Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d62fe28-9c86-3342-b283-376f5522412c.roa
File:                     0d62fe28-9c86-3342-b283-376f5522412c.roa (raw, json)
Hash identifier:          7oHuRrTmOG3M/nSXsSZMg6YUN3ylYDwwzAc6TstGWL0=
Subject key identifier:   1E:54:57:DD:02:EA:F8:CA:61:9F:F4:57:16:50:CD:C2:55:0F:AE:F3
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858406ADBC06D121EC53F72941820
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d62fe28-9c86-3342-b283-376f5522412c.roa
Signing time:             Fri 30 Dec 2022 12:00:00 +0000
ROA not before:           Fri 30 Dec 2022 12:00:00 +0000
ROA not after:            Sat 04 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        18.184.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6a:db:c0:6d:12:1e:c5:3f:72:94:18:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 30 12:00:00 2022 GMT
            Not After : Feb  4 05:00:00 2023 GMT
        Subject: CN=b30708bb-c867-4392-a2aa-fc7d27013ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a2:93:c1:af:32:5e:61:ab:f8:44:c1:8e:bf:
                    50:43:a1:6d:2c:a2:75:56:8d:68:c2:68:19:e4:3e:
                    6a:1c:6f:78:70:63:6c:20:95:1b:c8:19:67:91:03:
                    55:cf:3c:a2:3b:75:ae:69:83:f1:07:03:13:57:f4:
                    bf:ca:30:4d:dd:5e:54:29:b6:0b:52:70:5f:be:b4:
                    fd:d5:71:ae:c6:00:eb:de:03:19:c8:c9:ce:2b:ee:
                    bc:84:4e:2c:05:08:35:b3:38:c7:d0:9f:92:a6:98:
                    e2:34:a2:93:30:3f:68:bc:aa:04:5f:18:28:ff:40:
                    9d:9c:7f:dc:41:7c:28:20:d4:38:f7:f8:17:85:ad:
                    0a:7f:62:79:01:18:ce:2f:f3:f6:fb:5a:ed:c3:2a:
                    42:3d:0c:94:2b:8d:ad:ae:56:8e:db:f8:9d:a7:36:
                    27:79:8e:25:60:ca:3f:54:1e:6b:09:a6:6b:90:cc:
                    a0:d9:cb:59:1b:63:d6:79:74:c4:09:bd:c8:bf:df:
                    1d:bf:cb:93:9a:91:cf:6b:d4:8d:58:f2:63:a2:21:
                    59:2c:bd:82:4e:43:2a:5c:64:5c:5b:a1:a5:51:15:
                    db:45:da:08:78:52:d0:aa:8d:59:9d:09:30:6f:a8:
                    24:00:60:95:d8:55:b6:6f:76:2e:05:f9:1a:f1:36:
                    6f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:54:57:DD:02:EA:F8:CA:61:9F:F4:57:16:50:CD:C2:55:0F:AE:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d62fe28-9c86-3342-b283-376f5522412c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.184.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:db:ee:cc:12:3f:c1:ab:0c:0c:53:90:80:9a:f0:85:31:77:
         97:6f:61:25:4a:ec:42:84:c9:a2:94:55:af:86:57:7b:1b:a4:
         db:d0:0e:05:8a:73:01:f2:bc:38:52:92:eb:2d:73:87:2d:87:
         8d:20:8c:1c:54:55:f0:8f:e3:7d:fe:02:49:ce:c9:42:5b:e8:
         3c:02:58:a4:bd:75:31:15:0d:80:ae:8d:a0:65:56:a8:6c:eb:
         3e:3a:a4:c2:e7:92:5a:bf:13:c5:71:c9:c8:29:22:e7:77:62:
         44:fb:98:a4:d9:4d:bd:c6:53:82:4d:3f:d3:e0:aa:7a:13:d9:
         d9:65:1f:85:8a:b3:c4:c5:83:0e:d5:b3:e7:24:07:75:73:ab:
         60:f6:0c:0d:7a:52:c9:b6:7a:f4:64:4a:b3:2b:c4:49:e9:49:
         98:5a:ae:8a:da:29:c0:6e:d5:57:9e:03:4d:d5:67:b1:92:c0:
         5a:4c:f1:01:30:5d:39:73:fe:21:c3:7f:66:73:e0:fe:8d:03:
         ff:de:3d:95:32:e0:45:9e:4b:ae:cc:40:8a:20:b4:3b:8c:b7:
         39:b4:75:e4:e6:38:b6:e0:b2:0b:53:07:3c:25:ff:6d:e7:33:
         02:38:9c:9c:97:53:61:3b:94:bc:09:7e:58:f1:da:c5:3c:85:
         23:d0:b3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----