Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/07472772-b867-3b11-86e0-ff0ad479fe84.roa
File:                     07472772-b867-3b11-86e0-ff0ad479fe84.roa (raw, json)
Hash identifier:          UFbh01xIo+rG/rJ8vGXalWfW/GAgdpkA79aVZCinElA=
Subject key identifier:   60:69:82:D9:BF:39:61:9E:3A:FD:96:80:10:14:54:FB:AD:24:CA:F8
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DD442248C9381DC28DDDFE630
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/07472772-b867-3b11-86e0-ff0ad479fe84.roa
Signing time:             Sat 07 May 2022 12:00:00 +0000
ROA not before:           Sat 07 May 2022 12:00:00 +0000
ROA not after:            Sun 12 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.41.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d4:42:24:8c:93:81:dc:28:dd:df:e6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  7 12:00:00 2022 GMT
            Not After : Jun 12 04:00:00 2022 GMT
        Subject: CN=c6eb050a-ff4d-464a-8de4-3f4e44d8510e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ee:a7:51:03:24:1d:c5:da:aa:35:56:a4:0a:
                    b3:10:b4:b4:19:a6:48:a3:de:cc:af:61:0b:56:ef:
                    e0:46:b3:f4:8b:63:ca:aa:25:a1:a8:63:14:2b:bb:
                    53:5c:63:fd:1a:d7:66:80:d3:43:6a:89:27:39:d4:
                    68:6e:ca:de:92:a2:be:a1:08:65:d7:f7:32:47:c0:
                    9f:4a:10:75:46:c9:a3:d0:51:50:f3:e0:81:7f:0e:
                    ca:dc:3e:c6:6e:6e:50:0f:29:cf:3f:c1:c1:40:4b:
                    94:ae:11:c4:ce:48:34:c2:78:dc:a8:19:f2:a0:31:
                    e0:b6:f5:77:0f:88:f8:9d:44:e1:de:95:ce:13:ae:
                    60:7d:9a:6a:cc:8e:21:ad:36:74:34:93:f6:31:84:
                    88:06:0a:56:85:ac:47:c7:e5:62:64:e1:32:28:c2:
                    09:3f:3b:29:07:a9:22:4c:e6:10:80:e4:40:59:f2:
                    38:d6:04:c6:05:2f:de:a4:1e:e4:4f:f3:9a:2c:2b:
                    a0:a5:51:3b:84:20:15:89:7b:67:df:62:59:6b:19:
                    6b:91:61:93:05:a2:73:89:24:76:34:b4:45:5a:ba:
                    1a:bd:a2:97:17:12:9b:01:28:6e:7d:e4:a4:49:07:
                    de:20:3c:65:0b:36:a8:dc:7d:03:c9:0f:41:62:4e:
                    5e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:69:82:D9:BF:39:61:9E:3A:FD:96:80:10:14:54:FB:AD:24:CA:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/07472772-b867-3b11-86e0-ff0ad479fe84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.41.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:51:a6:63:6e:49:2a:54:5d:ff:41:37:0f:7f:f5:24:37:90:
         38:93:09:e0:17:1b:8f:af:7b:ac:d7:bb:2c:17:78:e7:f3:af:
         e0:2e:e6:f1:ee:32:97:2b:62:32:06:97:0f:0d:bd:49:4d:f3:
         8f:a7:15:57:75:42:bd:cd:20:63:09:72:28:31:89:e7:ef:99:
         41:0d:bb:fd:ab:92:6e:00:a7:69:aa:36:75:9b:bf:90:fe:65:
         92:3d:e1:8e:53:f9:9e:28:eb:c0:72:ca:51:f7:da:ba:72:ba:
         e7:d9:33:f8:26:ed:00:71:d5:83:5d:84:7a:c5:f3:00:7a:5a:
         0e:e0:a9:da:eb:34:f1:79:5a:5d:c3:9c:3e:ce:53:12:21:e6:
         eb:07:6f:f0:94:f9:e1:6d:c8:87:13:eb:c6:2f:22:68:fc:09:
         58:69:c1:64:50:4e:56:b1:67:c9:ca:9d:a9:6e:87:55:45:38:
         3d:a6:14:3d:ab:bc:46:8b:a0:7a:f0:e6:2f:fb:12:63:f0:8e:
         36:b6:c2:00:7d:f9:d3:55:24:b8:15:f7:66:d4:bf:6d:fa:78:
         95:2f:0e:0d:d5:c2:c0:f3:c5:d6:13:d6:7d:98:ba:4d:05:16:
         af:f8:e8:36:d6:d3:9a:99:a6:6e:44:fe:bd:6d:fb:4e:d4:2f:
         68:8b:58:44
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3UQiSMk4HcKN3f5jAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUwNzEyMDAwMFoXDTIyMDYxMjA0MDAwMFowLzEtMCsGA1UEAxMk
YzZlYjA1MGEtZmY0ZC00NjRhLThkZTQtM2Y0ZTQ0ZDg1MTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3e6nUQMkHcXaqjVWpAqzELS0GaZIo97Mr2EL
Vu/gRrP0i2PKqiWhqGMUK7tTXGP9GtdmgNNDaoknOdRobsrekqK+oQhl1/cyR8Cf
ShB1Rsmj0FFQ8+CBfw7K3D7Gbm5QDynPP8HBQEuUrhHEzkg0wnjcqBnyoDHgtvV3
D4j4nUTh3pXOE65gfZpqzI4hrTZ0NJP2MYSIBgpWhaxHx+ViZOEyKMIJPzspB6ki
TOYQgORAWfI41gTGBS/epB7kT/OaLCugpVE7hCAViXtn32JZaxlrkWGTBaJziSR2
NLRFWroavaKXFxKbAShufeSkSQfeIDxlCzao3H0DyQ9BYk5egQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGBpgtm/OWGeOv2WgBAUVPutJMr4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMDc0NzI3NzItYjg2Ny0z
YjExLTg2ZTAtZmYwYWQ0NzlmZTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEikwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAA1GmY25JKlRd/0E3D3/1JDeQOJMJ4Bcbj697rNe7LBd45/Ov4C7m8e4y
lytiMgaXDw29SU3zj6cVV3VCvc0gYwlyKDGJ5++ZQQ27/auSbgCnaao2dZu/kP5l
kj3hjlP5nijrwHLKUffaunK659kz+CbtAHHVg12EesXzAHpaDuCp2us08XlaXcOc
Ps5TEiHm6wdv8JT54W3IhxPrxi8iaPwJWGnBZFBOVrFnycqdqW6HVUU4PaYUPau8
RougevDmL/sSY/CONrbCAH3501UkuBX3ZtS/bfp4lS8ODdXCwPPF1hPWfZi6TQUW
r/joNtbTmpmmbkT+vW37TtQvaItYRA==
-----END CERTIFICATE-----