Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b1035d49-028b-362e-8795-6cf621c2492b.roa
File:                     b1035d49-028b-362e-8795-6cf621c2492b.roa (raw, json)
Hash identifier:          svamfJRP5KnbJJSKv1LnCOdeOSyCrWc6al0PveZEkAU=
Subject key identifier:   D3:75:D2:D3:54:02:C7:35:E5:7E:24:08:09:81:E7:4D:D2:91:CC:0A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858406E67EE6665928393D7268680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b1035d49-028b-362e-8795-6cf621c2492b.roa
Signing time:             Sat 31 Dec 2022 12:00:00 +0000
ROA not before:           Sat 31 Dec 2022 12:00:00 +0000
ROA not after:            Sun 05 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        35.160.0.0/12 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6e:67:ee:66:65:92:83:93:d7:26:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 31 12:00:00 2022 GMT
            Not After : Feb  5 05:00:00 2023 GMT
        Subject: CN=887c7b18-866d-46db-a0c2-1ad63d3b3f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c9:37:a2:a1:c1:0b:d1:68:43:f0:e0:d4:43:
                    25:78:43:4d:6b:9d:9f:38:35:5a:1c:a8:29:0c:bd:
                    33:6c:51:35:2f:ec:0b:30:33:bb:43:43:a8:01:42:
                    a0:bd:ef:8d:de:f7:df:43:41:fe:c4:85:03:6b:78:
                    16:a9:0f:6b:61:e9:c1:7d:62:37:ad:d9:94:86:cf:
                    53:7a:db:de:93:fe:16:0d:4d:a4:1b:bd:bb:70:50:
                    58:25:fd:9e:9c:74:6d:52:5e:33:4f:73:c5:36:1b:
                    55:f8:ee:ef:50:99:d2:53:eb:67:bd:22:17:f5:da:
                    63:c5:51:8e:44:5c:b3:3d:27:a3:64:f6:d2:e7:76:
                    40:c9:73:ba:a5:a9:7d:e4:3d:d0:95:f7:6a:40:5d:
                    81:dd:ef:57:c8:9f:2c:dd:af:bd:f7:28:89:d2:83:
                    71:14:31:e2:ed:02:3e:e2:10:f1:ad:c2:42:2f:c4:
                    a7:8c:d7:66:37:cd:29:4a:79:1f:44:61:6d:da:4b:
                    26:f2:96:81:08:78:6f:65:d0:c2:b6:1f:5c:05:28:
                    99:11:08:e7:63:8f:ff:45:a9:db:58:d9:1e:d5:0f:
                    00:26:dd:4d:33:fe:7c:25:2e:9a:b9:ff:ea:f7:5e:
                    46:33:66:86:c1:ac:05:24:57:49:23:f6:28:d9:0a:
                    5e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:75:D2:D3:54:02:C7:35:E5:7E:24:08:09:81:E7:4D:D2:91:CC:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b1035d49-028b-362e-8795-6cf621c2492b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.160.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:01:72:71:a1:67:56:a5:db:21:09:c1:af:10:27:b9:62:bf:
         dc:6a:0c:c2:ba:91:b6:45:e7:49:76:b3:8b:d1:31:78:b0:02:
         b1:ad:d2:37:ff:7f:ff:86:3a:fe:ca:d8:7c:ed:7d:07:26:63:
         4f:23:43:6a:17:09:d4:7e:ab:10:ba:a6:52:fa:99:2f:d1:8c:
         d8:3d:c9:f6:13:53:e8:58:b1:60:ff:c5:0e:0d:24:c9:b8:68:
         56:ea:76:46:57:ad:47:e0:ed:c9:c9:9e:df:15:7a:68:56:af:
         8e:3b:8f:0b:c2:81:49:b1:53:f3:4d:18:fc:d7:86:f4:80:34:
         2a:a5:7b:62:1c:a9:ea:42:8e:1b:4d:63:12:1a:a4:27:63:cf:
         dd:e2:ad:ad:c5:bf:45:20:ae:15:3c:c5:0f:2a:e6:63:60:ef:
         87:68:9c:48:eb:70:3c:51:86:9e:07:da:86:87:66:31:ef:39:
         f2:21:7e:4e:f2:6e:79:60:04:68:55:ef:66:a3:fa:76:c4:c1:
         ba:44:e2:5e:be:2d:d1:64:ba:e8:17:53:df:f9:9c:20:62:da:
         ec:89:ba:35:7b:6f:49:6e:8a:4c:01:1c:a1:2e:f0:94:90:05:
         c9:1f:b8:92:4a:be:91:e7:e3:5e:42:86:69:72:49:ab:38:e7:
         c1:52:72:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----