Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a5f7a82-dc5d-3e73-8cac-ac2555e0400a.roa
File:                     0a5f7a82-dc5d-3e73-8cac-ac2555e0400a.roa (raw, json)
Hash identifier:          1x0S3iPELP7RgFxsn71ZOmO60mUeRDc3Mc2cMhINfU0=
Subject key identifier:   94:0C:0D:FA:F2:BB:4E:AA:8F:C6:E4:54:FF:BF:5A:26:0B:0F:90:6D
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D661DEB5DAFCD015612501D40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a5f7a82-dc5d-3e73-8cac-ac2555e0400a.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        98.20.252.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:1d:eb:5d:af:cd:01:56:12:50:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=019574df-5671-4518-a4b3-3ef82a8a54a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:88:7a:8c:86:56:ca:1d:97:65:30:c4:9c:f4:
                    59:1d:1b:15:b5:2c:fa:28:34:92:de:4b:1c:01:51:
                    f3:51:32:fd:6b:f6:4d:b2:a7:31:b9:f2:5a:52:75:
                    e9:e2:e8:1c:69:37:b9:52:a4:d4:32:b7:01:f6:c4:
                    c3:5b:b9:6e:69:09:26:12:f5:d8:d8:73:7e:94:c7:
                    bb:1d:10:32:1c:91:21:5c:d8:56:34:af:b3:b6:3e:
                    8f:55:bc:c5:c5:f8:83:98:5a:28:7f:60:e1:60:6a:
                    e3:5f:13:08:dd:7e:b2:fa:fc:6b:8f:d5:8b:69:f3:
                    90:4e:3d:a9:b5:c3:a2:d0:6b:50:57:61:2a:b7:76:
                    03:99:3d:0b:0d:a6:37:ee:d0:97:23:f6:b9:4b:16:
                    09:fe:9f:33:72:f8:4c:e8:b8:06:a4:96:3c:50:d5:
                    39:39:5b:85:9e:aa:18:16:e4:3a:ff:79:33:9d:63:
                    35:b0:67:7e:b8:63:ce:9a:56:cd:6e:0e:25:96:89:
                    d5:bb:f2:30:2b:52:96:2b:9e:ec:40:78:e8:c6:7e:
                    26:79:89:3e:ec:ee:73:de:2c:c5:ff:c7:42:7d:a3:
                    0a:c4:7b:d6:e9:bb:1c:8f:4e:e8:6f:08:01:c5:ad:
                    13:e5:29:2b:bc:79:2f:d4:d2:19:4d:13:53:0f:25:
                    a6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0C:0D:FA:F2:BB:4E:AA:8F:C6:E4:54:FF:BF:5A:26:0B:0F:90:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a5f7a82-dc5d-3e73-8cac-ac2555e0400a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.20.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:81:a3:bf:a6:e5:84:7f:c4:c7:0b:c6:35:d4:61:16:13:52:
         ce:dd:7c:b4:e8:e4:b8:ba:e2:f9:e1:53:48:f1:0b:19:44:d2:
         11:03:75:40:3c:63:89:14:b8:5d:da:a6:d8:76:b3:fc:35:14:
         7a:64:ca:fd:a8:f7:5a:2e:80:f1:e0:22:58:25:14:59:53:f1:
         25:99:3d:07:d1:a0:58:56:82:f5:a0:c9:95:ae:47:fe:e5:b8:
         74:73:c4:fc:02:e0:bd:54:60:5e:f8:46:92:9b:df:c8:6b:4c:
         9c:f2:5a:7c:a6:9a:09:8f:ec:2c:28:a7:a2:44:4b:09:54:fc:
         69:cc:f1:83:a9:c6:88:87:70:96:42:24:7b:b1:6d:aa:ea:4d:
         1c:bc:df:1f:20:18:fb:15:65:ed:f5:3e:24:5e:08:4b:eb:73:
         df:62:4d:70:a2:38:3c:7a:66:e7:b8:12:55:93:e5:52:7d:9e:
         1e:44:a8:f4:fe:5c:05:cd:8f:97:bf:67:0f:70:17:cf:ac:33:
         bb:91:fa:93:07:a9:db:df:8a:0d:e1:89:59:8e:5e:6a:f6:45:
         b5:ee:fe:eb:ec:ca:de:73:e8:5a:61:bb:a4:bf:22:78:2b:7e:
         7b:02:5f:10:a0:22:c3:d2:02:47:5f:df:29:d3:84:1b:86:af:
         5b:25:63:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----