Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/23f6337d-edd8-314c-8b25-ec86d33686b0.roa
File:                     23f6337d-edd8-314c-8b25-ec86d33686b0.roa (raw, json)
Hash identifier:          L0YraEbXnW9uLvM4DXF/+SNWb9KdNvUklmH3//38s20=
Subject key identifier:   B4:DD:13:39:F9:DD:77:DF:8F:63:2D:3B:1A:8A:4D:32:F9:5B:3C:7D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858409401FF8923326A2BA2E28F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/23f6337d-edd8-314c-8b25-ec86d33686b0.roa
Signing time:             Sat 14 Jan 2023 12:00:00 +0000
ROA not before:           Sat 14 Jan 2023 12:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        18.136.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:94:01:ff:89:23:32:6a:2b:a2:e2:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 14 12:00:00 2023 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=f0b68f4d-8802-4102-9064-19d561dc79b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b2:e5:f8:e8:49:04:8e:11:46:79:19:67:ab:
                    b2:39:6f:91:56:8e:20:6e:b3:d6:3b:99:12:dd:75:
                    f8:22:fb:49:12:71:6a:f7:b7:fa:a2:98:b5:a1:d8:
                    4e:ee:38:49:03:01:95:5c:d0:0b:ee:93:00:f5:26:
                    74:b6:c9:76:a1:60:94:69:14:c7:38:21:bd:89:49:
                    2c:e8:c5:ec:9a:c6:41:b4:b4:d2:5c:41:3a:ee:be:
                    5f:a3:be:42:64:8b:fb:6e:aa:64:64:b6:ac:99:e0:
                    0f:07:7e:a6:62:f3:65:dc:83:a7:23:a6:2c:38:59:
                    81:90:82:7a:30:fb:be:7a:a7:df:74:4d:38:51:ff:
                    89:96:b8:20:50:e6:fa:7a:df:17:77:70:ba:f9:7b:
                    4a:4b:8c:a2:bd:be:13:51:d2:c2:b5:5b:a0:22:b3:
                    31:4d:08:8f:fb:bd:42:1d:f2:80:31:fc:aa:90:9a:
                    67:55:3f:7e:87:5c:71:a5:3e:fa:c2:20:13:3a:7a:
                    57:7d:94:76:05:d1:10:e2:6d:33:1d:c1:60:91:1d:
                    53:15:cb:5c:a0:c0:b0:df:9c:fa:98:88:b9:d2:77:
                    08:a4:27:91:b2:de:d9:81:04:97:66:83:76:ec:0d:
                    c7:d6:18:55:9e:54:00:a6:90:20:f8:47:94:f0:59:
                    0e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DD:13:39:F9:DD:77:DF:8F:63:2D:3B:1A:8A:4D:32:F9:5B:3C:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/23f6337d-edd8-314c-8b25-ec86d33686b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.136.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:4c:ef:d1:52:39:6e:40:38:7c:7e:c8:9f:67:a4:d9:00:2d:
         00:0e:04:05:48:1a:75:e5:d5:18:c9:b5:7d:c7:96:ad:0e:1c:
         9d:74:2b:8a:c1:85:41:d6:48:62:6a:83:55:df:fe:71:7c:84:
         9e:3a:8b:2c:a5:7d:96:47:3f:e6:d7:a8:cc:fa:e6:3b:b5:35:
         18:6e:a3:10:c6:c5:93:23:5d:5a:48:69:c0:aa:8a:f5:8d:0d:
         8d:a6:5f:37:4d:0b:23:a4:59:ba:a6:dc:ee:47:66:0b:6e:cd:
         af:a8:c3:dd:4b:ed:6d:4d:3a:bc:af:7f:84:6c:f0:5e:d7:94:
         dc:61:0f:ad:fe:fd:00:e3:cf:ce:50:a3:50:74:33:9e:63:28:
         31:10:03:cd:54:fe:59:31:88:8a:be:1b:d3:a0:3b:13:40:f6:
         3f:e3:29:44:1f:25:50:2c:de:b5:f5:0e:80:c2:b8:70:d5:3e:
         76:db:c6:d6:7f:92:33:b7:00:20:e4:74:7b:45:17:f6:fe:b5:
         b5:61:68:a1:39:0c:65:60:3c:4d:8a:d9:08:89:fd:30:bf:32:
         00:d9:79:b9:d6:a4:d1:a8:22:2b:5d:8d:19:4d:b6:42:a8:ec:
         0b:55:84:5d:63:d8:87:ec:d9:48:be:98:ad:81:9b:00:fa:ef:
         43:55:f9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----