Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/97b99a48-c67f-368c-bb40-e3d61cf4d962.roa
File:                     97b99a48-c67f-368c-bb40-e3d61cf4d962.roa (raw, json)
Hash identifier:          mAXo8hYJ4r3ykuAsqXd3EVrAqtPIJOrmnno4EG9Bq/8=
Subject key identifier:   FE:A5:DB:EA:3B:39:F5:AD:03:CD:CC:90:B3:35:52:56:D3:7E:18:19
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584095510C7C9FD1D045F9BCE780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/97b99a48-c67f-368c-bb40-e3d61cf4d962.roa
Signing time:             Sat 14 Jan 2023 12:00:00 +0000
ROA not before:           Sat 14 Jan 2023 12:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        18.231.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:95:51:0c:7c:9f:d1:d0:45:f9:bc:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 14 12:00:00 2023 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=4ebb7e0e-4686-4b3b-a17c-d12b84a6dcc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3b:5d:a5:46:92:d8:3f:a5:28:9d:a5:dd:6d:
                    73:00:23:ad:a2:3a:ba:1a:93:d7:28:17:21:6c:b2:
                    a0:da:b3:f3:cf:47:1b:ad:0f:98:f8:66:d2:11:00:
                    9d:67:3a:7a:74:af:91:e8:8c:c0:ba:4a:80:9a:a0:
                    03:3f:8b:1e:92:6d:68:c0:1b:21:df:ec:b5:bf:0d:
                    41:80:74:e5:da:11:78:79:74:a8:eb:ae:ac:8a:dc:
                    b6:7c:69:d6:78:0b:b6:8f:4b:82:09:bf:58:f1:96:
                    a9:8f:89:99:5d:2e:95:93:81:e8:4f:db:c8:0c:2a:
                    4b:89:da:3a:d2:8c:d2:71:94:fd:3e:df:5e:f6:e2:
                    f0:cc:88:8a:8c:9d:f9:59:4d:31:cc:fb:b7:26:87:
                    d8:2f:88:bb:61:a4:1b:cf:d6:fb:68:45:3a:30:ab:
                    fe:ad:33:3f:a2:fa:da:ea:9a:54:28:8e:95:90:ea:
                    d4:c8:67:fe:8b:5e:b2:6d:d5:09:2e:3b:87:dd:df:
                    00:fa:45:53:dd:d0:13:21:63:d1:d2:26:ab:71:22:
                    b0:c2:8a:47:81:11:3d:8d:b5:8a:44:80:5f:9f:f4:
                    16:53:70:3f:72:94:dc:46:b6:82:81:b1:7d:bc:db:
                    bb:70:8b:49:6c:22:be:8b:cb:4f:c7:46:c2:7e:d8:
                    dd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A5:DB:EA:3B:39:F5:AD:03:CD:CC:90:B3:35:52:56:D3:7E:18:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/97b99a48-c67f-368c-bb40-e3d61cf4d962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.231.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:73:6f:b5:f7:09:1d:38:a4:f0:35:e2:21:cc:57:be:8e:a5:
         71:1b:1e:6a:59:7e:16:3c:e3:fd:03:3f:49:4b:fe:01:ba:5d:
         3a:49:ab:2e:f1:ea:a8:15:72:df:45:e4:35:cb:ca:3d:2a:38:
         4e:ca:12:8c:55:1d:7c:17:e5:b5:09:da:36:82:e9:d0:82:1a:
         8f:f6:d4:96:ab:cb:0e:09:96:e7:0c:da:b0:f3:e2:24:4d:db:
         f3:09:fe:6a:12:0d:7c:29:b7:82:68:43:06:10:7b:64:82:25:
         a3:f4:5c:70:66:34:0d:d8:71:b3:aa:a0:15:31:8a:f2:cb:db:
         03:6f:82:38:74:e4:00:b3:c5:76:fc:64:41:55:b0:e3:c4:88:
         de:33:74:37:d0:b7:da:bb:24:bb:1c:d8:37:0d:6a:89:53:19:
         18:b4:3b:8c:e0:3e:26:6b:73:17:2f:d3:a9:1b:a6:62:76:88:
         19:52:f2:a0:6e:af:93:47:d8:57:87:cf:ec:c5:87:d6:3f:35:
         01:3f:7b:c2:52:6f:39:de:88:9c:c0:a5:2b:62:c4:4d:c3:a0:
         5f:74:b5:09:83:5f:a8:d0:96:6c:d6:ca:e5:67:8f:6e:90:58:
         d7:72:53:ba:cc:3f:22:51:19:71:ea:f1:6a:98:a1:23:d7:f6:
         b6:34:dd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----