Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7cdd5225-6d57-3771-9be0-459624cd6f68.roa
File:                     7cdd5225-6d57-3771-9be0-459624cd6f68.roa (raw, json)
Hash identifier:          /GO5GnatgG4WFRSCaZTr0GrAMilfzaN1YbUge6KEwYY=
Subject key identifier:   BB:6B:3C:B9:D8:C3:DD:FB:65:1A:0E:3C:13:CE:F6:B8:EA:42:AF:8B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858408F53628E2E90FD4C3CC24700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7cdd5225-6d57-3771-9be0-459624cd6f68.roa
Signing time:             Thu 12 Jan 2023 12:00:00 +0000
ROA not before:           Thu 12 Jan 2023 12:00:00 +0000
ROA not after:            Fri 17 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        52.192.0.0/12 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:8f:53:62:8e:2e:90:fd:4c:3c:c2:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 12 12:00:00 2023 GMT
            Not After : Feb 17 05:00:00 2023 GMT
        Subject: CN=e9647af7-f035-400c-9a92-f23c80cf6069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:15:67:d5:e4:1a:28:cf:46:6b:ad:96:21:9a:
                    fc:a2:f9:f6:5b:64:b1:b0:eb:17:a9:cb:e2:d4:56:
                    2f:5c:df:ff:1f:12:07:1f:5c:0e:25:2a:1a:14:eb:
                    30:03:f9:fe:0b:e2:f1:7d:31:d3:32:c9:90:56:61:
                    5f:7b:1a:0e:e5:ed:bf:c4:97:79:dd:95:b7:d2:e4:
                    f5:11:f8:fc:46:b3:28:78:62:26:3a:04:08:e8:ee:
                    ef:3b:39:67:6f:02:06:43:7c:80:88:e8:32:32:71:
                    8c:f3:53:02:67:4b:28:3a:1a:bd:cb:f4:97:b8:07:
                    c5:0e:1a:eb:f1:79:33:5b:49:6e:af:e1:0d:cc:0e:
                    34:aa:3e:4c:1a:5b:ec:f1:40:9c:3c:5b:db:0c:a1:
                    64:6f:ac:b0:48:4a:c6:c7:5f:54:f0:de:30:11:b0:
                    33:a8:ea:1e:e1:cd:92:df:d9:b5:63:70:28:0b:4e:
                    25:7c:6b:d6:af:2b:37:8c:4a:f2:3a:df:4b:24:f5:
                    52:97:45:f5:92:af:ac:b6:8a:97:15:14:79:e5:da:
                    d8:dc:de:90:19:26:7e:fb:64:f7:a4:2e:17:a4:9e:
                    d0:51:3f:7c:c6:d7:38:33:99:2c:5f:4a:fe:b6:a8:
                    04:53:83:b5:4d:5f:d8:27:f9:40:a6:d9:d9:66:c5:
                    9e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6B:3C:B9:D8:C3:DD:FB:65:1A:0E:3C:13:CE:F6:B8:EA:42:AF:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7cdd5225-6d57-3771-9be0-459624cd6f68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.192.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:24:00:c0:ff:36:c2:4b:12:99:28:4b:e5:87:d0:0f:88:ec:
         c3:61:fd:a9:ec:6a:8f:e4:3d:03:68:35:d4:36:68:91:a3:e7:
         5c:35:e8:14:0a:d4:6f:f9:4c:4c:05:6b:dd:14:b3:3c:dd:a8:
         67:4b:35:e0:75:a8:17:8d:37:5e:98:70:3e:6f:93:26:44:3c:
         dc:97:92:22:43:34:b2:96:e2:64:bf:d3:d2:3f:52:91:29:e9:
         8e:d3:c8:3b:4a:52:4d:a3:39:b8:e2:54:77:b4:63:fc:19:dd:
         f2:c3:e4:70:6b:5a:31:e9:75:2d:93:0a:38:f7:79:87:31:3e:
         3d:8b:9a:32:26:1b:35:d4:39:eb:6a:f0:66:88:26:fe:96:95:
         da:4f:f6:20:ac:58:62:83:92:c4:94:09:e0:56:05:4b:4b:e1:
         cd:fc:86:a4:ca:67:5c:ff:0b:82:ad:b9:ba:c3:7e:8b:ec:19:
         b7:ba:d5:1c:d1:e9:8f:01:79:e9:ca:13:1e:6e:00:91:45:43:
         9d:fc:39:dc:03:db:8b:be:dc:6a:3e:80:ac:b4:92:bb:cf:bb:
         c2:61:b6:24:df:15:95:f8:2d:47:63:83:d3:f5:bf:bc:c5:fc:
         69:60:c1:90:21:3d:8f:3d:a8:0a:3c:28:2c:b2:5f:8e:ad:e9:
         3d:c4:f4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----