Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b6e6f96-0ec7-37a4-8cee-c6949b7349bd.roa
File:                     3b6e6f96-0ec7-37a4-8cee-c6949b7349bd.roa (raw, json)
Hash identifier:          bXoMNM4nTC2oavAuXuirYajWl1U8bMeqqNDO1H1+E7M=
Subject key identifier:   B9:32:CE:C4:21:0B:E9:CD:BF:A2:5C:C2:19:2A:EB:DB:0D:97:AA:92
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DD2FA4C03B2CEF6B0EE9D9180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b6e6f96-0ec7-37a4-8cee-c6949b7349bd.roa
Signing time:             Fri 06 May 2022 12:00:00 +0000
ROA not before:           Fri 06 May 2022 12:00:00 +0000
ROA not after:            Sat 11 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.224.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d2:fa:4c:03:b2:ce:f6:b0:ee:9d:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  6 12:00:00 2022 GMT
            Not After : Jun 11 04:00:00 2022 GMT
        Subject: CN=bdee5009-3fde-4faa-92f1-92cfce7d9685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:90:00:f4:20:63:94:6a:8a:77:7b:07:17:29:
                    5f:cc:b4:62:e7:8f:40:e8:12:b9:64:e2:d5:ce:be:
                    ba:56:9e:4b:e3:a5:00:f9:37:bd:25:2d:f0:be:55:
                    13:72:db:b0:dd:fd:87:5d:05:ab:31:80:ad:52:8b:
                    5b:73:64:4c:c8:77:01:3f:0d:20:bb:bb:7d:73:b8:
                    60:87:1a:f0:2c:73:f0:a6:9f:cc:84:dd:af:f4:c4:
                    08:f9:74:24:04:69:2a:86:7e:3a:7a:3a:ec:7e:12:
                    80:30:7e:05:ab:d9:60:94:55:87:b0:9f:7a:01:8f:
                    ff:76:45:d5:52:b8:63:c1:2d:de:7b:d4:78:14:4d:
                    be:27:1b:ee:dd:e9:27:ad:cb:33:5c:b7:ce:fa:6b:
                    5f:e2:3c:97:29:f9:8f:80:7d:d0:9d:a3:e7:da:b6:
                    20:f5:05:8c:b1:d6:00:6f:b0:0c:16:eb:81:18:94:
                    74:2a:59:9f:3b:67:0b:62:e8:30:71:78:a9:7d:27:
                    24:69:13:6e:e7:15:99:8a:0e:44:18:38:bc:23:a5:
                    6c:93:68:70:1f:3b:65:20:4a:b2:76:b4:fb:cc:89:
                    9a:2a:4f:c2:f4:b4:07:19:7f:23:5e:57:4b:55:d3:
                    e4:a1:1a:3b:36:f8:79:8f:aa:8c:a7:20:ca:53:1e:
                    49:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:32:CE:C4:21:0B:E9:CD:BF:A2:5C:C2:19:2A:EB:DB:0D:97:AA:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b6e6f96-0ec7-37a4-8cee-c6949b7349bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.224.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:7b:07:5e:07:c0:20:7f:39:3f:17:3b:6f:0d:35:3e:11:ce:
         10:87:6a:bb:4d:44:bd:49:c2:52:77:31:d9:19:99:3e:b1:6a:
         54:6f:8a:ef:81:60:d9:77:00:79:c4:81:db:34:38:ad:d6:01:
         95:92:fc:2d:49:0c:73:c1:13:18:a9:bc:6c:d7:bd:59:63:52:
         a4:07:c7:25:72:d9:05:10:48:a6:88:8a:d6:21:d6:bf:ca:39:
         4d:13:83:8a:46:18:28:43:4a:1d:ba:55:32:01:11:98:ce:a0:
         b0:a6:96:82:ea:28:01:5b:f3:59:ca:1a:b2:b1:77:86:17:8b:
         72:48:58:a6:c8:c6:ca:5d:ce:00:d3:9d:d0:3e:bc:83:32:46:
         c3:14:70:0e:c8:51:b3:02:de:ea:bb:55:5b:a8:9c:da:70:83:
         25:20:0a:27:10:68:60:f8:2f:f2:0e:2e:bc:8e:56:1e:a8:9f:
         cb:50:e3:27:0c:e5:f9:d9:a9:53:f8:36:73:96:4a:d1:cb:49:
         90:00:fd:13:2f:15:69:51:38:ec:36:73:80:10:9b:b2:e3:0d:
         1d:ba:41:f2:b0:18:e0:e0:80:0d:fa:a3:55:c2:5f:ed:33:4f:
         1e:f3:f8:e6:20:f4:68:c2:17:f6:d6:c9:9f:b9:83:7c:83:fc:
         81:a2:5d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----