Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ab1e194d-8ac4-3261-8ceb-121d08d63c8c.roa
File:                     ab1e194d-8ac4-3261-8ceb-121d08d63c8c.roa (raw, json)
Hash identifier:          t3UDHxWFrB2ZqmkAb0h2jlG2VH+CBj+FV0t3jh+TC2o=
Subject key identifier:   A5:4A:EF:D0:C6:A1:2F:8E:A2:45:98:6C:8A:85:9E:AC:1B:5F:D1:34
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840B32EA97C780BFBD7EE178A58
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ab1e194d-8ac4-3261-8ceb-121d08d63c8c.roa
Signing time:             Wed 25 Jan 2023 12:00:00 +0000
ROA not before:           Wed 25 Jan 2023 12:00:00 +0000
ROA not after:            Thu 02 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        15.156.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b3:2e:a9:7c:78:0b:fb:d7:ee:17:8a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 25 12:00:00 2023 GMT
            Not After : Mar  2 05:00:00 2023 GMT
        Subject: CN=9edb56ff-99d2-402f-a59f-f0b45446802a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:62:35:be:a9:5f:e0:e3:2c:23:0e:49:21:97:
                    a4:2f:a2:8a:31:bf:83:50:4d:37:65:b1:96:8c:8f:
                    5f:0b:7c:e2:ce:21:e9:32:53:8d:21:bb:a1:0b:5c:
                    3c:bc:07:46:af:04:22:2e:97:b4:49:d0:d9:31:3f:
                    47:e0:5f:38:0d:0a:e7:56:a1:68:cb:87:f7:bb:61:
                    28:9e:57:0a:93:e1:93:36:29:ab:e8:84:01:76:07:
                    b7:31:b6:f2:14:ff:5b:af:db:9c:ea:ed:c3:71:31:
                    72:9b:20:bf:41:b2:60:b0:c0:38:ff:28:6a:87:75:
                    87:f3:71:ce:9b:3b:2f:6c:ec:c1:bd:b9:67:38:90:
                    bd:3b:b9:39:96:7e:ba:06:72:b9:78:05:9c:79:45:
                    b3:39:9c:be:76:c0:eb:f4:9b:a3:d2:d4:84:01:71:
                    cd:40:77:a1:b9:2f:e4:5a:33:f8:8c:56:0f:d3:3e:
                    14:7c:4e:6d:1b:2b:cc:49:16:d7:be:77:ea:18:55:
                    90:9f:67:c1:b2:5a:fd:a9:5d:02:1f:bc:56:6a:fa:
                    8c:10:8c:d0:51:3f:db:97:8f:57:b8:c4:47:f3:cc:
                    68:1d:ed:56:92:c7:d8:94:a5:ac:bb:8a:f7:c1:9d:
                    3c:b5:b9:c6:2b:13:31:aa:28:be:f4:d7:5a:de:aa:
                    8d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4A:EF:D0:C6:A1:2F:8E:A2:45:98:6C:8A:85:9E:AC:1B:5F:D1:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ab1e194d-8ac4-3261-8ceb-121d08d63c8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.156.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:32:7f:a3:4a:13:6f:32:7f:61:f1:fe:cf:7c:c0:c2:3f:48:
         33:99:82:a5:92:f5:9b:6b:45:f5:8d:a6:a8:f7:ff:5a:b0:26:
         cc:23:89:15:2d:c4:8d:05:3f:14:24:91:7a:04:a5:af:0d:a9:
         be:83:f0:0a:67:3c:33:3e:b2:74:95:db:5d:be:4a:4e:b3:c8:
         0b:f5:ed:62:5c:5b:21:ff:7f:82:96:ba:6f:77:d9:4c:50:4a:
         4e:b6:da:aa:6c:07:b2:d5:22:15:58:89:13:7c:33:78:e3:d3:
         46:5d:6e:98:8d:5e:9d:71:f8:07:22:02:84:3b:eb:b9:7d:eb:
         f8:16:70:04:eb:24:53:db:93:7d:fc:2d:c7:23:f3:0d:38:32:
         43:e7:3e:44:31:91:3a:95:39:15:45:a2:38:94:e5:b1:b4:7f:
         8f:6c:ee:0e:30:02:72:d8:0a:a8:78:3b:37:2c:d8:ed:62:d0:
         a4:38:19:58:7a:44:e2:9e:3c:57:c1:ac:26:cd:ce:38:83:7d:
         94:8f:65:6e:50:b9:18:6c:06:e2:67:99:13:f0:9c:31:bf:61:
         01:f6:30:10:13:b7:a2:1e:c7:cc:5a:2c:e1:ab:21:ec:21:29:
         4b:0d:82:c0:85:2a:6b:e2:cc:e8:85:fc:54:19:ba:ee:7a:f0:
         98:66:df:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----