Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/94536d9c-fd73-310f-b7ce-2b1972f5a2f1.roa
File:                     94536d9c-fd73-310f-b7ce-2b1972f5a2f1.roa (raw, json)
Hash identifier:          esLmEF9dhsNBUCiVsU5dRKNwFGsvxBRb9Z9NH+JE1Lc=
Subject key identifier:   8F:5F:87:E9:1A:30:CF:53:92:2F:50:8D:88:9A:9F:0F:2B:50:36:8A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858406475DD79C21C31C2CA7D6640
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/94536d9c-fd73-310f-b7ce-2b1972f5a2f1.roa
Signing time:             Wed 28 Dec 2022 12:00:00 +0000
ROA not before:           Wed 28 Dec 2022 12:00:00 +0000
ROA not after:            Thu 02 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        15.228.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:64:75:dd:79:c2:1c:31:c2:ca:7d:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 28 12:00:00 2022 GMT
            Not After : Feb  2 05:00:00 2023 GMT
        Subject: CN=cbd895b4-e08d-408d-a5e0-18dba1908cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d0:7a:9c:f2:f4:38:09:99:02:8a:03:40:be:
                    b1:1e:13:e4:d5:ef:5c:0e:90:49:d5:3b:b6:64:56:
                    21:c7:72:e3:53:7b:01:f4:17:2f:8f:5a:75:ad:63:
                    d3:d3:bd:f3:b6:dd:2e:07:1c:69:b4:0f:9f:b9:74:
                    e1:3e:86:9c:16:9a:0a:c4:99:d8:e6:f9:bf:16:ac:
                    06:66:17:db:20:c7:29:33:0d:9f:d9:12:68:22:53:
                    e7:9c:b7:04:a4:9a:39:b1:45:3a:22:83:11:9f:2f:
                    91:01:a7:3d:1d:35:a3:93:f0:71:2e:dc:df:73:0b:
                    37:75:53:21:87:40:74:f0:5a:36:8d:77:6c:49:b2:
                    57:10:49:b0:66:c5:dd:01:08:10:7e:be:3a:6a:55:
                    f8:a7:a3:94:a5:d5:cb:1b:ae:dc:aa:bf:ee:ba:cd:
                    b8:18:69:7b:ed:d5:68:3c:56:8a:7d:a3:b1:3b:63:
                    87:ac:bb:ec:79:98:48:2b:e1:f0:12:50:03:30:83:
                    5c:d2:80:61:4a:c8:a5:32:8e:e1:35:6f:0c:54:03:
                    dd:92:d3:e8:cc:37:9d:4f:03:0f:82:51:81:89:ed:
                    17:fc:6c:99:32:a3:78:4b:af:e0:eb:a4:64:9c:e2:
                    d7:39:b2:23:24:16:6f:ac:46:ed:f4:ee:b1:67:2d:
                    67:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5F:87:E9:1A:30:CF:53:92:2F:50:8D:88:9A:9F:0F:2B:50:36:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/94536d9c-fd73-310f-b7ce-2b1972f5a2f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.228.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:01:2d:b8:ba:0d:e1:f0:bf:32:a9:33:8c:70:5a:44:f7:9e:
         2c:ae:fe:f2:ff:40:13:d8:4f:90:c1:10:be:a4:ad:e4:5d:82:
         c3:2c:e4:5a:c7:a9:dd:ef:76:7d:ea:cd:28:6d:de:e1:d2:5e:
         24:65:82:05:ed:09:3f:9c:d9:b6:1d:4d:bd:32:8a:da:72:84:
         20:64:e5:23:fd:ce:a7:dc:6a:82:d5:70:50:69:a6:ae:b2:ee:
         46:42:68:3b:a8:15:c4:29:95:ba:c0:18:2f:16:25:73:51:03:
         f2:3e:dc:e3:2e:5a:0c:b2:68:dd:9a:28:bd:b3:90:75:4a:1b:
         01:44:60:78:e7:e9:b9:a0:5e:e6:18:9a:40:8f:35:9e:29:c5:
         37:a2:ea:5f:29:f1:1c:d4:c8:0f:78:96:b7:57:9f:de:81:e1:
         8d:c5:53:9c:90:98:79:b1:b0:c4:9e:70:f7:99:5a:b5:cd:ed:
         c9:08:d8:62:ec:52:25:80:91:14:14:b6:13:5c:dc:1b:0f:e6:
         08:a0:67:4e:1b:50:55:f6:9f:68:f7:41:b3:1c:f4:0d:c9:06:
         2b:d9:3e:75:05:07:e6:cd:c9:dd:2f:00:0e:71:9e:29:3f:00:
         ac:e8:42:45:60:7c:1a:2a:44:45:e2:b3:37:2c:93:e5:c7:30:
         8d:bd:30:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----