:cb:d3:c3:b9:06:a3:
                    a2:d6:de:bc:5a:53:ce:a1:1c:d3:bc:af:b1:67:e2:
                    e8:c0:d4:14:f5:a0:57:1a:df:e9:7f:c3:7c:12:4a:
                    f0:e2:62:a1:f5:7b:b6:5e:5a:70:65:13:64:3d:bc:
                    89:6c:ab:e1:dc:d8:34:80:da:e1:33:5a:a8:8e:49:
                    34:9e:c8:a5:74:c1:1c:e1:4f:bc:c3:d9:2e:cc:d1:
                    4e:59:4a:d7:57:39:ab:7f:a7:7e:c8:a4:da:82:88:
                    0a:e7:35:70:d9:b0:db:12:af:e2:32:35:a9:72:b2:
                    8d:f4:e8:ce:53:18:e4:0c:8c:70:64:06:f7:6b:f9:
                    98:b1:2e:dc:7a:c4:42:c1:0c:5d:43:e0:23:0c:10:
                    0e:45:81:1e:06:d4:64:25:25:29:90:1a:e1:85:57:
                    78:f9:b2:1c:ac:51:44:29:59:16:e7:e5:a8:90:d7:
                    93:20:43:c1:31:4c:11:ae:0e:d0:df:af:8b:35:11:
                    c3:c6:ab:d6:31:2d:f0:c1:df:04:75:4c:4a:33:cf:
                    32:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:97:80:05:B7:55:29:51:5B:9D:64:40:FD:37:A7:38:62:C4:4D:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7a5f185c-a767-3123-bcc7-3eb15f78c66d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.152.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:4d:d6:7c:84:a3:61:d4:ff:08:d2:ee:75:58:0f:5b:d2:d3:
         f1:71:72:24:7a:5d:87:51:b3:0c:b8:0d:8a:3a:6e:4b:5b:c2:
         7b:30:2d:2c:45:04:5e:a8:08:fc:2d:0d:73:17:dd:8d:01:0f:
         65:d5:3c:98:01:36:08:e4:26:ee:6e:9b:7d:1d:c2:f4:d0:1a:
         c8:e9:fe:6a:7b:cd:dc:ac:4d:b9:d5:ae:26:f7:ae:fe:79:ba:
         91:47:55:3f:44:4d:67:b0:32:0b:54:56:7d:8e:f3:75:67:ae:
         7a:7f:2f:d6:ba:d5:0c:f8:80:ac:08:07:85:d5:4f:af:3f:d1:
         d9:16:b2:21:7b:7d:0d:bf:4f:79:1c:f7:b5:f6:c2:df:37:a4:
         00:cb:e7:40:a0:42:87:7a:8d:13:e5:5d:8d:ad:05:77:e2:96:
         80:a8:f7:d7:b7:ce:e8:3f:7d:80:02:7d:2e:71:b8:fb:ee:c9:
         25:ce:cb:63:ba:e5:69:54:2f:fa:83:f4:75:c7:66:55:ef:31:
         14:44:52:91:af:3e:23:54:5d:18:1c:71:6d:16:63:06:5f:69:
         57:3d:fc:89:7a:97:db:cd:b5:6a:e3:62:19:fd:9d:94:05:a3:
         94:a3:cf:49:dc:6b:79:2f:2e:ef:43:5b:c5:02:99:d0:f6:0d:
         5c:bd:56:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----