Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b863a98e-3183-313b-b1ee-a17f3d4b39f7.roa
File:                     b863a98e-3183-313b-b1ee-a17f3d4b39f7.roa (raw, json)
Hash identifier:          KHvqqMPysJZN+lr7YFSTXsyMV9wuChXkYzgsjAXhomU=
Subject key identifier:   8D:19:88:CE:1E:2D:7B:B6:72:94:F4:16:A0:BC:44:A2:6B:E8:4C:E9
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840928DC5F8618B7EC17F30BC80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b863a98e-3183-313b-b1ee-a17f3d4b39f7.roa
Signing time:             Fri 13 Jan 2023 12:00:00 +0000
ROA not before:           Fri 13 Jan 2023 12:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        52.64.0.0/12 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:92:8d:c5:f8:61:8b:7e:c1:7f:30:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 13 12:00:00 2023 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=ec057dc9-08b3-4e48-8106-39ca711e9d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:75:e4:2f:33:37:17:97:bc:3a:09:36:5d:e7:
                    56:a4:5e:f3:b5:6d:5d:c7:32:51:b1:c2:43:8a:8f:
                    7b:f5:5d:82:0a:26:c0:29:fa:f4:52:46:b6:66:1f:
                    e4:83:d3:5f:de:c9:05:37:54:2e:c3:41:40:39:0c:
                    94:51:24:46:fc:ba:34:74:c6:53:95:fa:34:1f:2b:
                    65:60:95:61:c1:98:6b:01:dc:72:68:c6:0c:8d:4f:
                    db:dd:b9:21:88:cb:0c:ea:38:fe:72:83:4c:a6:49:
                    7f:ac:55:f3:42:64:24:2a:4c:65:23:7c:66:71:61:
                    ce:cd:e1:d6:d2:f8:4a:ce:8d:83:41:5d:5c:18:0f:
                    0a:7f:01:ba:83:cb:b7:5e:9e:54:41:f1:da:38:94:
                    d4:96:fa:c5:7b:45:14:4d:f9:d4:20:d9:de:13:b0:
                    4c:b2:17:20:6f:c2:52:1e:65:5a:d7:c5:e4:65:0a:
                    4c:57:f2:3f:49:a7:f8:7d:10:c8:47:fd:fa:db:ab:
                    89:da:3b:11:b9:0d:90:f4:8a:e7:82:4f:9b:a7:e9:
                    11:80:09:a4:8b:e0:c6:77:47:62:3c:aa:0d:ae:81:
                    9f:e5:ef:e7:20:aa:7c:10:ca:7f:9d:c1:14:23:b5:
                    8b:47:f0:72:ba:63:ef:13:7c:d1:50:90:4c:70:37:
                    a7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:19:88:CE:1E:2D:7B:B6:72:94:F4:16:A0:BC:44:A2:6B:E8:4C:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b863a98e-3183-313b-b1ee-a17f3d4b39f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.64.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:75:5f:bc:9e:12:db:3d:17:5a:fb:5c:92:c1:8a:67:a4:d9:
         ac:3c:4f:0c:fe:6c:d5:c4:19:b4:f8:ce:c3:0c:89:26:83:db:
         c2:2d:6f:83:fb:a2:e7:00:0a:61:f9:5e:4c:a4:b8:90:5e:11:
         fe:92:29:ef:46:ab:b4:3c:4c:a7:ae:f9:ad:3a:83:49:42:49:
         cc:ff:4a:0a:b3:1f:81:bc:b5:af:49:67:31:29:8b:42:1c:3d:
         9b:80:52:fb:d7:d0:89:0c:f6:c3:7a:17:e2:dc:73:26:63:db:
         c6:17:af:db:fc:c0:3d:08:d7:b8:1e:98:74:18:b4:bf:00:32:
         72:0f:c9:7d:57:6d:e7:dd:ea:cb:ad:11:c9:2f:bd:24:aa:d7:
         1f:7d:9a:f1:da:d2:02:b0:a4:8a:02:d0:a3:30:ae:ef:0a:e9:
         93:67:f6:b5:33:03:bf:a0:68:f6:d4:35:96:6a:39:fc:90:de:
         50:8d:d7:f7:8b:59:3e:f6:e8:e2:35:2a:3f:3b:45:4b:08:74:
         71:f8:f9:9c:47:17:4a:5c:4f:55:15:54:29:c8:75:87:41:b0:
         54:09:fd:db:2c:fc:ce:58:0a:b7:eb:48:05:89:57:c0:31:74:
         c9:e3:ac:80:11:71:7d:e5:36:f7:61:9c:bb:3f:1c:7b:71:3c:
         93:94:9a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----