Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b96622da-e50f-3df2-96a2-f411c36b1873.roa
File:                     b96622da-e50f-3df2-96a2-f411c36b1873.roa (raw, json)
Hash identifier:          uS2sAPmGwO/cC1653nz4/52Er0F5P3bMR561Px8qSS8=
Subject key identifier:   83:AD:0C:BF:06:13:B5:84:1E:4A:70:92:2C:85:E0:35:69:66:91:74
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DA8B1CC33A49BABC584C5FC80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b96622da-e50f-3df2-96a2-f411c36b1873.roa
Signing time:             Thu 21 Apr 2022 12:00:00 +0000
ROA not before:           Thu 21 Apr 2022 12:00:00 +0000
ROA not after:            Fri 27 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        128.181.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a8:b1:cc:33:a4:9b:ab:c5:84:c5:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr 21 12:00:00 2022 GMT
            Not After : May 27 04:00:00 2022 GMT
        Subject: CN=59245035-b956-47d4-9bcb-82e58d951526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:07:00:cd:54:1d:3e:44:76:4e:ac:c8:a8:91:
                    92:d8:c4:d6:9c:14:33:08:e5:eb:de:a5:d6:4f:8d:
                    17:8f:bc:bd:ab:c9:0f:38:db:3f:46:51:07:d7:24:
                    47:4e:f9:c5:4b:32:f1:6a:a1:f2:4e:b9:4f:77:22:
                    d1:9d:10:07:98:0a:59:b8:52:12:ff:83:e9:e5:27:
                    06:a0:8a:0e:64:27:dc:5f:9d:5f:c9:f4:ae:a4:5b:
                    d6:c4:5e:b7:3b:49:e5:7c:f4:bf:e6:1e:1e:25:b5:
                    5b:8d:fb:46:9d:50:bb:11:47:57:d7:9f:65:13:eb:
                    53:ea:bb:f2:ef:88:09:01:38:e2:e9:ca:5d:5e:76:
                    6e:8b:04:d1:59:62:c3:19:a9:b0:89:92:84:ac:60:
                    7f:01:96:40:69:4d:8e:91:4b:9e:cb:e4:d3:ca:8c:
                    24:4b:ed:d9:64:b4:c9:3d:34:0a:12:c9:82:fb:79:
                    c9:22:ac:3f:44:d3:7c:25:af:41:02:ba:b0:07:3e:
                    d0:94:6b:40:ce:67:f1:06:26:cc:6f:a9:a3:c4:dd:
                    59:d1:3a:4e:c1:77:5a:4a:76:e2:62:d2:d5:02:0a:
                    99:60:b3:f0:9f:ce:f0:b6:df:bd:84:dc:a1:e3:08:
                    0f:5c:6f:d6:99:de:37:f9:e9:12:da:e5:46:f7:ff:
                    2a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AD:0C:BF:06:13:B5:84:1E:4A:70:92:2C:85:E0:35:69:66:91:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b96622da-e50f-3df2-96a2-f411c36b1873.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.181.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:c2:10:d1:30:d8:0d:35:bb:13:a2:1f:a7:2e:34:cd:c0:1c:
         86:65:30:59:b1:94:87:b1:49:95:5a:fb:2f:d4:cf:a9:9b:49:
         17:c0:3c:67:06:ab:ba:90:9a:dd:fa:c6:c2:b5:4f:ce:62:7a:
         af:d3:75:bb:f7:4e:28:b2:2b:99:62:28:e4:d4:25:25:e0:a3:
         7c:cb:fd:3c:43:99:66:dc:d7:c1:1a:82:b6:c3:4d:c4:a7:3f:
         42:3e:9e:cd:4f:44:e5:f4:db:2d:bf:28:e8:c9:a3:ae:53:28:
         c5:77:ae:16:fa:a0:d0:13:0f:da:0d:6d:4c:df:1e:6e:bc:df:
         38:59:6b:1f:72:84:d7:85:9b:cd:44:dd:1b:4d:cf:25:bf:5f:
         12:fe:c6:6b:c6:72:db:af:f1:48:55:c1:cd:5e:61:b4:96:4d:
         0c:eb:10:41:05:96:e9:d1:85:db:3b:60:76:56:64:c9:8f:eb:
         ea:6c:29:ef:9b:93:9f:2b:0f:1b:eb:0a:f1:88:6c:80:ba:9d:
         3f:03:9c:cc:47:6f:3a:c2:cb:1b:99:02:ae:f5:1f:6c:08:e7:
         e5:84:7d:f2:81:72:42:c5:a3:bd:6d:ff:97:ac:18:5c:ef:4e:
         10:3d:78:62:0e:ee:36:a5:64:ab:5b:e1:40:2e:0e:74:a8:69:
         ca:1e:f3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----