Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1acb17b2-fb92-3fc9-957d-baa4533b3918.roa
File:                     1acb17b2-fb92-3fc9-957d-baa4533b3918.roa (raw, json)
Hash identifier:          pM1dUSeHF8pZTtTHjnQeRWdSEuBmHiu+GRjqdxASNcA=
Subject key identifier:   8A:0C:B3:DB:52:56:F2:70:65:32:EA:DF:45:68:3C:80:CA:33:7F:59
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DD4242DD7083BCB1DA0E7BF40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1acb17b2-fb92-3fc9-957d-baa4533b3918.roa
Signing time:             Sat 07 May 2022 12:00:00 +0000
ROA not before:           Sat 07 May 2022 12:00:00 +0000
ROA not after:            Sun 12 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.57.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d4:24:2d:d7:08:3b:cb:1d:a0:e7:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  7 12:00:00 2022 GMT
            Not After : Jun 12 04:00:00 2022 GMT
        Subject: CN=91050bdb-b5ed-470e-9d50-13d3e852cfcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:17:11:95:26:06:7d:68:32:a4:b9:96:6e:5a:
                    63:29:2a:aa:c6:77:f6:f5:77:f8:0d:a6:2e:d1:ce:
                    bf:b3:84:06:f1:e3:6c:d5:9a:db:79:98:f3:03:bf:
                    91:49:13:d4:b4:0b:f4:a8:f4:f9:5f:b1:68:9b:69:
                    30:9c:59:a7:4b:6a:34:1a:3f:96:8d:b6:dd:ea:b9:
                    6d:8a:1f:64:87:f9:59:d0:ef:bf:fa:ea:2e:f6:c9:
                    39:92:90:6f:68:cc:88:73:49:72:8b:fb:0b:4c:68:
                    9c:1f:87:e1:97:eb:a8:b0:18:10:85:dd:54:69:3c:
                    b0:63:49:bd:fc:56:68:02:8a:ab:c9:f7:6b:db:bf:
                    37:e4:fa:a5:79:63:f6:cb:c6:01:87:8c:77:4f:e9:
                    65:06:56:9a:62:1b:97:3e:cd:ce:75:4e:a0:2f:39:
                    58:91:7f:19:5a:9f:c4:f0:59:c1:50:e7:d0:c7:77:
                    45:57:01:48:c5:9f:17:36:8f:bd:d2:8f:b5:57:20:
                    ce:fb:f9:10:f7:6a:55:c6:3e:26:66:3c:a6:3a:dc:
                    8f:f5:1a:ba:89:fb:3a:8c:75:da:ed:b9:63:aa:28:
                    24:d9:eb:6e:0b:85:8b:5b:ef:95:43:e1:35:9f:82:
                    85:81:c8:fc:db:17:b2:ec:49:f5:fe:26:18:67:60:
                    77:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0C:B3:DB:52:56:F2:70:65:32:EA:DF:45:68:3C:80:CA:33:7F:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1acb17b2-fb92-3fc9-957d-baa4533b3918.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.57.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:7e:a0:e3:91:ef:ab:9a:6b:43:8f:3d:84:ae:24:89:a5:e4:
         20:77:03:9e:57:e4:50:f2:8d:ea:42:9a:1b:93:51:bd:98:37:
         6e:a0:71:78:b5:92:1c:12:a3:f4:7d:72:a5:89:37:2f:74:30:
         df:c4:1a:66:8d:6a:07:6e:5b:61:59:28:b4:70:85:41:4c:1d:
         38:5b:44:41:81:32:8c:4e:8f:ff:07:e1:b2:95:54:42:03:6a:
         93:55:be:0c:3b:98:4a:59:28:58:39:93:9c:20:62:33:96:5f:
         e1:c8:75:21:a2:c3:b1:3a:8f:3e:6c:e5:bc:e9:1c:40:46:f9:
         bd:ac:5c:9b:19:d9:58:35:bd:f3:43:3d:d6:56:6b:f5:17:6e:
         71:6d:83:8f:b5:a5:eb:09:05:b8:05:f9:07:a4:8f:56:68:8e:
         26:1a:cc:50:fa:cf:2d:2a:82:ee:ba:63:18:84:61:9a:8a:34:
         ce:d9:75:2b:eb:05:ab:1e:7a:d4:2d:af:a6:61:3b:81:d5:d3:
         90:56:cf:a7:b7:db:4f:67:0a:d3:75:03:d3:3b:ca:bd:b5:b6:
         5c:b2:8a:8b:7a:50:41:24:4a:7c:b1:92:bb:ba:f2:2a:50:f3:
         5e:ec:c0:74:19:21:c7:b8:18:6b:88:68:bc:8e:27:f7:42:50:
         ff:2d:4a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----