Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8733c334-d4ef-3596-9b93-f9757463ad4f.roa
File:                     8733c334-d4ef-3596-9b93-f9757463ad4f.roa (raw, json)
Hash identifier:          W3GL5zOhKMGm2p839W3AMm5tWm57NPOvjKOru5szl1A=
Subject key identifier:   25:AB:38:6E:D3:89:8D:6C:CA:B9:F3:B7:80:1E:0A:B9:5C:D7:85:62
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DCF0D8163C795E006C2E079F0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8733c334-d4ef-3596-9b93-f9757463ad4f.roa
Signing time:             Thu 05 May 2022 12:00:00 +0000
ROA not before:           Thu 05 May 2022 12:00:00 +0000
ROA not after:            Fri 10 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.201.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cf:0d:81:63:c7:95:e0:06:c2:e0:79:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  5 12:00:00 2022 GMT
            Not After : Jun 10 04:00:00 2022 GMT
        Subject: CN=16193df0-03c0-4e33-b68b-c6bf67adb9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:47:93:b2:02:74:bd:ea:f1:96:14:01:09:e9:
                    d4:17:6b:e6:6b:67:2b:36:4d:9c:a7:ec:89:e2:7b:
                    b3:40:8c:28:32:0f:e9:5f:af:55:72:84:9b:d0:22:
                    91:d1:d3:bf:e9:03:1f:4b:d1:c3:ae:6f:66:aa:55:
                    29:d0:fa:88:31:5a:ce:9b:b0:2f:e5:1a:8b:9e:34:
                    7a:32:49:9e:60:35:33:f7:49:a2:b5:b9:09:23:00:
                    a3:e9:c6:b9:1f:39:e5:88:f0:ec:c5:c9:fa:34:47:
                    9a:2d:4e:ce:8c:ab:dd:bb:6a:a4:ea:82:4a:ce:cc:
                    28:8e:03:50:9c:5d:fd:0d:0b:47:12:b9:cf:7a:27:
                    b9:88:1d:71:50:e1:f0:9b:62:e2:2c:86:7a:c7:d9:
                    a6:d8:ab:02:13:cc:59:67:61:1c:c8:58:19:14:44:
                    ad:06:2a:a5:0a:76:06:c7:18:5a:0d:ee:e7:2b:c8:
                    d0:77:9d:36:1c:46:2d:f3:8d:9d:33:99:42:be:fa:
                    c1:ff:d7:cd:c3:3f:72:54:2f:c5:ee:cb:3c:75:be:
                    80:49:60:e3:e0:b4:61:45:b8:c0:88:59:9a:a7:f9:
                    d1:b8:8d:8c:87:7f:4e:9d:d8:63:b9:2d:45:12:18:
                    83:8f:9f:52:39:e9:36:63:2e:3b:26:3d:7a:38:49:
                    2f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AB:38:6E:D3:89:8D:6C:CA:B9:F3:B7:80:1E:0A:B9:5C:D7:85:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8733c334-d4ef-3596-9b93-f9757463ad4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.201.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:3c:b7:81:c3:de:1b:4c:2a:89:7f:0f:79:a7:55:e6:77:57:
         a3:3f:58:14:81:3c:bc:a2:22:76:9a:4b:13:df:1f:96:14:49:
         13:0a:2d:67:a9:e1:2c:f9:af:81:e2:b9:38:67:43:f5:9f:96:
         02:f8:24:85:59:36:39:64:f3:dc:46:5a:8e:ef:27:ac:20:ff:
         9d:f8:62:09:f4:60:55:69:ba:6d:ce:9c:43:1e:7e:a3:6a:92:
         73:9b:f4:85:ab:24:3b:84:72:f9:c6:ee:ce:4b:7e:f2:c9:41:
         ba:09:eb:29:7a:5f:01:d0:4e:c7:8d:ad:4b:e1:b1:05:5c:f1:
         3d:c1:2f:91:95:0e:1b:05:ca:15:4c:44:ff:d0:a2:06:c5:4d:
         aa:5d:53:0b:07:f7:f7:ce:6a:b1:f1:03:e0:ec:6b:9c:a4:9d:
         35:61:f5:81:da:c3:b2:0c:6f:01:b1:ce:fa:73:22:e9:6c:e3:
         69:38:09:4b:02:dc:d6:81:46:8a:44:17:6d:f6:72:9d:9a:70:
         1d:7f:3b:b9:78:4e:c9:69:37:52:64:bf:b1:78:cd:2a:93:59:
         ff:88:21:80:b0:72:7e:21:27:9b:92:60:09:35:f5:50:2f:46:
         3d:d1:eb:4b:4b:5f:48:c4:16:cb:cc:59:3d:c4:f7:ab:b5:59:
         3c:df:6f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----