Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1229fa19-b643-3606-92dd-2d9f350feb42.roa
File:                     1229fa19-b643-3606-92dd-2d9f350feb42.roa (raw, json)
Hash identifier:          QvFL8k50mlLg1nv+MuZ/CRZ4leXdGdzkXNjFOdvtUU0=
Subject key identifier:   67:AC:4A:AE:6C:EE:AB:05:18:D2:B9:8A:F1:75:44:57:EE:1A:D0:32
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840B85452224BC063820BE5C380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1229fa19-b643-3606-92dd-2d9f350feb42.roa
Signing time:             Fri 27 Jan 2023 12:00:00 +0000
ROA not before:           Fri 27 Jan 2023 12:00:00 +0000
ROA not after:            Sat 04 Mar 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        18.204.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b8:54:52:22:4b:c0:63:82:0b:e5:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 27 12:00:00 2023 GMT
            Not After : Mar  4 05:00:00 2023 GMT
        Subject: CN=b322eb2c-2448-49e8-a21c-f45039ce703c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3f:c9:be:28:07:e5:a2:b8:67:2d:db:ff:cf:
                    5a:2c:c6:bf:5e:d2:b3:54:ab:55:cc:6e:12:a6:2d:
                    8b:cb:e3:d1:67:5e:0e:2f:57:22:36:a0:ff:78:a1:
                    64:9c:8b:45:7a:6b:e2:09:f3:3d:3d:7e:01:e2:58:
                    d5:22:8c:fd:3d:e3:8e:d7:64:69:56:74:fe:cb:28:
                    b4:9c:96:52:f3:31:17:4e:92:9b:43:c9:f6:6c:35:
                    af:dd:19:c3:66:81:26:cd:4f:84:c7:f0:2b:0f:1d:
                    4c:b2:77:c4:81:f2:97:31:4e:04:10:e7:bd:e9:fe:
                    84:cb:55:bc:1a:db:a0:a0:29:0f:ee:86:72:76:5d:
                    1a:99:0d:b3:dd:15:b4:45:4c:1a:4c:db:84:de:c1:
                    c4:42:93:9c:8f:61:db:fa:44:bf:0d:b9:ca:f3:29:
                    56:32:a7:82:fe:f3:66:6a:e2:2c:13:cb:ad:b5:9a:
                    e2:80:97:67:8e:c5:07:72:bb:dd:61:ab:d1:f8:61:
                    48:dc:74:b7:b4:58:93:93:b6:0c:8f:df:09:35:21:
                    3b:49:61:fb:9f:2c:92:f8:60:94:6f:69:b7:0d:3d:
                    14:0b:a5:23:46:b1:65:38:bc:fe:31:ad:da:77:e0:
                    ca:6f:5c:74:f4:cf:6f:50:19:03:7e:2f:e5:5d:f0:
                    48:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AC:4A:AE:6C:EE:AB:05:18:D2:B9:8A:F1:75:44:57:EE:1A:D0:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1229fa19-b643-3606-92dd-2d9f350feb42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.204.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:05:1a:97:20:24:42:e1:e5:e7:aa:c9:3d:05:a2:b1:5d:e7:
         42:ef:ea:b4:05:e6:bc:97:d6:e6:c3:1d:b5:f8:aa:44:fb:64:
         cf:b8:11:2e:10:42:7d:9b:6f:a3:56:28:9d:ab:8e:ce:ff:63:
         9f:e6:6e:b9:b3:bf:b1:47:d8:29:20:12:41:96:57:3b:2c:74:
         60:02:b0:36:bd:74:e7:35:9e:71:6c:e5:54:0c:b0:b1:e3:27:
         fe:0e:e7:d8:38:ee:ba:b6:67:95:6b:79:c0:3d:ae:f6:f5:4a:
         79:f0:e2:f3:85:cc:35:c5:ef:64:d4:9f:ed:47:0d:1c:ad:65:
         fc:c0:10:12:a2:64:06:3d:c7:b2:cf:7a:0c:fc:fd:84:20:e9:
         3a:21:1f:bb:e2:14:0e:49:5a:46:ae:16:99:bc:35:ef:5a:65:
         8f:c0:97:60:48:5c:53:d0:5e:8a:c7:12:4b:f3:7f:b3:97:73:
         42:0c:9b:64:30:f9:83:49:ae:21:ff:68:d6:2e:c0:54:e7:74:
         16:88:63:c4:53:92:99:77:c6:39:bc:0b:ec:13:83:11:b0:9c:
         ca:cb:b1:d8:5f:33:f2:7c:41:ca:25:71:a7:4f:7b:04:9a:6a:
         cd:0a:a3:d5:1f:50:7c:bf:0f:9a:b8:36:de:a9:d7:45:03:86:
         a2:95:65:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----