Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ca9186e0-fd42-33c0-8209-4d958526c24a.roa
File:                     ca9186e0-fd42-33c0-8209-4d958526c24a.roa (raw, json)
Hash identifier:          McgaLhHdfflySIms6kGL52OFOi6tiqJcwezxLjnhWkI=
Subject key identifier:   33:14:9B:71:FE:3A:C4:A8:EF:55:74:24:1D:5B:75:81:1B:7F:AC:93
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840B0375786565E7DE13607DC00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ca9186e0-fd42-33c0-8209-4d958526c24a.roa
Signing time:             Tue 24 Jan 2023 12:00:00 +0000
ROA not before:           Tue 24 Jan 2023 12:00:00 +0000
ROA not after:            Wed 01 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        13.232.0.0/13 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b0:37:57:86:56:5e:7d:e1:36:07:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 24 12:00:00 2023 GMT
            Not After : Mar  1 05:00:00 2023 GMT
        Subject: CN=54c14117-4941-4f29-b31c-a2fc0329c464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:74:1e:50:51:06:51:0b:5b:fe:a0:94:83:c0:
                    3a:ad:c1:d3:ae:19:54:fa:dc:a8:72:af:d7:9e:76:
                    e8:5e:14:73:3e:a6:72:b9:66:51:6f:16:96:c8:db:
                    29:6f:c5:9d:8f:ef:44:8c:1b:b1:98:9b:61:b4:80:
                    91:a2:36:f4:3c:44:05:bc:82:f3:35:55:a2:c5:68:
                    45:34:e2:a8:63:7a:4c:ea:e3:f5:79:e1:08:0b:7e:
                    cf:5b:22:df:4c:9b:eb:92:69:4b:55:81:bd:37:a9:
                    a9:de:68:85:78:13:95:83:d3:76:65:b0:d2:64:11:
                    05:30:73:ba:f7:2d:be:af:aa:16:b7:56:07:25:7d:
                    33:b3:d7:f8:44:92:17:48:02:ee:97:03:f4:fc:c3:
                    94:52:ea:30:f2:36:1b:6b:41:ea:cb:70:75:40:df:
                    9e:0c:70:5e:a5:2b:8b:63:0d:8a:22:11:97:47:b1:
                    0f:80:0a:c8:f8:de:23:3c:eb:9c:fb:dd:bd:1e:61:
                    d3:87:b0:0b:d4:12:17:21:b2:62:ca:04:46:c2:1e:
                    06:2e:35:01:ec:25:d6:e2:2a:6b:15:b0:7b:d3:6f:
                    b8:0a:14:ac:56:5c:cc:25:3d:78:31:0c:a0:0e:a0:
                    b5:35:16:d0:42:f7:d9:54:4a:89:61:4a:52:4f:86:
                    65:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:14:9B:71:FE:3A:C4:A8:EF:55:74:24:1D:5B:75:81:1B:7F:AC:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ca9186e0-fd42-33c0-8209-4d958526c24a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.232.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:69:5a:69:79:c4:6b:6f:6f:93:d6:1a:ef:87:67:20:4b:9f:
         14:f3:5b:7e:f8:20:04:c4:0a:ff:01:98:ab:de:57:8a:ad:e1:
         a7:82:5e:fe:59:58:ce:4d:84:ac:37:cb:ab:93:cf:9d:b0:7f:
         95:a6:60:15:bf:59:df:ba:e2:49:ce:36:7c:4e:e5:9e:6b:52:
         0e:15:6c:ba:a6:06:1d:a4:bb:00:d0:8a:1c:4b:97:8e:26:14:
         84:45:10:02:4c:80:cf:b9:40:8b:3f:64:f8:e2:17:79:30:6b:
         82:06:e0:65:71:38:8e:73:f2:03:ed:f9:a8:6f:d6:a2:a8:58:
         97:7c:9b:d2:7c:94:77:f1:17:f0:b2:77:fa:49:79:3b:f8:d1:
         7a:a6:33:7b:b9:a5:da:9e:f8:68:bd:80:35:34:9a:15:b6:e7:
         ac:d2:83:c0:5f:e4:da:32:45:68:20:81:3e:3b:09:19:9b:5c:
         61:09:da:22:96:7b:c0:14:fd:bf:ec:75:f4:da:90:1a:35:1c:
         26:a2:c4:ec:32:ab:b2:8b:1d:f1:f9:fe:20:48:93:9c:4e:c6:
         56:c3:3a:22:ed:7a:95:b2:ea:67:d7:5f:e9:92:e8:fe:23:1a:
         3a:8d:fb:b3:da:51:f7:b2:61:d1:ae:15:2a:57:33:90:c4:88:
         5e:b2:37:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----