Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3703d355-9b18-3c71-928d-6da650ba5925.roa
File:                     3703d355-9b18-3c71-928d-6da650ba5925.roa (raw, json)
Hash identifier:          1LdcpUKp8Lphm82DaoWAcCsztNebEGbslv7fxpsnfxs=
Subject key identifier:   5A:EB:FA:4F:9D:3F:DF:6C:E4:4B:45:57:B6:A7:B6:2C:EF:18:F4:9A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DAC887D6A27489A7969ABF180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3703d355-9b18-3c71-928d-6da650ba5925.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.137.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ac:88:7d:6a:27:48:9a:79:69:ab:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=1840fd2c-2f66-4288-acbd-cf8a7041fe82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3e:52:fb:d9:9b:95:1b:77:1b:f0:5e:da:68:
                    60:66:5c:38:94:2b:5f:45:5c:0b:15:da:e1:5d:a7:
                    f8:57:eb:49:6b:8d:aa:44:d0:dd:d2:8a:6f:56:3a:
                    a6:e6:d6:ad:73:5e:89:08:7b:e8:0e:52:65:a2:1d:
                    fb:5c:97:74:f9:30:82:2b:8f:3f:9c:19:1b:f3:b3:
                    96:22:7c:df:9b:fc:f8:36:93:4f:c3:e5:71:cc:0e:
                    f5:b9:f4:00:1b:c9:86:bc:d2:13:aa:51:e9:0a:8f:
                    83:e4:46:39:38:21:45:d5:50:de:8a:6d:37:95:2c:
                    e9:39:69:24:37:0d:7d:d0:95:3b:fd:55:e6:7a:cf:
                    9a:db:a8:b3:72:c2:bd:85:51:96:29:06:07:93:7c:
                    c1:d6:97:42:38:0a:7e:33:2d:04:3c:09:ec:33:04:
                    0e:dc:b6:7e:25:71:33:b3:c6:9b:a1:0f:ad:18:ca:
                    29:2d:e4:eb:73:1c:4a:09:ca:de:15:c4:a6:bc:23:
                    22:2c:75:c7:1b:fa:35:e1:82:22:a9:47:40:66:3f:
                    21:07:38:bc:13:d2:df:93:0c:4c:45:73:f0:55:47:
                    65:33:24:b9:aa:28:b6:8c:e2:2e:a0:c7:97:c9:70:
                    98:92:d4:6b:63:0f:ee:a4:54:2b:4c:0d:0c:cd:28:
                    9a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EB:FA:4F:9D:3F:DF:6C:E4:4B:45:57:B6:A7:B6:2C:EF:18:F4:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3703d355-9b18-3c71-928d-6da650ba5925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.137.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:69:71:ec:ee:52:cc:73:be:44:0c:e1:fc:59:a2:81:7a:56:
         81:f3:8f:ea:29:8a:3a:e4:0c:65:ab:bb:1f:f5:7a:b4:ab:43:
         dd:15:20:a2:1b:29:da:f8:c9:c4:97:05:4b:23:c4:73:8c:bb:
         d1:48:dd:d9:55:0b:ca:eb:c8:9e:76:7f:ef:22:36:9f:d8:60:
         d7:a1:6a:5d:30:cb:d1:0b:ef:ad:3b:fa:cc:4b:4f:28:ef:8a:
         b3:61:d3:d3:6f:d1:dc:a5:d7:39:5d:b5:c5:74:42:3a:15:b1:
         7b:c1:20:bf:28:4e:48:10:9b:e7:8b:03:1a:fc:e7:09:ce:f2:
         6e:9c:1b:67:99:38:03:83:03:a3:61:1f:1a:e1:b2:cf:a0:2c:
         f9:09:f3:26:61:ef:8e:3a:26:3b:a4:61:10:bc:3f:18:28:c0:
         c2:d6:2d:f1:e2:56:bb:8a:62:56:45:39:40:f1:21:d3:a0:cc:
         ed:77:33:64:83:1b:48:50:85:25:ed:fb:1d:c0:92:bd:c2:6d:
         7a:c6:47:02:a6:5a:e4:c6:72:6d:ac:f0:d5:b1:7e:63:39:42:
         32:90:2f:31:d1:2a:af:2a:6c:6a:cf:f6:0b:c6:24:4e:aa:09:
         bf:db:ca:98:d7:91:43:ea:6c:7d:e0:eb:d4:ed:dd:f5:f4:29:
         5f:80:02:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----