Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/21964a93-a8ea-315b-b700-763d4fbe439b.roa
File:                     21964a93-a8ea-315b-b700-763d4fbe439b.roa (raw, json)
Hash identifier:          3EpS/TJ+RZu17M4oRn5e6eJlEhcnB7mghTaHsDt31eI=
Subject key identifier:   15:E1:B8:1E:77:48:88:65:0A:99:A4:45:1F:D1:DA:D6:63:8B:E5:5A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584091AE6D043847A8E576D3B300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/21964a93-a8ea-315b-b700-763d4fbe439b.roa
Signing time:             Fri 13 Jan 2023 12:00:00 +0000
ROA not before:           Fri 13 Jan 2023 12:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        18.153.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:91:ae:6d:04:38:47:a8:e5:76:d3:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 13 12:00:00 2023 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=44efd102-29d7-414a-b1a8-1cdea400765e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d2:e6:e3:f5:c2:38:c0:e9:25:f0:29:6c:c0:
                    17:2c:b1:8e:eb:b0:f5:67:45:09:15:4c:34:b1:2b:
                    a3:42:01:bc:26:be:0f:03:28:85:77:1f:70:21:d8:
                    30:1e:74:29:d2:3f:f8:10:70:80:17:29:90:3f:7a:
                    62:96:12:96:33:97:93:36:38:60:d8:75:6f:3d:60:
                    a4:fc:b3:34:56:59:f5:fb:05:7b:32:9a:71:69:e8:
                    42:d1:cb:c1:eb:8a:5a:f8:ba:a3:dc:31:49:44:45:
                    6f:19:b2:83:3b:d9:55:a2:51:4e:b3:a8:e0:4f:0c:
                    91:81:6f:23:c6:8b:36:cb:7c:a8:cb:a3:ad:ba:a9:
                    19:93:f8:a1:f5:47:27:2b:73:62:51:b6:f7:e1:2e:
                    a0:f6:b7:fe:fb:6e:f3:88:45:4b:37:55:13:94:b5:
                    1b:20:1c:04:c7:ea:ec:6e:5c:ea:25:21:04:fb:36:
                    6b:e5:71:1e:7b:5d:da:c7:b4:fd:9c:8a:0f:dc:08:
                    1a:67:39:82:30:ac:ae:74:58:49:b1:0a:62:b0:bc:
                    88:35:d5:86:25:76:90:dc:eb:62:7d:6c:87:ae:db:
                    00:1c:19:06:ec:a4:1d:9c:7a:23:63:70:73:65:f6:
                    89:a9:45:81:00:ef:cb:eb:2b:bc:4d:76:35:d0:2c:
                    9b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E1:B8:1E:77:48:88:65:0A:99:A4:45:1F:D1:DA:D6:63:8B:E5:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/21964a93-a8ea-315b-b700-763d4fbe439b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.153.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:ff:43:ec:34:69:e9:0e:75:34:b9:01:18:b3:28:a1:b2:03:
         0b:08:20:76:21:0e:18:40:ba:25:15:b7:21:e6:4b:28:5f:09:
         14:02:f9:0f:a9:e2:34:84:ce:7a:24:71:3a:5f:55:b9:88:74:
         7d:8c:20:af:d9:b2:ca:da:f0:d7:12:57:1b:a6:91:2c:b1:e8:
         1d:23:7a:bb:34:35:4b:60:2d:1c:1f:07:15:30:1a:83:d3:5b:
         ea:d0:55:c8:b9:c9:e6:39:1d:d4:89:11:59:12:c4:61:f1:2b:
         fa:7f:12:ea:b6:8f:41:c0:d5:9b:ab:55:c0:c4:d4:7f:4a:27:
         f9:ab:e0:0c:69:ff:aa:82:bb:0e:cb:af:e3:c4:3a:7c:c4:e2:
         cf:96:fd:84:cc:ce:35:17:9c:86:4f:6a:6b:76:ee:8c:89:c8:
         57:93:fb:17:ef:69:78:22:0b:b4:30:d0:1c:69:e7:4c:c5:72:
         28:a6:14:bb:0a:62:c7:10:ab:11:7b:2c:0f:c0:83:59:38:3b:
         bc:27:2f:07:e2:3c:7d:87:b3:71:83:d4:96:46:38:25:15:b9:
         df:4f:4c:88:67:1f:fa:5b:49:1b:15:5d:1e:5c:73:0d:89:35:
         6f:c1:48:12:80:a9:a3:a3:93:81:7b:d2:c2:07:c0:51:00:64:
         6a:b3:76:1f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECRrm0EOEeo5XbTswAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDExMzEyMDAwMFoXDTIzMDIxODA1MDAwMFowLzEtMCsGA1UEAxMk
NDRlZmQxMDItMjlkNy00MTRhLWIxYTgtMWNkZWE0MDA3NjVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dLm4/XCOMDpJfApbMAXLLGO67D1Z0UJFUw0
sSujQgG8Jr4PAyiFdx9wIdgwHnQp0j/4EHCAFymQP3pilhKWM5eTNjhg2HVvPWCk
/LM0Vln1+wV7MppxaehC0cvB64pa+Lqj3DFJREVvGbKDO9lVolFOs6jgTwyRgW8j
xos2y3yoy6OtuqkZk/ih9UcnK3NiUbb34S6g9rf++27ziEVLN1UTlLUbIBwEx+rs
blzqJSEE+zZr5XEee13ax7T9nIoP3AgaZzmCMKyudFhJsQpisLyINdWGJXaQ3Oti
fWyHrtsAHBkG7KQdnHojY3BzZfaJqUWBAO/L6yu8TXY10Cyb8wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBXhuB53SIhlCpmkRR/R2tZji+VaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMjE5NjRhOTMtYThlYS0z
MTViLWI3MDAtNzYzZDRmYmU0MzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEpkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAq/9D7DRp6Q51NLkBGLMoobIDCwggdiEOGEC6JRW3IeZLKF8JFAL5D6ni
NITOeiRxOl9VuYh0fYwgr9myytrw1xJXG6aRLLHoHSN6uzQ1S2AtHB8HFTAag9Nb
6tBVyLnJ5jkd1IkRWRLEYfEr+n8S6raPQcDVm6tVwMTUf0on+avgDGn/qoK7Dsuv
48Q6fMTiz5b9hMzONRechk9qa3bujInIV5P7F+9peCILtDDQHGnnTMVyKKYUuwpi
xxCrEXssD8CDWTg7vCcvB+I8fYezcYPUlkY4JRW5309MiGcf+ltJGxVdHlxzDYk1
b8FIEoCpo6OTgXvSwgfAUQBkarN2Hw==
-----END CERTIFICATE-----