Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e0edd4ac-bf03-331a-8baf-d5cbec96f234.roa
File:                     e0edd4ac-bf03-331a-8baf-d5cbec96f234.roa (raw, json)
Hash identifier:          kB4E40NN2OAr0ZAR8ifHzal926rbXYE4unL3rT2Z4Hw=
Subject key identifier:   D8:47:48:B8:E2:C5:15:AC:E0:9E:93:9E:22:7F:A3:6B:F7:70:91:32
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858408921B83EDDA1A94D0F15FC00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e0edd4ac-bf03-331a-8baf-d5cbec96f234.roa
Signing time:             Tue 10 Jan 2023 12:00:00 +0000
ROA not before:           Tue 10 Jan 2023 12:00:00 +0000
ROA not after:            Wed 15 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        13.36.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:89:21:b8:3e:dd:a1:a9:4d:0f:15:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 10 12:00:00 2023 GMT
            Not After : Feb 15 05:00:00 2023 GMT
        Subject: CN=0072a230-51b6-411e-9697-cabaca419bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7d:cf:13:1c:b8:c1:15:ce:3e:32:88:66:59:
                    7a:d9:26:d9:53:64:76:d3:1a:a2:73:6b:3b:5c:e6:
                    1a:d4:e6:82:6f:d7:9b:bb:91:02:49:e0:97:4b:4d:
                    a0:de:1b:7f:7c:83:cb:16:1e:2a:80:c3:1f:d4:bf:
                    e4:a7:98:99:ba:e5:99:3a:e1:81:1f:b6:67:95:82:
                    70:61:44:32:de:92:a8:52:f7:ac:73:eb:eb:1c:48:
                    dc:9d:c1:82:01:fd:c0:05:c7:c3:7b:80:95:bf:5d:
                    14:dc:e9:ab:42:a6:9a:fc:b4:6f:49:58:ac:c5:e0:
                    5b:27:7c:d5:8c:a6:1d:52:40:0b:f0:ff:57:26:9d:
                    c5:c3:aa:30:15:e2:ec:fc:c1:b9:c9:c9:13:b1:d0:
                    96:5f:c9:1d:06:fa:0e:cf:5c:71:f4:89:83:9e:d5:
                    04:c9:7b:5f:13:5b:0e:c4:63:8b:c4:29:da:1c:ea:
                    3d:72:e5:8a:44:6b:d6:c4:c2:de:db:3c:df:c9:f0:
                    4c:b8:1f:13:b9:4a:e7:5f:6f:03:7b:61:0f:65:ac:
                    ed:d5:b6:1e:bc:d6:ab:3e:0a:2c:a5:79:fd:6e:b5:
                    1f:70:bd:82:cc:e2:97:c6:10:31:a4:45:ae:4f:1d:
                    9d:80:3e:83:03:f1:a8:8f:4f:d4:78:19:61:1b:cd:
                    fd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:47:48:B8:E2:C5:15:AC:E0:9E:93:9E:22:7F:A3:6B:F7:70:91:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e0edd4ac-bf03-331a-8baf-d5cbec96f234.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.36.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:49:df:74:34:b8:c9:f6:0c:85:e9:02:b2:50:6c:1b:bc:3b:
         4e:d3:d0:8f:3d:3f:32:5e:c2:56:70:1a:81:ba:9a:7c:37:f2:
         1b:74:45:a9:81:76:0a:09:45:05:b2:a8:c9:8f:3e:bc:78:d8:
         47:98:a6:11:46:d2:9e:2f:1e:b4:16:7e:37:f5:d2:cb:db:53:
         48:b1:5b:ed:5a:62:69:81:6c:66:b8:ff:a3:be:8c:93:45:2f:
         9b:50:03:50:e9:a7:bb:3f:52:c1:1b:b2:b2:0f:57:7a:f4:21:
         72:02:de:ce:e3:73:4c:b9:bc:c7:a7:de:98:5f:72:28:a7:32:
         41:8d:67:5c:49:32:3f:9c:1b:2f:a8:8e:5e:a7:b5:f7:e4:53:
         fd:cb:aa:02:c3:f0:5b:b3:43:a6:f1:71:91:fb:97:dd:9f:fd:
         33:cb:5f:a2:68:f8:4b:a5:c7:22:31:b8:5c:2c:04:d7:ab:11:
         7e:72:ac:7a:3b:e5:e7:ba:ba:a8:02:21:c3:e5:99:7f:9f:75:
         a4:74:f7:2f:04:bf:7a:50:cc:d5:9f:b2:cb:ae:27:0f:3c:1a:
         a7:14:a7:1a:2f:0b:4a:0e:19:87:f5:31:10:4e:9d:9a:81:d0:
         23:83:b4:a1:8f:50:74:fc:eb:49:22:b7:0a:28:9c:a7:e5:59:
         6b:1f:bb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----