Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/14ee17f0-dddf-3f16-82d2-6ead70a5c770.roa
File:                     14ee17f0-dddf-3f16-82d2-6ead70a5c770.roa (raw, json)
Hash identifier:          5uqeT4fTxUiUxob3cTEG44Fn0jR1r02uD1d87hzDjOQ=
Subject key identifier:   FB:78:32:98:B6:53:7D:28:8F:FB:E1:9C:BF:E8:15:A5:60:49:1E:40
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840948099E81B9EF72B019F8540
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/14ee17f0-dddf-3f16-82d2-6ead70a5c770.roa
Signing time:             Sat 14 Jan 2023 12:00:00 +0000
ROA not before:           Sat 14 Jan 2023 12:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        18.88.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:94:80:99:e8:1b:9e:f7:2b:01:9f:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 14 12:00:00 2023 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=80be5ea3-96b6-4496-98e9-ae8ce89686f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4a:b3:39:9d:cd:64:e0:31:78:1c:f6:7d:5c:
                    29:f7:9d:0e:53:2b:f7:bb:b9:41:ea:76:50:a8:9b:
                    7d:f7:64:7d:dc:ca:8b:4a:d9:e7:0c:2d:cc:06:ac:
                    0a:31:a9:a9:1b:c0:3c:45:3d:44:d6:ce:7c:b4:a7:
                    ff:7b:89:db:c6:a9:3e:23:c1:78:fa:10:0c:92:cc:
                    08:3b:00:a3:f4:09:a2:e8:0f:e1:c8:89:a0:69:6f:
                    21:52:60:3d:be:6e:a3:76:36:6a:37:19:5e:4e:ac:
                    32:e7:4a:f9:5e:4c:04:f7:4e:70:0b:24:c1:a2:cb:
                    b1:fa:69:aa:4f:5f:de:c6:7b:15:3d:a7:33:0c:a7:
                    0c:91:05:96:fa:26:83:37:c7:5b:79:c7:dd:67:d7:
                    c2:5d:33:05:ba:83:c2:06:8e:79:3e:57:56:be:a7:
                    30:d8:91:15:04:3a:cc:f9:82:51:eb:5d:69:f3:6f:
                    e1:e8:b7:7d:23:c6:4b:08:26:25:56:5f:a1:10:7a:
                    90:54:9f:e3:f7:da:64:03:b8:6d:db:db:57:af:4e:
                    1c:c5:20:60:df:a2:59:20:06:b6:e5:40:9e:e4:a1:
                    2f:77:3b:9b:4e:fa:67:9f:4d:fa:12:9d:02:df:77:
                    48:cf:61:df:ef:94:b3:7d:8f:4d:fe:dd:af:27:ca:
                    2d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:78:32:98:B6:53:7D:28:8F:FB:E1:9C:BF:E8:15:A5:60:49:1E:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/14ee17f0-dddf-3f16-82d2-6ead70a5c770.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.88.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d0:64:19:e0:94:ed:c6:e3:6c:18:28:ce:1f:fd:d9:8d:11:
         da:34:2f:9c:7f:4d:f3:86:83:8e:b2:65:07:c2:bb:bc:2f:fa:
         36:93:cf:b4:0a:09:24:a7:d4:82:02:48:a4:52:f5:fb:e1:ae:
         34:9c:0d:89:32:9f:4b:08:0d:98:29:7d:9e:3f:7e:40:91:09:
         5e:74:90:2b:03:46:1e:c7:60:1c:f9:37:b8:37:bd:14:53:c7:
         0a:ff:0e:96:73:26:0c:bf:64:96:b0:4a:d7:ea:f0:72:b6:48:
         73:5a:8b:4e:d4:89:b6:eb:bf:2e:b7:d5:8a:08:77:79:86:63:
         10:2f:89:4e:04:d3:98:01:ab:67:40:da:45:37:38:a9:dc:b6:
         f8:38:e6:4a:72:4e:75:27:28:29:5b:2a:b2:a0:47:81:20:ff:
         10:57:5e:bf:04:42:d2:cd:97:86:1f:f4:a2:12:c8:eb:7c:b4:
         a7:bf:b1:fa:23:4c:69:52:36:27:4a:1a:68:7d:27:92:c2:30:
         ce:95:ca:6b:60:34:3a:36:33:4e:91:d0:f6:5f:5c:51:92:e5:
         54:2f:11:d9:9e:4a:80:71:75:7f:5d:63:0d:3f:93:e6:5b:96:
         07:76:1b:fe:5a:c1:bc:da:5a:97:66:9c:99:0f:43:68:5b:e0:
         55:71:01:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----