Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/973e57b0-7ea5-324f-827e-df46872b1525.roa
File:                     973e57b0-7ea5-324f-827e-df46872b1525.roa (raw, json)
Hash identifier:          yjimBiUJDUEK7u29qBWCyNk0rg2UfbTfGCsRaEDOi8I=
Subject key identifier:   DB:8E:EE:44:64:59:AD:2A:DB:0E:D5:F2:FC:E9:83:C1:91:CA:90:19
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840B9D01632051E48B8F4B09800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/973e57b0-7ea5-324f-827e-df46872b1525.roa
Signing time:             Fri 27 Jan 2023 12:00:00 +0000
ROA not before:           Fri 27 Jan 2023 12:00:00 +0000
ROA not after:            Sat 04 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        52.223.0.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b9:d0:16:32:05:1e:48:b8:f4:b0:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 27 12:00:00 2023 GMT
            Not After : Mar  4 05:00:00 2023 GMT
        Subject: CN=791b90f7-1844-4634-9296-295eba5f8fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:32:1c:7e:f7:79:88:e0:d1:dc:40:56:9b:85:
                    51:41:df:14:ca:e8:a7:db:34:9f:df:ec:8e:c5:52:
                    7f:21:15:74:cd:f0:ce:8b:72:fd:5f:af:11:7b:ed:
                    8b:4b:26:ad:ae:de:6e:8d:a1:ef:e8:41:ec:59:5e:
                    57:83:57:47:06:c9:c6:17:e4:61:9f:40:0d:37:82:
                    4b:7a:ad:7f:5f:fe:50:16:75:d3:43:23:9b:30:07:
                    a5:d3:88:40:03:9f:83:4f:0b:a3:a8:99:e6:7a:53:
                    41:13:c9:f9:83:a4:f6:e7:84:30:71:6b:0c:db:96:
                    60:0e:96:4d:7d:58:97:db:54:9f:7a:3a:8e:db:b9:
                    dc:66:d6:79:da:a4:09:80:d7:04:13:f3:25:6c:1d:
                    d4:c4:cd:da:09:32:f9:73:b1:ea:d4:4c:33:4b:e7:
                    d7:d1:86:f8:93:5d:ce:2d:56:96:22:4d:9f:e8:38:
                    0b:fd:b1:c8:d6:1a:e3:8b:8a:89:62:c7:a1:47:86:
                    af:d6:75:8b:e3:e4:05:c3:1a:5e:58:57:44:ea:fe:
                    64:63:4b:30:89:2d:3e:d4:c0:25:e0:0a:f4:6a:84:
                    fc:72:bb:2e:44:66:06:fc:e0:d6:f1:c1:35:32:c3:
                    5d:42:9a:23:20:c2:a3:3c:c6:66:14:57:ec:91:f2:
                    ee:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8E:EE:44:64:59:AD:2A:DB:0E:D5:F2:FC:E9:83:C1:91:CA:90:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/973e57b0-7ea5-324f-827e-df46872b1525.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.223.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:08:69:1c:d3:2a:4c:99:86:22:ea:e0:7a:a3:21:61:9b:47:
         9a:24:5e:8b:35:69:0b:f7:67:6b:87:70:14:eb:9e:10:f6:68:
         b0:78:8d:47:ce:bc:6e:de:65:bf:81:fb:ab:e4:d1:8c:76:db:
         05:4d:df:4e:d6:ae:fa:5e:2f:a9:64:ba:c0:1f:5b:82:ed:fd:
         20:98:7f:1e:fe:9e:06:b3:e8:c6:c1:7d:91:c1:e6:9a:a4:33:
         90:a4:8b:27:51:43:18:9b:7c:f8:57:ab:99:76:1d:b9:76:29:
         5d:c4:20:f0:29:03:7d:4f:c1:ef:50:e9:33:6a:95:ce:36:49:
         de:87:46:66:e8:66:1e:e9:2d:45:67:0d:d8:c0:4c:33:0c:06:
         6c:ce:06:f4:a9:e5:e9:c0:3d:b8:5c:a8:42:78:a2:aa:65:ad:
         c3:18:bb:e7:b5:49:af:60:55:cf:ad:5e:ec:83:66:69:ab:66:
         be:ce:47:33:e3:80:a7:e8:80:c7:e5:22:9c:bb:c1:cf:6f:55:
         83:4f:a9:6e:64:19:2a:9c:68:84:cd:de:ba:66:51:e8:3e:a8:
         e8:91:26:77:ef:1c:c8:62:30:d0:b0:5a:79:31:9b:b1:a4:a7:
         6b:d5:62:f2:6d:a9:ac:1b:d1:5a:96:b9:31:15:7b:bc:d3:0b:
         17:da:db:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----