Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f4ae18b4-1436-3761-b0a8-8978f658754a.roa
File:                     f4ae18b4-1436-3761-b0a8-8978f658754a.roa (raw, json)
Hash identifier:          +zOUigb0htgp5DpWP8B66jfEkrQ7rDhzcVpdjCGT57M=
Subject key identifier:   5B:B9:34:9E:C0:7B:E8:90:80:2F:CE:FF:02:14:F4:14:DF:0D:B6:49
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DC93C573A557E3F485DBCFF80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f4ae18b4-1436-3761-b0a8-8978f658754a.roa
Signing time:             Tue 03 May 2022 12:00:00 +0000
ROA not before:           Tue 03 May 2022 12:00:00 +0000
ROA not after:            Wed 08 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        13.52.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c9:3c:57:3a:55:7e:3f:48:5d:bc:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  3 12:00:00 2022 GMT
            Not After : Jun  8 04:00:00 2022 GMT
        Subject: CN=777325fe-ed82-44b8-8fd5-d60370cf5f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a9:f8:12:5c:ca:45:1c:6c:ce:b0:0b:f6:62:
                    de:28:1f:a1:76:6f:65:a0:66:5d:95:6b:a8:6e:4a:
                    89:ae:5a:33:c6:ab:75:b4:92:b0:25:ea:f3:f2:a1:
                    98:81:77:a6:54:57:ee:88:92:91:06:75:7a:31:75:
                    06:a1:da:56:24:17:85:24:6b:55:b7:40:3f:67:36:
                    1c:ef:b2:9c:a3:a1:21:04:b5:09:dc:f1:e8:1e:df:
                    a6:61:c5:f2:08:5e:68:8f:bf:d2:6f:b3:be:58:33:
                    2e:dd:38:24:91:ca:e7:d3:18:a8:00:fc:17:f3:be:
                    67:2f:a0:70:4c:d8:99:b8:0d:d1:9a:e7:15:48:60:
                    5c:2d:71:44:5b:b2:2b:74:df:65:93:97:2a:b4:2c:
                    e0:cc:5b:ec:48:27:00:f6:ad:3d:4d:d4:f6:d8:b0:
                    32:9f:e8:7b:50:e5:8d:53:fb:db:cb:e3:b6:fd:b8:
                    88:cd:07:c1:ac:fc:40:cf:d7:3e:ee:4c:36:09:a8:
                    d6:f4:1e:7a:6a:7f:3b:c4:97:70:86:ec:a9:47:1f:
                    91:1f:90:62:df:39:eb:02:bf:65:d5:95:d8:1f:3a:
                    bb:07:63:bd:10:a8:75:6e:7f:d8:e9:59:ea:5d:13:
                    4c:be:38:16:62:e7:09:87:61:51:f9:79:a8:20:3c:
                    ec:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B9:34:9E:C0:7B:E8:90:80:2F:CE:FF:02:14:F4:14:DF:0D:B6:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f4ae18b4-1436-3761-b0a8-8978f658754a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.52.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:b6:79:e5:85:a9:fe:0d:af:db:99:e2:47:47:98:19:42:43:
         0c:52:53:c2:ae:13:40:45:db:57:ff:d9:d8:be:30:9b:b0:ad:
         6b:7a:85:cf:f3:ed:fe:75:97:55:a7:32:a6:3f:ba:d8:30:d3:
         4b:f6:1a:b2:7a:68:20:a6:b6:cd:7b:e1:27:5c:06:9b:da:16:
         7f:c7:d1:90:3a:66:4d:ac:d1:69:90:c1:5f:4b:d6:22:df:93:
         d2:d9:33:57:a3:41:ff:a9:ee:16:18:90:a4:29:32:96:d0:2a:
         98:46:8d:59:c7:12:69:78:64:4f:17:6d:9e:d0:26:2a:75:f8:
         02:91:9b:47:e6:43:eb:a7:4e:3f:4a:47:9e:6a:66:d3:3d:45:
         df:30:74:38:ac:9e:d0:05:7d:08:8a:a3:29:23:cf:fa:be:5e:
         5e:2f:ff:c0:fb:bf:ee:9c:37:53:ff:5f:0b:0c:a7:9e:5e:bd:
         a0:d7:96:28:20:0d:35:4c:7b:76:a9:0d:0e:1c:34:40:b1:ed:
         b0:96:a4:61:53:c6:2c:b9:ca:b8:d1:a3:67:2a:0c:d6:33:20:
         58:69:4b:f3:3c:e9:ed:00:5a:93:a7:51:6a:32:1a:fe:c1:a8:
         e0:64:be:ce:ca:16:fa:8a:07:61:21:de:b4:cb:aa:a4:d6:68:
         01:56:63:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----