Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/826fd1bb-e19b-346a-80b1-cf4e2f0b8e1c.roa
File:                     826fd1bb-e19b-346a-80b1-cf4e2f0b8e1c.roa (raw, json)
Hash identifier:          YXyJKBG2oVSquDYLtBzfZk1wH50albJX2YLSLPecOGg=
Subject key identifier:   81:FA:0E:5D:54:8F:9B:61:58:60:90:89:50:EE:E3:C7:77:A0:32:41
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DD25E2BD0E52D1F2C3D97B720
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/826fd1bb-e19b-346a-80b1-cf4e2f0b8e1c.roa
Signing time:             Fri 06 May 2022 12:00:00 +0000
ROA not before:           Fri 06 May 2022 12:00:00 +0000
ROA not after:            Sat 11 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        54.64.0.0/13 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d2:5e:2b:d0:e5:2d:1f:2c:3d:97:b7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  6 12:00:00 2022 GMT
            Not After : Jun 11 04:00:00 2022 GMT
        Subject: CN=c36be97a-4689-4f4c-9e55-23077d827d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5a:ea:84:8f:59:2a:c6:ff:49:ba:9c:96:af:
                    62:71:5b:82:a2:98:2f:ec:c9:e8:44:d4:97:a6:58:
                    1e:59:3a:3e:da:c3:df:a6:25:99:f3:da:97:d7:60:
                    df:30:ca:43:38:6f:ce:05:2e:41:96:07:2d:30:9c:
                    ec:83:70:cc:ff:0e:d1:d5:b0:16:b2:4c:43:04:94:
                    54:6f:97:92:ba:2d:f1:99:18:04:33:c6:8a:62:42:
                    8d:e2:54:fe:bc:92:f2:c1:34:3f:52:3d:42:27:16:
                    cc:c2:b0:d2:92:af:2d:67:ba:dd:57:d5:58:44:50:
                    12:7b:3c:e9:b1:d2:a7:67:30:2f:61:87:9e:f2:4e:
                    a2:e2:5e:2a:c5:d3:aa:72:3c:55:30:3d:9d:33:31:
                    be:35:d8:14:89:54:94:2c:a5:b9:35:bf:6b:51:a7:
                    a9:58:6a:fd:f8:d2:45:01:af:ad:27:f9:c2:f9:b0:
                    f1:b5:61:01:76:3f:b3:01:4d:fd:68:6e:f4:53:be:
                    52:8c:44:f1:33:8c:66:0e:a4:8e:49:6f:46:42:54:
                    fc:31:12:76:c4:fc:66:9f:96:49:6e:6b:ab:92:99:
                    87:7c:be:77:49:2f:8a:1b:15:68:42:f7:00:70:23:
                    fe:f4:0e:bf:0e:08:cf:96:5c:71:02:56:80:56:73:
                    ed:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FA:0E:5D:54:8F:9B:61:58:60:90:89:50:EE:E3:C7:77:A0:32:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/826fd1bb-e19b-346a-80b1-cf4e2f0b8e1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.64.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c4:c5:04:de:59:fd:14:45:a5:2f:18:55:4e:f8:1d:ef:8d:
         0e:6b:9e:6b:54:2c:bf:90:8f:22:b9:0c:98:cd:1f:03:e9:50:
         9c:a8:32:ee:37:a8:70:6d:5f:ef:1d:04:ce:9c:4d:1f:bc:55:
         b6:5b:b3:e7:d3:3d:5c:ea:7b:38:67:84:a1:c5:d7:38:f0:57:
         bc:27:f6:a9:d3:e8:69:ba:ef:fb:9b:26:61:4c:78:37:53:25:
         4e:23:e7:78:3d:2c:62:17:95:67:8b:89:15:73:a3:39:2a:95:
         64:22:c8:42:78:2e:d0:0a:d3:26:5f:68:11:e8:e4:ac:69:8e:
         c9:4d:44:50:64:d5:8e:42:64:a4:a9:46:c2:6e:f7:cf:10:53:
         f1:2a:db:63:85:89:dd:97:ba:5b:6b:e7:18:60:0a:76:3d:d6:
         a8:98:eb:35:ec:1b:c6:08:2b:47:ec:9d:a8:c0:94:ca:9c:4b:
         aa:de:3f:50:8e:c0:8f:a7:27:32:10:eb:e5:cc:d1:1c:a5:bb:
         d7:9a:65:fa:18:e9:38:7b:9a:a7:dd:3f:58:ea:1b:5e:ea:14:
         22:5b:dc:0f:b1:45:58:bb:d0:fc:37:a3:97:fc:e9:83:9b:24:
         a3:3c:ce:8d:2d:fc:9d:6c:31:9c:d6:5c:58:2e:f5:b1:d4:99:
         d0:51:1c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----