Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/22281d16-c7e0-3ed1-aee9-5eed79ac8220.roa
File:                     22281d16-c7e0-3ed1-aee9-5eed79ac8220.roa (raw, json)
Hash identifier:          PRqPVvzKoFYKanHKewpdOZTpubbxBtx8boyw+PQU7Ws=
Subject key identifier:   08:D5:95:2E:49:F9:9B:13:17:4D:2B:FA:C7:3D:14:BE:A8:12:A6:CC
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840BC669B06CA41EEEF5AEABE80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/22281d16-c7e0-3ed1-aee9-5eed79ac8220.roa
Signing time:             Sat 28 Jan 2023 12:00:00 +0000
ROA not before:           Sat 28 Jan 2023 12:00:00 +0000
ROA not after:            Sun 05 Mar 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        18.231.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:bc:66:9b:06:ca:41:ee:ef:5a:ea:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 28 12:00:00 2023 GMT
            Not After : Mar  5 05:00:00 2023 GMT
        Subject: CN=9c74a6b6-cc57-4042-8324-84850b63f63b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:44:c6:0a:31:78:96:1b:30:69:55:f6:ec:5f:
                    3e:42:74:d1:b3:1e:68:5b:20:8b:53:42:06:24:0e:
                    20:c4:5f:c3:bd:ad:e3:ae:8d:ff:14:59:3e:03:6f:
                    a5:4a:58:a2:7b:75:93:cb:8b:6d:55:6b:e5:ef:ab:
                    ba:ac:cf:43:62:27:33:78:4b:b2:be:f3:eb:f6:7a:
                    99:72:2f:81:44:dc:ef:74:3e:cd:df:5f:af:6c:ed:
                    2a:a8:61:d5:ca:b8:e8:5a:ad:dc:19:35:33:f1:88:
                    18:df:ef:a6:ec:f5:67:43:df:45:b7:1f:65:b5:bd:
                    8d:73:bd:11:db:dd:b0:5a:37:54:3a:45:9c:23:2a:
                    d0:27:9f:6f:91:72:38:0e:d5:4a:5e:16:c9:22:e7:
                    02:5c:b4:42:ac:d8:20:ba:69:be:38:7d:84:e4:d3:
                    00:df:58:90:98:14:c7:a5:19:9b:00:16:84:09:c1:
                    fc:6c:4e:f2:e4:5a:51:9f:37:08:21:92:1b:2b:73:
                    07:6d:ed:ca:a7:f8:c8:59:e8:00:0d:f1:04:57:c7:
                    68:11:c6:ff:ca:e5:32:3b:22:7d:3b:a6:84:45:16:
                    03:4d:c1:c6:e5:31:d5:3b:28:7c:1a:21:b9:2c:a9:
                    1c:6d:24:ed:c1:e6:20:a6:15:60:77:db:f3:8c:b7:
                    9c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D5:95:2E:49:F9:9B:13:17:4D:2B:FA:C7:3D:14:BE:A8:12:A6:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/22281d16-c7e0-3ed1-aee9-5eed79ac8220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.231.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:75:db:e5:f4:aa:38:14:1a:2c:5f:8f:52:76:1c:65:37:cd:
         a2:db:4a:76:a2:46:32:67:34:c8:56:6f:45:08:a8:f3:6c:dc:
         e1:11:fc:0f:79:0d:33:fb:22:4d:06:e4:6a:fd:a0:31:3a:92:
         52:b6:03:1b:ca:97:7a:4a:6c:29:c1:ad:9a:b7:5d:2a:df:dc:
         6f:3f:0f:24:05:77:ed:ec:b6:c2:cc:24:8e:16:fd:d3:5d:71:
         9d:39:aa:64:5b:0d:9c:a6:3a:49:06:c0:ae:60:c0:77:a9:c3:
         62:11:05:a8:60:5c:b0:e3:00:b6:ae:53:f4:f7:4f:2a:61:31:
         c0:20:c7:84:81:e5:22:b8:fb:26:49:50:87:89:cb:14:73:4c:
         26:ad:44:f6:3c:16:41:12:70:e3:e0:52:d2:65:99:05:5a:45:
         8c:61:9b:24:aa:86:81:61:e1:54:7f:10:3d:e7:98:42:83:7c:
         31:c1:06:3c:89:1a:b0:e7:52:4b:72:85:8c:f1:20:b9:5d:04:
         67:db:4b:36:7b:be:35:93:58:23:ec:fa:91:54:16:6c:c1:b8:
         39:5f:e9:77:cf:60:19:00:b2:68:a2:97:a9:0b:a4:de:33:9e:
         80:8a:48:c6:8c:44:11:3d:ac:73:24:21:7d:f7:6b:5e:02:e6:
         6a:05:1e:3d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEC8ZpsGykHu71rqvoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEyODEyMDAwMFoXDTIzMDMwNTA1MDAwMFowLzEtMCsGA1UEAxMk
OWM3NGE2YjYtY2M1Ny00MDQyLTgzMjQtODQ4NTBiNjNmNjNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnETGCjF4lhswaVX27F8+QnTRsx5oWyCLU0IG
JA4gxF/Dva3jro3/FFk+A2+lSliie3WTy4ttVWvl76u6rM9DYiczeEuyvvPr9nqZ
ci+BRNzvdD7N31+vbO0qqGHVyrjoWq3cGTUz8YgY3++m7PVnQ99Ftx9ltb2Nc70R
292wWjdUOkWcIyrQJ59vkXI4DtVKXhbJIucCXLRCrNggumm+OH2E5NMA31iQmBTH
pRmbABaECcH8bE7y5FpRnzcIIZIbK3MHbe3Kp/jIWegADfEEV8doEcb/yuUyOyJ9
O6aERRYDTcHG5THVOyh8GiG5LKkcbSTtweYgphVgd9vzjLecFQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAjVlS5J+ZsTF00r+sc9FL6oEqbMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMjIyODFkMTYtYzdlMC0z
ZWQxLWFlZTktNWVlZDc5YWM4MjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEucwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAhXXb5fSqOBQaLF+PUnYcZTfNottKdqJGMmc0yFZvRQio82zc4RH8D3kN
M/siTQbkav2gMTqSUrYDG8qXekpsKcGtmrddKt/cbz8PJAV37ey2wswkjhb9011x
nTmqZFsNnKY6SQbArmDAd6nDYhEFqGBcsOMAtq5T9PdPKmExwCDHhIHlIrj7JklQ
h4nLFHNMJq1E9jwWQRJw4+BS0mWZBVpFjGGbJKqGgWHhVH8QPeeYQoN8McEGPIka
sOdSS3KFjPEguV0EZ9tLNnu+NZNYI+z6kVQWbMG4OV/pd89gGQCyaKKXqQuk3jOe
gIpIxoxEET2scyQhffdrXgLmagUePQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:33:58 2023 by rpki-client on console-ams.rpki-client.org