Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/164286a9-4f7d-3323-aa93-06a5529f7ded.roa
File:                     164286a9-4f7d-3323-aa93-06a5529f7ded.roa (raw, json)
Hash identifier:          /VtdO48uAVKJs43X031mK65CyCFTilRtbt2Ipj0giq8=
Subject key identifier:   C3:2C:11:7E:61:0A:46:C9:F5:68:24:81:FD:9E:AD:3B:C9:CE:8D:C8
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DAC027E252B89F55AD9C21880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/164286a9-4f7d-3323-aa93-06a5529f7ded.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.232.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ac:02:7e:25:2b:89:f5:5a:d9:c2:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=863e0ef9-03ac-4b5a-b1b6-a5c1a31c620e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:97:1b:61:55:15:fd:3b:68:0a:e3:3a:f3:cf:
                    5c:1b:1b:c4:79:c1:1d:f5:f1:d3:43:7e:02:e5:c3:
                    a3:54:1b:4b:4f:e2:da:82:3a:41:49:ea:d9:a3:ac:
                    24:5f:32:fe:7c:11:10:0b:38:bc:0a:73:6f:42:89:
                    5a:87:03:21:90:75:ec:ca:bc:68:bb:be:01:e9:e0:
                    b6:d7:af:c7:d4:23:49:9a:57:12:7b:6c:d5:cf:17:
                    0a:1d:a1:70:ae:0e:b5:3e:48:60:4b:dc:71:d1:46:
                    e1:b5:fa:b2:4f:18:9d:c5:89:7a:e9:74:59:44:af:
                    b0:27:86:9c:cd:29:22:e6:72:5a:60:c0:53:4d:5b:
                    0d:bc:fc:51:55:38:2f:59:d4:3f:b4:97:17:b1:87:
                    2d:e9:2b:12:cb:a9:16:0b:54:2d:a5:66:64:6a:f1:
                    e5:57:7b:21:d3:71:0d:23:f7:21:83:40:7f:64:c7:
                    6c:36:b9:41:66:60:53:ec:6a:78:44:ef:0c:74:a3:
                    6f:35:a8:f3:55:00:f8:a4:4d:f6:5e:11:31:ff:95:
                    69:b2:46:26:69:3d:86:ad:e8:24:80:68:ed:3a:44:
                    41:62:04:df:4f:13:c2:94:bc:c7:14:d1:c1:f4:58:
                    7a:22:26:09:c2:e6:28:55:54:34:2e:e2:6e:bf:61:
                    88:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2C:11:7E:61:0A:46:C9:F5:68:24:81:FD:9E:AD:3B:C9:CE:8D:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/164286a9-4f7d-3323-aa93-06a5529f7ded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.232.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:07:14:8f:84:ab:b4:06:46:4c:f9:90:5a:0d:48:80:11:77:
         19:dd:4b:6a:39:2e:38:a8:16:e2:49:b7:18:ec:6e:51:d8:53:
         c3:57:0b:f6:05:56:b8:c9:29:b8:f3:c4:d8:07:84:92:df:84:
         e8:01:dc:d2:59:f4:88:ca:d3:dd:22:1a:48:1e:c8:cb:db:d3:
         8e:4c:f5:52:74:df:f5:56:d2:3f:ed:05:25:15:69:18:40:51:
         8f:98:bf:21:d9:87:5f:64:aa:9c:82:59:e0:b7:7a:58:47:0c:
         68:c9:86:6e:e7:ad:4a:c9:fd:6d:72:2f:d4:41:ea:62:74:a4:
         d5:f0:44:c2:ed:67:a8:39:05:53:46:ed:56:2a:79:20:11:b4:
         62:56:9b:90:80:4d:f8:22:e6:bc:dd:da:ba:75:ed:23:6f:49:
         15:af:9e:91:5c:10:f0:e8:52:07:bc:bd:31:ed:00:00:63:8d:
         02:85:21:dc:28:f7:ba:78:d6:61:88:71:02:e6:f7:1c:f1:59:
         5a:88:7b:33:fc:36:af:8c:55:53:0b:ed:3e:20:fa:a8:ae:56:
         d2:85:71:91:fb:c7:6e:f7:7f:66:42:8f:85:3c:aa:e8:23:2e:
         fd:19:f2:81:5f:49:25:47:f4:d9:4b:50:d6:2b:b1:53:5e:26:
         d8:26:f6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----