Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f030a93c-0710-3fbd-9bec-7bf519209961.roa
File:                     f030a93c-0710-3fbd-9bec-7bf519209961.roa (raw, json)
Hash identifier:          IfZsyXToscVIOsVTYo2/M1JeBVJ4CihzPuvw/CHoEwA=
Subject key identifier:   BB:0D:C8:BF:17:25:34:CF:10:6A:BA:A5:73:99:E2:1D:65:40:BA:53
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840958C878FE20A188BFA31C740
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f030a93c-0710-3fbd-9bec-7bf519209961.roa
Signing time:             Sat 14 Jan 2023 12:00:00 +0000
ROA not before:           Sat 14 Jan 2023 12:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        54.216.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:95:8c:87:8f:e2:0a:18:8b:fa:31:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 14 12:00:00 2023 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=19242b36-3ea7-436c-98b6-a35e2bf189ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:38:f2:e0:46:2a:b1:98:4c:32:4a:7d:dc:df:
                    33:6a:1b:e4:50:3b:38:b3:71:ae:65:3e:77:52:40:
                    6e:47:bc:a6:eb:7e:19:4d:5e:94:a1:9b:f2:35:b1:
                    7a:e5:5c:a9:6f:12:4d:d0:42:91:8b:b8:3a:3f:a3:
                    ed:76:75:8b:8f:2e:94:ff:a5:17:c3:48:b6:64:52:
                    78:71:77:b0:cf:d5:a8:7f:e3:62:fe:af:76:e0:78:
                    66:60:27:0d:1c:df:e9:b9:57:55:71:df:46:3e:35:
                    94:8d:7b:a1:04:6d:88:ca:50:d2:7e:fa:40:33:bf:
                    a8:ff:29:9b:de:3f:60:3a:b4:aa:f5:df:95:57:7c:
                    92:5d:de:2b:a0:0c:84:bd:89:d0:7d:0c:f5:33:2e:
                    42:97:53:99:23:f1:ad:db:b3:68:1e:bc:eb:bc:70:
                    83:af:5c:ea:cd:11:e6:7b:17:11:82:0b:03:a4:ee:
                    90:bb:32:cd:25:6e:41:85:2f:5c:10:98:0f:64:68:
                    3a:c2:4d:08:25:14:18:38:ea:89:87:0f:14:68:11:
                    f0:5b:4b:99:f3:b8:96:e9:3c:81:a0:93:2b:48:ac:
                    7c:db:fc:6b:75:fe:68:a1:c8:cd:13:95:60:5b:d9:
                    12:c9:5e:b8:fc:af:5a:0a:aa:14:98:eb:f0:21:87:
                    89:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0D:C8:BF:17:25:34:CF:10:6A:BA:A5:73:99:E2:1D:65:40:BA:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f030a93c-0710-3fbd-9bec-7bf519209961.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.216.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:b4:d7:12:6e:c5:f6:34:f0:dc:ad:cd:7b:9a:f5:37:81:2b:
         3d:91:a6:ef:a1:79:89:6f:e2:79:3a:9e:37:ac:a3:f0:61:78:
         bb:03:99:81:f1:86:af:62:56:3f:64:08:22:82:4e:77:d2:4d:
         b7:b6:f9:73:b2:27:49:0b:61:30:4d:ca:9b:c9:7d:51:1d:ed:
         c5:c5:b6:45:56:6e:91:da:fe:e9:d0:f5:cc:ad:58:e0:0d:85:
         49:8d:f6:5d:e8:c1:03:04:57:1d:ee:77:76:81:5b:19:90:12:
         76:88:73:8b:ec:5a:46:f7:15:96:55:88:cd:bd:6f:e2:f7:e6:
         be:44:22:0c:ae:ca:95:11:71:87:09:52:66:b7:d3:9e:b4:55:
         86:53:10:f2:96:e3:d8:25:69:4e:93:84:1d:07:34:29:5c:a1:
         0f:05:65:98:dc:7c:de:65:0a:0d:14:cf:7b:99:81:cb:e5:0c:
         fc:df:91:a9:b6:cb:cd:42:21:c0:73:7a:a8:7a:99:62:7d:8f:
         e5:15:20:d2:2d:65:d9:62:62:06:05:10:99:90:45:fe:64:b9:
         55:86:ee:eb:71:fc:b2:89:77:ed:3c:b7:f4:d8:fd:a3:2c:2e:
         6a:c9:49:a1:d1:85:d5:74:f1:71:e4:b2:61:99:a8:94:6a:61:
         57:c2:0a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----