Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a38576b3-6107-38bf-b8ee-33955dcbc33f.roa
File:                     a38576b3-6107-38bf-b8ee-33955dcbc33f.roa (raw, json)
Hash identifier:          ugdfaB82lYt24i+jqRerARUf5zh0r3qpDhxH6GW7ryY=
Subject key identifier:   B1:13:54:F9:53:E1:DF:73:34:5F:41:80:70:D8:47:E8:3E:18:99:CB
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840759E36BB502CCE4D45DD6994
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a38576b3-6107-38bf-b8ee-33955dcbc33f.roa
Signing time:             Tue 03 Jan 2023 12:00:00 +0000
ROA not before:           Tue 03 Jan 2023 12:00:00 +0000
ROA not after:            Wed 08 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        15.182.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:75:9e:36:bb:50:2c:ce:4d:45:dd:69:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan  3 12:00:00 2023 GMT
            Not After : Feb  8 05:00:00 2023 GMT
        Subject: CN=f2fc46ee-bc53-4fdb-9dd8-c3e2c57e2dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8d:0a:7c:cc:fb:14:86:eb:45:95:98:36:55:
                    b4:78:21:bf:3e:3e:28:f4:07:78:5f:94:1e:f6:28:
                    46:d9:ce:57:36:73:4d:e8:d5:f5:87:3e:37:38:42:
                    52:e7:c3:78:23:c0:e5:01:cf:a3:7f:b2:a5:a5:f9:
                    20:46:44:8d:6d:61:44:0d:8a:59:a4:c4:bd:d9:58:
                    a7:2c:f3:1c:4a:1c:30:2d:59:9b:92:ce:3b:7d:fc:
                    e5:2f:07:04:eb:c6:34:6d:da:f3:88:fd:db:f1:9b:
                    c7:c3:db:74:b9:fe:3a:5a:9a:13:a8:58:c3:2f:a8:
                    ed:99:33:9a:e3:f7:96:37:ef:0c:85:32:79:23:0e:
                    db:e0:fa:a3:40:84:34:95:2b:b2:69:f9:59:a2:b1:
                    03:60:ca:5e:5f:e3:9c:4b:fb:f2:89:17:4b:c4:2e:
                    67:1d:3a:16:30:bb:b4:96:65:24:16:2f:41:a8:d5:
                    89:a9:ea:c7:b8:32:97:76:78:7e:82:ee:3f:0b:59:
                    9a:a7:d5:2e:6d:5b:e3:f1:1a:b2:84:55:1c:e4:44:
                    54:dd:b2:df:cd:b5:33:31:3d:31:68:d1:5c:d9:13:
                    cd:c0:6a:e7:f9:7d:72:d9:0e:f7:f7:c5:4c:b5:9f:
                    19:3a:48:f1:72:f0:67:42:ff:69:8b:50:92:84:b8:
                    06:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:13:54:F9:53:E1:DF:73:34:5F:41:80:70:D8:47:E8:3E:18:99:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a38576b3-6107-38bf-b8ee-33955dcbc33f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.182.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:73:ed:2b:8e:86:98:ae:3e:8c:47:0c:1c:cd:9e:43:a1:4f:
         05:28:67:fe:38:89:00:ee:2e:6d:1b:97:de:59:dc:38:e4:da:
         8d:1c:5e:3a:e6:d1:94:13:43:e8:63:3f:21:2a:04:3c:ec:8d:
         2d:d0:b6:00:1d:e9:6b:83:07:2f:b9:98:9f:4e:fe:0a:86:2a:
         73:f2:b3:e6:76:44:eb:5a:87:9d:87:5b:86:a4:05:c6:52:fc:
         a4:76:e2:72:9d:a0:6a:38:33:34:6c:fb:7f:ac:b7:ea:c0:7b:
         94:b6:e9:f1:ee:48:ab:23:20:76:61:eb:15:9e:4c:ef:34:ba:
         c3:de:12:e7:00:9b:7e:59:d9:9b:1f:4e:64:86:b0:b5:01:9f:
         4b:47:4e:85:96:45:20:88:38:97:3a:df:2f:2c:43:d5:fe:76:
         22:e3:f8:ae:96:9d:1e:7f:d8:d4:ef:b9:b0:5a:b1:5c:bf:89:
         49:02:ca:4d:4d:ce:36:a2:13:ce:8b:9b:eb:90:9d:d2:1b:a9:
         4d:80:19:d7:f6:e5:21:4c:7c:80:4e:19:08:31:b9:df:22:8d:
         eb:e3:f4:ab:2e:c2:c6:7a:df:1b:0e:7d:c2:09:a2:a2:0a:54:
         0f:bc:ce:a0:a7:28:3f:cd:52:c3:89:4b:cf:38:23:b7:53:33:
         dd:33:46:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----