Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/30e1d172-21cb-3cb4-af3b-8e575e1bb6db.roa
File:                     30e1d172-21cb-3cb4-af3b-8e575e1bb6db.roa (raw, json)
Hash identifier:          ThfMi9L0wT5eb88+upcmdX9GuSeyKLGXuKJjdZ1WnuY=
Subject key identifier:   46:1E:8D:9A:C3:86:1A:8B:10:87:57:4B:CF:DA:3E:5D:DE:E2:ED:E5
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858409506610DC8428594669788C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/30e1d172-21cb-3cb4-af3b-8e575e1bb6db.roa
Signing time:             Sat 14 Jan 2023 12:00:00 +0000
ROA not before:           Sat 14 Jan 2023 12:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        18.254.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:95:06:61:0d:c8:42:85:94:66:97:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 14 12:00:00 2023 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=13285456-c512-4534-9758-b76e85a72dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f9:fb:80:29:81:98:d4:3b:11:51:a6:52:9b:
                    41:48:2d:12:45:20:18:7f:c1:e6:ba:60:33:a1:7e:
                    60:af:b2:c4:d5:11:d8:9a:64:ab:7c:f2:f7:c8:aa:
                    40:14:90:8e:77:81:5c:b2:ad:b1:50:7d:cd:b8:b6:
                    8b:4a:6c:6e:29:22:1f:d0:81:a6:fc:32:bf:7c:96:
                    7a:e8:46:4a:5e:46:10:43:8d:74:ab:f3:e1:7b:ac:
                    0e:7b:c4:ff:65:52:b2:d9:d9:ca:16:52:32:d0:61:
                    e1:b0:13:c1:f2:88:3a:68:5b:3b:bd:ec:69:ac:4b:
                    26:e2:b4:3e:ef:b6:5e:fd:49:d2:3f:70:06:c3:1b:
                    5c:52:36:8d:b1:6d:5f:5b:a1:66:3a:3b:4f:2b:1f:
                    67:39:01:a0:e7:02:21:6b:52:6d:b4:e5:1b:83:e9:
                    b6:01:4c:ea:13:11:f5:0b:e9:80:3a:d7:37:88:d5:
                    74:d1:f3:cf:4d:60:ba:87:0c:30:7d:ea:b1:b1:02:
                    9b:a2:23:db:41:82:d5:ee:f4:f9:c3:9b:bb:52:b2:
                    b9:2b:4f:7d:44:18:a3:5b:6d:4b:64:1b:36:0a:1a:
                    8c:2c:83:12:77:da:6b:81:db:47:76:9d:25:54:17:
                    99:17:c1:b2:4c:72:a5:cf:b8:be:7a:49:92:c3:cc:
                    04:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1E:8D:9A:C3:86:1A:8B:10:87:57:4B:CF:DA:3E:5D:DE:E2:ED:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/30e1d172-21cb-3cb4-af3b-8e575e1bb6db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.254.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:bf:65:2a:09:68:43:29:f0:62:7d:e3:4c:8c:77:a0:07:35:
         cb:1a:ad:8c:34:00:ef:89:01:94:17:4e:1c:03:35:7f:07:31:
         a5:c5:36:b7:d6:b7:e6:57:b4:ea:b0:71:8f:3f:ed:cc:85:7f:
         bb:07:94:3f:4c:e4:6c:6b:99:7e:4f:37:d4:cc:2b:12:7b:26:
         6a:c8:43:ce:0f:45:6c:b7:42:aa:19:b4:02:55:a0:21:3b:ec:
         5d:c6:62:e6:d8:60:8f:6e:81:0a:07:34:06:ca:37:47:74:bb:
         fe:84:59:89:5a:6c:92:18:07:2a:c6:fc:78:5e:c2:c2:c8:57:
         6a:87:d6:4a:de:2f:a0:7c:ea:d0:84:19:03:59:d7:fb:1a:56:
         5a:50:72:90:e4:ae:cb:20:08:83:4f:61:06:19:8c:e4:37:ff:
         c3:9d:07:a3:74:c4:98:1e:7a:23:91:38:5f:23:e6:9b:e5:7c:
         9f:06:39:e0:60:34:9c:eb:3a:8b:07:56:f0:19:ba:e4:d5:00:
         1c:e1:86:0b:2e:72:d3:88:dc:c4:69:0f:8b:dd:e4:69:b9:85:
         dd:fe:fc:03:9e:1c:1e:1c:c9:ba:b2:6f:e3:b2:cc:dd:bc:98:
         78:ab:91:16:00:17:ed:2f:cd:fd:de:23:6c:f4:36:4c:54:57:
         08:2f:71:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----