Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b70144d0-c509-34f2-b374-5e598bfbd2b4.roa
File:                     b70144d0-c509-34f2-b374-5e598bfbd2b4.roa (raw, json)
Hash identifier:          /VeKuMT2tjLgfn+FI0yBTuTT749L11ImPetq4CuT7BE=
Subject key identifier:   03:9B:24:C7:40:58:81:7C:2E:FF:6E:4F:3E:0D:D9:13:D1:83:01:33
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DA8F51652CD66810B768E0500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b70144d0-c509-34f2-b374-5e598bfbd2b4.roa
Signing time:             Thu 21 Apr 2022 12:00:00 +0000
ROA not before:           Thu 21 Apr 2022 12:00:00 +0000
ROA not after:            Fri 27 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        140.145.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a8:f5:16:52:cd:66:81:0b:76:8e:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr 21 12:00:00 2022 GMT
            Not After : May 27 04:00:00 2022 GMT
        Subject: CN=4e38959f-07ee-4261-a7fa-b5b91c166aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:79:2d:e0:0e:f6:14:42:e3:e1:35:5b:81:6a:
                    b8:ba:5a:0c:15:b2:87:bf:f8:30:28:99:72:8f:ed:
                    79:3e:e1:be:b2:e9:59:67:1d:3e:0f:a3:41:d4:13:
                    2d:0f:81:7b:62:a6:b7:e4:41:77:a2:ab:16:6e:06:
                    92:e0:5e:8b:64:65:0f:b7:d7:04:e7:1d:5d:0b:63:
                    93:c0:24:71:0d:14:69:30:eb:75:bd:06:83:16:46:
                    ea:97:d1:8e:d6:c1:7f:70:ba:54:71:e0:8a:8f:5c:
                    f6:13:c8:eb:30:ca:85:c6:5a:5f:a5:d9:37:25:07:
                    0e:8d:94:e9:3e:24:a3:3f:2a:bc:f3:3b:4d:62:68:
                    cf:96:b8:fc:a4:34:8d:d5:e3:2a:f7:7c:36:9f:16:
                    4d:dc:5e:03:f8:92:44:08:47:e6:dc:ac:eb:7f:67:
                    56:8e:ab:d8:88:5a:29:6f:86:ad:ba:12:13:0c:9b:
                    2a:00:de:4b:5f:19:e9:17:69:ea:91:16:10:c9:9f:
                    50:4a:31:8d:6c:e0:67:22:29:91:f9:59:69:80:41:
                    8a:97:0e:65:ae:48:98:d7:44:19:1e:48:9e:dd:07:
                    e4:46:dd:d5:f1:ff:d8:89:e5:5d:4c:1f:7c:b0:7a:
                    75:ce:98:56:a1:d9:67:b1:45:ee:af:61:9f:f7:20:
                    13:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9B:24:C7:40:58:81:7C:2E:FF:6E:4F:3E:0D:D9:13:D1:83:01:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b70144d0-c509-34f2-b374-5e598bfbd2b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.145.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:b9:3c:53:9b:bf:35:2e:40:60:01:30:83:6b:58:46:6c:7a:
         0c:9e:2f:ab:e6:27:bf:f5:67:dc:0b:c2:ef:de:93:c7:0c:33:
         d4:54:6e:ab:6a:bd:c8:a3:92:a3:e0:0c:bd:5b:96:c6:5b:12:
         1b:62:a4:b1:1a:f7:64:a2:1c:79:82:b1:e9:a8:14:9b:54:8b:
         7b:55:ac:18:2e:b8:51:6d:82:9e:fb:b1:36:c6:55:56:d7:5d:
         8f:c7:c2:ee:5b:a3:33:58:4d:50:36:47:50:81:14:1a:9a:72:
         e3:f6:5a:38:7f:5b:c9:77:d0:ea:f7:5b:d4:74:c8:1e:30:29:
         26:2a:0e:8b:ad:e1:43:cb:1e:60:c8:07:de:4c:88:54:9c:fe:
         af:70:5e:a2:9e:6a:9d:00:46:6f:dc:a5:59:bc:47:fc:44:27:
         2a:0d:e8:ee:91:e3:21:e2:d7:2e:ac:d7:02:ca:30:3b:9a:9d:
         41:34:34:28:ec:84:b8:2a:b2:a1:c8:04:f4:73:e4:d0:8e:5a:
         e8:9a:42:70:78:62:0b:5e:3d:f1:7c:5e:a8:41:ba:46:0a:04:
         87:c6:84:a8:8e:8f:36:7d:cf:fb:3b:10:e9:b9:18:04:3a:26:
         72:7c:b1:a6:2c:23:70:75:20:d0:66:b9:9b:a9:b8:0e:a5:0b:
         12:93:77:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----