Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/445dc708-e349-357e-9e0e-d4c6a7fcaaa9.roa
File:                     445dc708-e349-357e-9e0e-d4c6a7fcaaa9.roa (raw, json)
Hash identifier:          q+r2pd4uHrQAeWdX1CAEMEQOJ3y6W/lGmMyWO/4ZtoA=
Subject key identifier:   47:55:98:82:9A:A8:31:E9:BF:32:2C:4C:8C:AD:77:12:34:8E:69:64
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DACDA7DA5676691300FECCE80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/445dc708-e349-357e-9e0e-d4c6a7fcaaa9.roa
Signing time:             Sat 23 Apr 2022 12:00:00 +0000
ROA not before:           Sat 23 Apr 2022 12:00:00 +0000
ROA not after:            Sun 29 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.90.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ac:da:7d:a5:67:66:91:30:0f:ec:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr 23 12:00:00 2022 GMT
            Not After : May 29 04:00:00 2022 GMT
        Subject: CN=d7dd6378-bb77-4ce7-ba74-71b47235af6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ae:d2:4e:77:60:8c:17:05:ab:09:d4:48:1e:
                    bc:49:e3:8e:5a:9d:f6:23:eb:7a:3b:7a:9f:d7:a6:
                    39:70:14:0e:9c:08:02:04:6a:a7:d9:a3:af:6c:05:
                    1b:2c:8e:10:5f:ac:8b:fc:65:da:90:f3:89:63:98:
                    e8:b2:ea:65:ec:8a:3b:ee:b8:52:29:81:95:db:96:
                    85:93:4a:51:db:c7:14:99:87:58:8e:2a:bf:ae:a9:
                    d2:85:5e:9e:d0:26:48:ec:96:64:29:e7:fc:00:f7:
                    00:c2:a0:46:c8:15:2f:05:6f:b4:71:a4:a8:f4:a7:
                    d9:7a:dc:29:c8:b5:69:35:45:7f:1c:98:b7:71:9f:
                    6c:e7:12:16:53:11:ad:cc:44:72:a3:2a:09:57:d8:
                    ca:49:3b:af:41:94:fc:9a:77:c2:8e:53:f6:f0:49:
                    17:5d:3c:51:98:aa:e8:73:d1:62:90:0d:b0:c0:40:
                    5a:a0:8d:6a:93:94:b0:0a:71:08:c9:c9:46:44:f6:
                    6b:86:b0:4a:96:db:b8:f2:88:66:9c:fd:c4:2e:4e:
                    91:71:9f:a2:0a:ce:c8:f3:04:0f:66:8c:99:8f:83:
                    c5:77:a9:31:e1:9b:d5:2b:9b:1c:ed:a9:1e:82:11:
                    e0:4b:12:2e:07:90:de:6e:99:c9:5b:bb:39:bd:6b:
                    0b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:55:98:82:9A:A8:31:E9:BF:32:2C:4C:8C:AD:77:12:34:8E:69:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/445dc708-e349-357e-9e0e-d4c6a7fcaaa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.90.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:6f:e3:93:5f:3e:74:81:7c:c4:c2:d3:dd:ea:93:85:83:db:
         99:2e:d8:37:91:14:dd:1c:9c:0d:ba:a3:74:fa:47:e0:9b:95:
         9e:70:a8:b8:c8:a2:89:93:f0:1f:d8:14:fa:9a:88:81:20:b0:
         94:14:c0:9f:b6:c0:f7:75:e6:82:63:de:7c:bf:a7:66:7f:91:
         54:e8:01:c0:bf:a8:7b:66:a4:aa:43:c6:06:2f:fd:2f:f3:38:
         db:07:8c:d4:a8:60:cb:90:64:20:e1:ec:0f:f0:34:86:9b:1f:
         2e:81:03:a2:28:15:62:87:8e:d8:5d:1d:09:ff:cc:53:0c:db:
         6d:31:f6:37:41:31:c6:b6:ee:34:8d:b0:53:a0:f5:ae:14:b2:
         d6:da:1d:c3:5a:2b:c8:5b:76:ad:93:60:e4:81:2e:73:18:b4:
         48:44:24:11:80:7d:56:2c:22:0f:95:4b:46:98:fa:b5:f7:68:
         38:0d:5b:4b:de:f7:5f:d9:a7:6a:6e:95:bf:7b:51:aa:53:36:
         df:d1:dd:68:9e:34:38:a7:15:4f:04:19:02:2c:a0:89:a8:9a:
         55:bc:a3:dd:0b:4b:ad:25:d3:ca:ad:8f:52:20:28:c9:65:74:
         08:ce:0a:f6:cc:c2:92:75:e7:73:04:79:24:15:71:0d:34:13:
         b1:34:ad:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----