Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a9387a4-4dcb-351b-bf34-a01653aec017.roa
File:                     0a9387a4-4dcb-351b-bf34-a01653aec017.roa (raw, json)
Hash identifier:          FIWluR7SE+aMsAlLPnp8iuED4+TF19JHk4G8QXGUPSY=
Subject key identifier:   0E:F5:AC:81:CD:0A:D3:8E:5F:90:C9:E9:C8:A2:03:30:9F:AC:FC:50
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840B5DB840069D0530F62EF9C40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a9387a4-4dcb-351b-bf34-a01653aec017.roa
Signing time:             Thu 26 Jan 2023 12:00:00 +0000
ROA not before:           Thu 26 Jan 2023 12:00:00 +0000
ROA not after:            Fri 03 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        18.229.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b5:db:84:00:69:d0:53:0f:62:ef:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 26 12:00:00 2023 GMT
            Not After : Mar  3 05:00:00 2023 GMT
        Subject: CN=f2784e9c-cbf9-4ea7-9211-c004af857a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bf:c3:a0:1c:96:c8:3d:9b:83:0e:1b:dd:ae:
                    51:63:c2:38:fd:78:58:a9:72:59:42:8d:35:24:4a:
                    c6:9a:7a:cc:5f:8a:43:22:94:a4:35:82:7f:ed:68:
                    2f:41:1f:1c:41:91:ed:d1:37:8b:22:46:7d:7a:f1:
                    2e:9d:89:3e:45:6a:b5:44:b4:0e:fc:71:58:d3:72:
                    14:d0:17:77:22:a0:38:ce:e7:11:56:9e:47:35:f5:
                    bf:61:06:37:d3:6e:da:99:f8:e0:bd:e4:9b:bd:8b:
                    ac:9d:22:3a:64:c0:51:31:6d:12:36:38:98:24:4b:
                    f3:03:25:38:87:3f:03:24:54:b5:85:46:77:ed:e8:
                    d5:fc:3b:69:65:1d:2c:92:d6:93:19:3d:40:d3:10:
                    17:2f:14:d0:9b:4e:dc:60:58:6e:66:6f:74:eb:24:
                    b2:f2:44:cc:e1:a6:67:56:b0:9c:3e:21:22:99:76:
                    ae:a2:df:12:64:1f:eb:ee:b4:ca:16:23:26:ed:f3:
                    29:6c:2c:8b:2e:06:08:f0:52:d1:86:28:d1:89:78:
                    df:56:60:22:ed:1f:ae:82:31:23:58:8f:5f:63:8f:
                    68:b1:de:b6:52:8f:51:e1:cf:83:94:b4:ed:31:7a:
                    36:54:2b:68:a2:90:16:d9:fa:7d:79:1e:56:5a:81:
                    f3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F5:AC:81:CD:0A:D3:8E:5F:90:C9:E9:C8:A2:03:30:9F:AC:FC:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a9387a4-4dcb-351b-bf34-a01653aec017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.229.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:f5:8b:8a:2a:e8:79:b0:c8:a0:fd:dd:d9:ea:bf:1c:33:47:
         fb:8e:aa:4b:1c:75:0f:0b:a7:d9:8b:7d:71:d2:14:41:f5:26:
         10:76:c1:76:f1:cc:c1:14:e1:4c:a4:6e:90:59:db:6d:d8:67:
         08:ec:5f:ca:bb:ba:9c:64:93:a0:52:8f:51:26:85:4d:60:34:
         95:df:0b:5c:a3:24:af:6a:14:cf:32:05:57:ac:28:53:bd:56:
         50:78:f8:3c:f4:24:ec:3a:5d:5f:1f:bb:5e:93:42:13:8d:2d:
         87:a0:bb:bc:88:70:02:3a:ad:1a:b0:66:31:3c:d1:91:b4:15:
         72:ff:db:07:0c:b3:58:30:09:74:f1:5e:6c:4e:8c:de:d7:2c:
         1c:7e:70:2b:af:da:c9:15:ff:f3:43:48:56:f5:89:14:e6:97:
         84:ff:8b:80:cd:74:89:82:d3:0f:94:74:74:38:af:aa:45:97:
         82:71:bd:04:c0:60:f5:6a:35:a1:3b:81:6d:7d:33:07:e2:6b:
         27:9c:9c:56:49:79:f4:10:a9:90:21:5c:74:4b:77:fe:21:02:
         23:5c:47:2e:f3:05:26:4d:32:cf:8d:00:54:4b:fd:4b:eb:c3:
         87:ad:3f:24:f0:4d:0f:53:a3:aa:fb:8e:03:8c:cc:e7:48:db:
         d6:69:38:92
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEC124QAadBTD2LvnEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEyNjEyMDAwMFoXDTIzMDMwMzA1MDAwMFowLzEtMCsGA1UEAxMk
ZjI3ODRlOWMtY2JmOS00ZWE3LTkyMTEtYzAwNGFmODU3YTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7/DoByWyD2bgw4b3a5RY8I4/XhYqXJZQo01
JErGmnrMX4pDIpSkNYJ/7WgvQR8cQZHt0TeLIkZ9evEunYk+RWq1RLQO/HFY03IU
0Bd3IqA4zucRVp5HNfW/YQY3027amfjgveSbvYusnSI6ZMBRMW0SNjiYJEvzAyU4
hz8DJFS1hUZ37ejV/DtpZR0sktaTGT1A0xAXLxTQm07cYFhuZm906ySy8kTM4aZn
VrCcPiEimXauot8SZB/r7rTKFiMm7fMpbCyLLgYI8FLRhijRiXjfVmAi7R+ugjEj
WI9fY49osd62Uo9R4c+DlLTtMXo2VCtoopAW2fp9eR5WWoHzkwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFA71rIHNCtOOX5DJ6ciiAzCfrPxQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMGE5Mzg3YTQtNGRjYi0z
NTFiLWJmMzQtYTAxNjUzYWVjMDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEuUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAC/WLiiroebDIoP3d2eq/HDNH+46qSxx1Dwun2Yt9cdIUQfUmEHbBdvHM
wRThTKRukFnbbdhnCOxfyru6nGSToFKPUSaFTWA0ld8LXKMkr2oUzzIFV6woU71W
UHj4PPQk7DpdXx+7XpNCE40th6C7vIhwAjqtGrBmMTzRkbQVcv/bBwyzWDAJdPFe
bE6M3tcsHH5wK6/ayRX/80NIVvWJFOaXhP+LgM10iYLTD5R0dDivqkWXgnG9BMBg
9Wo1oTuBbX0zB+JrJ5ycVkl59BCpkCFcdEt3/iECI1xHLvMFJk0yz40AVEv9S+vD
h60/JPBND1OjqvuOA4zM50jb1mk4kg==
-----END CERTIFICATE-----