Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d3523dad-62ba-37c5-af96-e84edc3f12b2.roa
File:                     d3523dad-62ba-37c5-af96-e84edc3f12b2.roa (raw, json)
Hash identifier:          xJNzGO9/PgYLRhOcGunX4D4Pf2I6YSlqUAHYV/Qyb4Y=
Subject key identifier:   17:78:CB:36:12:A7:C9:78:C4:B2:90:04:8F:24:4C:4A:D2:4C:74:0C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858406AD47EBF4ED8C52296880DC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d3523dad-62ba-37c5-af96-e84edc3f12b2.roa
Signing time:             Fri 30 Dec 2022 12:00:00 +0000
ROA not before:           Fri 30 Dec 2022 12:00:00 +0000
ROA not after:            Sat 04 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        34.192.0.0/10 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6a:d4:7e:bf:4e:d8:c5:22:96:88:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 30 12:00:00 2022 GMT
            Not After : Feb  4 05:00:00 2023 GMT
        Subject: CN=afde5d54-134a-4baa-b3ed-4adaf3b110ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:33:db:a5:63:04:8b:10:77:6f:ec:af:e5:7d:
                    80:13:67:7d:a4:f0:d7:1b:64:13:2d:83:a0:21:75:
                    bc:01:5f:80:ed:0a:b9:1d:94:00:7c:59:a5:5b:4c:
                    6e:2f:a1:b6:3b:64:80:18:7a:67:4d:be:32:aa:7c:
                    fb:67:c6:1c:de:13:cd:77:53:53:2c:c7:3d:cc:fa:
                    eb:06:09:46:8a:f2:3a:2e:43:07:93:a7:16:c4:86:
                    40:3d:ab:1f:d7:d9:6f:02:47:2f:68:bc:90:1a:39:
                    19:5e:52:b0:df:e8:32:cc:49:95:3a:24:18:18:6b:
                    0c:71:30:0f:49:ad:e3:db:61:c7:db:54:7c:a7:bf:
                    72:1b:cd:84:d9:76:d8:47:27:9b:38:a9:59:be:6d:
                    67:a3:7c:5e:50:59:f2:6f:b2:d0:c8:d3:9f:48:3e:
                    bf:85:b4:57:80:5e:21:f3:7c:00:57:8c:dd:33:9e:
                    df:86:5c:0d:be:a4:5e:39:3b:74:24:91:a5:25:ac:
                    e8:c4:68:46:e6:e6:67:4e:1e:6d:07:02:ca:71:89:
                    e1:cd:ff:7d:e4:79:85:e1:a2:33:43:68:64:c2:85:
                    0a:9a:29:b9:80:98:d3:71:f4:b2:d1:71:ab:78:f6:
                    76:b2:c1:93:06:7e:dd:2e:c6:7b:1a:e2:e5:4a:9b:
                    6c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:78:CB:36:12:A7:C9:78:C4:B2:90:04:8F:24:4C:4A:D2:4C:74:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d3523dad-62ba-37c5-af96-e84edc3f12b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.192.0.0/10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:cd:77:54:78:5a:61:4a:44:9a:4d:c3:51:c5:3d:74:aa:63:
         66:bf:3e:72:b5:6f:4d:3b:97:91:f9:72:ac:98:1d:75:6e:09:
         e8:ef:00:f5:b3:a7:46:c4:f8:38:de:d5:bf:d1:5e:99:8d:7c:
         0d:37:d5:cd:42:64:86:ec:d3:06:1d:4d:f4:ff:0d:00:9c:4b:
         d0:94:cf:2f:ae:4d:18:b9:7c:0e:1a:80:99:72:a4:2d:6c:65:
         84:6a:30:d4:39:9b:a0:46:4b:b7:32:b9:bf:b9:b4:68:a6:84:
         f0:a2:c5:61:f9:2b:3a:c5:b2:3a:e9:16:97:f4:dc:48:7b:bb:
         f9:d7:6e:6d:ae:96:26:50:d4:eb:fb:18:81:4a:17:56:6d:b8:
         5c:45:71:f5:e6:91:3e:6d:27:89:b3:8a:dd:e6:c2:1c:e1:88:
         13:97:76:92:83:e8:fa:32:0d:2b:50:f2:92:91:35:54:72:9d:
         3b:a7:28:14:7e:55:d8:0a:02:a3:1a:b4:28:54:aa:b2:81:cf:
         58:fe:fb:af:b9:43:78:2b:e5:d6:ce:cb:d2:40:d2:b2:1e:6a:
         f6:a5:ac:76:fd:55:42:a0:db:b4:97:c2:ce:25:89:b5:56:b6:
         8b:93:46:34:2a:5f:c3:bb:b0:41:56:0f:fc:49:49:c8:15:17:
         01:0f:68:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----