Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a0c3646b-5543-3bb6-bb1b-0f463a73e739.roa
File:                     a0c3646b-5543-3bb6-bb1b-0f463a73e739.roa (raw, json)
Hash identifier:          E9SprvoSoZJIELmR/FAdMoFAbjksfSw5kbV49dPNcX4=
Subject key identifier:   5C:D7:FE:EC:34:2A:55:05:5A:C5:94:4F:AB:26:9C:77:D1:85:E1:AF
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840922D0124867E12CDC92CF840
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a0c3646b-5543-3bb6-bb1b-0f463a73e739.roa
Signing time:             Fri 13 Jan 2023 12:00:00 +0000
ROA not before:           Fri 13 Jan 2023 12:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        35.72.0.0/13 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:92:2d:01:24:86:7e:12:cd:c9:2c:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 13 12:00:00 2023 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=ca17a6c7-6ede-4105-9cd1-b440baf2e508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8e:f4:c7:ef:8b:45:ab:17:aa:9a:eb:cd:1e:
                    62:f9:34:f5:a7:a2:c0:76:1a:4c:6e:dc:e6:3f:73:
                    d8:41:67:3e:db:de:2a:8d:3c:2e:5e:97:ec:9d:39:
                    3a:05:17:c2:8c:43:c2:e9:91:ed:a5:51:81:a3:f3:
                    dc:4b:3d:6f:1f:26:ff:db:a2:95:27:cc:09:bf:a6:
                    1d:8d:b1:f0:06:99:d2:10:8f:38:1f:69:4b:b2:4b:
                    56:0c:74:1f:b5:01:16:ae:2a:9d:c8:00:41:6c:d6:
                    c8:22:1e:9f:b8:f5:2e:94:5e:06:63:72:c0:4f:38:
                    b5:09:77:7c:26:47:1b:7e:bb:d2:98:db:0d:84:e1:
                    43:3b:85:f1:09:c6:3d:f7:6d:ec:97:93:e5:ea:5b:
                    00:26:43:ce:88:8e:b3:1c:66:f3:ac:52:35:85:d3:
                    19:e8:40:53:55:a1:9d:37:04:62:71:c1:6d:a3:51:
                    4d:c8:97:1c:11:a0:ce:b0:35:36:91:f8:47:ab:12:
                    75:08:e3:ee:bf:14:62:37:87:53:60:a8:57:c9:27:
                    54:dd:a8:1a:88:d7:3c:8d:04:44:01:0e:a4:dd:a0:
                    ac:1e:0f:0b:d0:cf:ea:2f:c5:1f:4d:2f:08:55:12:
                    24:cd:7b:f4:8e:1a:0b:e3:f8:4b:b0:53:db:01:82:
                    e6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D7:FE:EC:34:2A:55:05:5A:C5:94:4F:AB:26:9C:77:D1:85:E1:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a0c3646b-5543-3bb6-bb1b-0f463a73e739.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.72.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:c2:21:a4:a5:07:56:9f:13:1f:b2:f5:64:a3:7a:e8:a3:44:
         69:be:1d:bd:1c:08:4e:08:3d:43:6e:61:9b:f5:c5:ee:ac:ed:
         33:41:e4:a6:0f:7d:bb:06:63:11:e2:9c:38:18:c5:96:8d:90:
         6b:05:3f:24:6f:89:5c:48:57:47:13:cc:88:fc:d3:99:ac:1a:
         0e:6b:9e:3c:1e:90:f6:e4:3b:67:32:ef:ba:37:14:a9:1b:12:
         27:a1:a3:ad:ee:ba:82:bd:96:1f:fa:e8:78:83:f4:30:91:6c:
         c7:2d:40:22:fb:b7:77:7d:c9:a1:2f:5c:7c:22:eb:c1:fc:46:
         86:7f:da:f9:cb:37:91:cb:6b:71:1a:9a:3d:ac:99:02:30:e4:
         8c:7b:af:e6:f5:9e:fc:78:40:a4:35:5a:d2:c9:23:70:3a:bd:
         b3:0d:cc:80:28:94:f6:48:fc:4e:a1:66:db:21:dd:05:1d:9a:
         fe:b1:f4:cd:5a:d3:92:70:95:1d:d3:e0:86:ec:e3:35:98:7d:
         cd:54:f0:cf:8d:94:52:f6:5b:4f:c0:ea:f6:25:51:8b:86:19:
         35:1f:c2:b7:ba:43:6b:89:8f:db:03:12:49:66:92:95:12:92:
         78:fd:bb:d9:69:2b:fb:14:6e:9e:8a:08:7f:72:25:4d:6c:d8:
         6b:58:bf:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----