Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b22b4a9d-56ea-32b1-817f-cf29d4e10aa5.roa
File:                     b22b4a9d-56ea-32b1-817f-cf29d4e10aa5.roa (raw, json)
Hash identifier:          jGrF/t9tY62+gk5cNXIOwd5GP9VUkeQyPJgPMXx4+i4=
Subject key identifier:   24:8E:38:29:A9:77:C2:12:98:3C:2C:0A:C3:AF:EC:E7:D1:8D:B3:F8
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858408C4D23C7D0AD13BF681F5D40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b22b4a9d-56ea-32b1-817f-cf29d4e10aa5.roa
Signing time:             Wed 11 Jan 2023 12:00:00 +0000
ROA not before:           Wed 11 Jan 2023 12:00:00 +0000
ROA not after:            Thu 16 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        15.205.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:8c:4d:23:c7:d0:ad:13:bf:68:1f:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 11 12:00:00 2023 GMT
            Not After : Feb 16 05:00:00 2023 GMT
        Subject: CN=06b7e356-ed9e-4000-9e46-546514d414b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:25:0b:fc:c9:d0:99:37:7a:46:53:37:e5:9c:
                    19:39:5c:a5:49:46:69:7c:22:c8:28:4d:b7:11:f2:
                    60:64:9f:bf:39:26:b6:ea:1b:5b:2d:07:84:49:2c:
                    7d:bf:3d:4e:53:06:e9:71:7b:37:25:87:6b:20:89:
                    b2:7a:ae:d5:7b:6c:a3:eb:20:b3:e4:1f:64:4a:42:
                    86:6c:2e:c6:81:07:99:54:5d:32:09:e9:62:5b:89:
                    5d:78:b4:39:42:93:b8:5e:48:6c:9e:ad:7f:60:71:
                    cf:11:4d:79:3e:9d:b1:e5:6a:f6:fc:26:80:28:1e:
                    e8:9b:e6:40:4f:6f:7b:57:73:6e:fe:ad:31:46:1d:
                    2a:40:3c:8e:5f:94:a7:b8:c2:d7:a6:f9:23:fb:73:
                    3f:0f:32:07:08:dd:32:53:74:0e:70:e9:9c:4b:c8:
                    e1:14:0b:96:78:27:ca:bd:f6:08:f8:bc:c3:8b:3d:
                    90:e5:de:31:71:6a:2b:ad:0a:23:a6:36:aa:b8:a4:
                    7b:73:e8:c0:51:32:20:5c:16:7a:27:31:a0:4b:26:
                    3e:15:d6:8e:f6:f5:2f:90:2a:b1:64:15:a4:d2:c9:
                    30:f8:64:05:ae:a6:07:2e:ad:cc:7e:36:fd:ea:cf:
                    40:86:6d:e4:7d:41:98:51:3f:25:35:0f:7e:25:b6:
                    08:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8E:38:29:A9:77:C2:12:98:3C:2C:0A:C3:AF:EC:E7:D1:8D:B3:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b22b4a9d-56ea-32b1-817f-cf29d4e10aa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.205.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:2d:a0:fc:4f:3e:10:80:ad:a7:5f:6c:46:f0:02:ea:a1:8e:
         4f:78:46:2c:bb:8c:a0:10:f5:fb:68:f7:51:1e:34:4d:bb:49:
         22:b0:20:da:b6:b5:f5:ef:d8:98:0f:5a:c6:dc:0a:df:c5:d5:
         34:86:f1:9e:72:a1:44:c2:76:ff:46:f1:d0:57:d7:96:8e:22:
         db:b0:ea:c3:c2:6a:b5:2e:29:84:71:84:97:dd:ce:9a:46:96:
         b6:ae:47:3e:1e:17:f0:2c:bf:0b:f2:2c:5e:b3:c6:96:52:4b:
         c1:41:ae:a1:f1:5a:cb:59:c5:de:d2:53:90:d8:7c:f1:7c:93:
         29:3b:f6:97:86:99:25:90:37:84:6f:b4:52:fd:0a:01:06:17:
         b9:dc:50:31:35:a4:cb:bb:d6:73:f6:e7:58:a2:f8:83:d3:3d:
         eb:39:a8:ad:37:c2:33:c5:9f:86:0b:9e:8a:71:48:84:5e:9c:
         bb:6e:ce:3f:99:73:64:d8:24:60:a2:ae:b1:fc:95:6c:94:cb:
         1a:d9:f3:9f:2f:17:64:57:a0:8f:66:50:56:c5:bc:b6:02:4a:
         04:81:f6:c8:4f:e5:27:e1:c3:91:cb:25:11:65:06:dd:92:80:
         6f:83:a7:5d:0f:7e:61:bd:43:fb:6a:f5:96:81:b0:ca:66:39:
         3d:a8:7d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----