Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e943e574-028c-3585-b33d-6675c84541d2.roa
File:                     e943e574-028c-3585-b33d-6675c84541d2.roa (raw, json)
Hash identifier:          rZS8p460NjzifOdnZr/492wtNWd8mM9vTlRbjA5H9nQ=
Subject key identifier:   D0:94:D4:8C:B3:F3:5C:EB:51:A4:2D:81:57:78:CE:26:78:6C:A4:B4
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D57E3E978447902636C8CDA00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e943e574-028c-3585-b33d-6675c84541d2.roa
Signing time:             Thu 24 Mar 2022 04:00:00 +0000
ROA not before:           Thu 24 Mar 2022 04:00:00 +0000
ROA not after:            Thu 16 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        209.156.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:57:e3:e9:78:44:79:02:63:6c:8c:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 24 04:00:00 2022 GMT
            Not After : Mar 16 04:00:00 2028 GMT
        Subject: CN=679e52e3-11fb-4967-bc84-5d264abbd796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:db:f4:8d:68:9e:b2:dc:d8:3b:54:9f:60:fe:
                    87:d4:3d:fa:0f:d1:d9:43:4b:66:22:b1:be:ba:cd:
                    04:0a:43:58:d4:f3:1e:8f:d9:ef:d1:95:6e:2d:05:
                    90:a7:b1:96:c0:8a:47:79:33:81:6e:3e:03:c6:7c:
                    79:f4:cf:22:16:74:06:9a:11:1a:4a:6e:2e:20:b0:
                    f9:5b:f0:88:a4:f9:b9:ed:b8:44:4b:83:0f:86:99:
                    6b:29:07:ef:cc:3b:f4:20:23:f4:a9:7c:51:3e:dd:
                    9d:cb:00:19:9b:99:dc:cc:53:09:32:dd:05:19:63:
                    62:26:ee:13:be:47:dd:c2:78:01:87:18:25:0f:90:
                    32:2c:d1:5c:e5:67:f0:42:6d:64:d4:62:f6:1f:15:
                    bf:49:08:a4:9a:44:f4:f7:0d:ab:d6:56:58:9f:c5:
                    48:7b:2a:fb:12:51:b6:bf:71:81:52:73:ad:69:3f:
                    2f:4a:8f:e5:a8:f3:cb:44:27:33:63:83:e8:5e:29:
                    20:bc:2e:0f:c6:70:63:07:52:7c:04:07:cf:f4:72:
                    c0:22:c4:0c:70:32:0a:12:59:49:b6:95:c5:2b:18:
                    31:71:1b:c2:99:e7:51:6c:67:2f:82:72:52:ee:ef:
                    ad:e8:d5:bb:53:55:03:6d:56:96:cc:8a:81:25:e8:
                    c0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:94:D4:8C:B3:F3:5C:EB:51:A4:2D:81:57:78:CE:26:78:6C:A4:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e943e574-028c-3585-b33d-6675c84541d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.156.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:ea:27:08:01:d8:a3:bc:6b:20:55:68:ae:4c:30:9c:df:c4:
         85:4f:e7:e9:94:5e:6f:a8:54:27:7f:b4:dd:f9:e1:f6:89:a3:
         06:02:b2:fd:24:e7:36:6a:5a:f4:ec:4d:c4:6c:27:35:f4:a3:
         7b:c8:b9:c2:1e:34:08:ba:01:e9:ab:ad:5f:a4:74:a8:1d:b6:
         68:08:11:78:fd:b1:6f:42:43:8e:3c:aa:1d:50:dc:28:c8:a7:
         7e:ce:7f:a1:67:cb:51:d1:a9:b7:46:47:d6:09:e3:44:35:c0:
         6a:76:43:b0:d6:a8:9b:fc:eb:f3:00:d3:30:5a:f6:bb:33:06:
         99:c3:39:6d:f4:bf:98:34:11:ee:51:a9:c2:1b:88:12:48:c6:
         60:e3:b7:71:4d:31:fc:6c:99:3c:f4:ab:61:0a:0c:ed:a4:0c:
         36:64:aa:a0:d7:4a:52:33:08:19:57:d0:d6:50:bc:6e:a1:4d:
         da:54:e7:57:00:46:ae:5f:ab:eb:74:e6:25:c0:9a:fe:c0:7c:
         86:1e:ca:6e:55:e5:7f:17:a7:4b:60:14:d8:1f:e3:ea:f9:cb:
         68:52:fa:56:85:fa:f9:12:fe:71:c9:6c:a6:94:09:be:27:d2:
         fd:db:2e:93:7f:35:3f:16:f2:fa:ea:46:01:44:34:20:65:e6:
         97:cd:eb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----