Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dd3f9f90-baa8-39f4-b08e-f49c3de1ab31.roa
File:                     dd3f9f90-baa8-39f4-b08e-f49c3de1ab31.roa (raw, json)
Hash identifier:          FpLS2S/UsVSPJlaSUohMdlsYj6RPBENebXZW2RIY+2M=
Subject key identifier:   2C:A9:16:C1:14:A5:85:69:D5:7E:87:F0:F7:02:9E:87:EA:57:F1:E1
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584092612F2245410EC730934770
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dd3f9f90-baa8-39f4-b08e-f49c3de1ab31.roa
Signing time:             Fri 13 Jan 2023 12:00:00 +0000
ROA not before:           Fri 13 Jan 2023 12:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        54.144.0.0/12 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:92:61:2f:22:45:41:0e:c7:30:93:47:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 13 12:00:00 2023 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=829e7ebb-ef3c-4f4c-9816-466ef37e24e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:21:f7:72:e4:92:88:98:1c:7d:c9:71:f8:24:
                    e1:f6:a2:30:42:a4:fb:c9:5d:e5:07:35:9c:ca:6a:
                    45:bd:62:aa:1a:98:e1:00:90:83:3d:c6:8e:d3:3b:
                    94:9a:e5:83:66:a8:a3:58:f9:d2:cf:bf:7b:bb:7b:
                    73:d7:9f:e8:2e:db:d5:19:03:95:66:37:fc:23:c5:
                    fc:53:3e:64:e4:a9:ef:ca:72:0f:93:65:fd:1a:e4:
                    8a:b4:9f:bb:06:da:0d:69:e4:f9:7b:62:cb:81:1f:
                    30:88:9f:b5:f6:5d:6b:a5:54:0b:b8:51:ad:c9:f9:
                    10:4a:ed:6c:30:d8:cf:a7:6e:56:4d:d5:e0:2d:8b:
                    c0:61:b4:54:b5:a4:5e:e8:7b:5d:44:e7:87:c8:01:
                    96:15:7d:4d:fb:38:2c:d2:6f:ea:54:7b:06:a9:29:
                    63:25:6d:6f:95:2a:ba:71:66:a2:a5:62:e4:c6:e2:
                    6d:46:e8:1d:f2:6d:54:3f:64:7d:43:fc:d3:85:0c:
                    42:5b:24:22:78:c3:c2:55:3e:12:5e:0c:1b:5a:27:
                    55:16:9f:78:39:2f:d3:7c:ef:1b:f4:a4:af:11:c0:
                    87:3e:90:3f:08:5d:3e:ad:17:28:e9:f3:4c:0f:94:
                    37:ca:19:c5:4a:7d:02:2e:0d:68:e7:c2:19:6d:de:
                    75:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A9:16:C1:14:A5:85:69:D5:7E:87:F0:F7:02:9E:87:EA:57:F1:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dd3f9f90-baa8-39f4-b08e-f49c3de1ab31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.144.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:e9:75:66:df:12:e0:5a:05:d3:40:66:8c:1b:aa:ea:12:3f:
         82:b7:46:b3:eb:1f:7a:45:52:fc:00:51:9f:45:27:09:ab:ee:
         2f:36:1f:15:ab:57:3e:1f:59:6a:9e:87:83:76:4f:ad:53:58:
         d2:eb:d9:0b:2a:b4:44:a2:34:6e:55:eb:78:57:6c:1a:25:76:
         03:ac:af:98:99:b7:3f:c7:de:e7:ae:a0:e1:88:f5:a1:db:08:
         6c:69:b7:ea:79:bd:5c:4a:42:bb:52:31:1b:7b:59:6a:e7:a5:
         e2:e0:e1:f1:05:2f:b2:0a:46:10:c9:65:75:23:ab:72:95:57:
         5c:14:c5:12:80:d2:23:b7:fc:ab:08:18:0f:5e:5c:00:72:7d:
         02:61:aa:e6:c1:10:60:dd:f8:b1:a9:44:48:45:8e:fd:b9:ea:
         c7:78:2a:e7:7e:fe:d3:a8:d8:41:ed:33:83:3d:c6:e0:4c:c1:
         d5:b8:37:65:0c:d4:62:48:71:68:0d:ff:47:b5:1e:8b:ba:29:
         ec:68:2f:17:3a:55:25:d9:42:03:99:97:6a:2f:91:a9:fd:e8:
         c0:75:ad:14:f4:51:e5:e8:89:39:72:50:75:e5:fa:c4:69:a1:
         65:61:1f:5c:e8:f8:59:d5:2b:13:2d:fc:3a:a4:df:8c:07:b5:
         b2:9b:6d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----