Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9b578d7e-84c3-3c2a-afc6-ce6e21bfd7d7.roa
File:                     9b578d7e-84c3-3c2a-afc6-ce6e21bfd7d7.roa (raw, json)
Hash identifier:          OTe1cEJqAiD893TMLjr9ZlK5HmNUzQ2XvJowfbDQ1h8=
Subject key identifier:   B8:2A:D7:72:14:72:17:80:ED:46:3B:77:0F:16:69:B2:82:24:3A:4D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858406A383176AC38BB08A5010CC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9b578d7e-84c3-3c2a-afc6-ce6e21bfd7d7.roa
Signing time:             Fri 30 Dec 2022 12:00:00 +0000
ROA not before:           Fri 30 Dec 2022 12:00:00 +0000
ROA not after:            Sat 04 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        18.230.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6a:38:31:76:ac:38:bb:08:a5:01:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 30 12:00:00 2022 GMT
            Not After : Feb  4 05:00:00 2023 GMT
        Subject: CN=70d46861-3ffb-41e9-b802-12da7bb28c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ed:c3:75:c5:b7:a0:98:9e:82:5a:d2:49:32:
                    7b:46:99:e3:4b:fc:e4:71:f9:6e:87:45:11:08:0e:
                    94:10:17:2a:bc:79:22:75:fd:49:8e:3a:58:dd:63:
                    89:de:c2:83:6a:6f:1e:88:2c:7f:ea:df:2f:5e:37:
                    f1:0e:bb:97:dc:17:eb:1b:cb:f2:ab:79:5f:d3:72:
                    01:4b:d8:9e:26:a1:83:41:9e:60:88:ec:9b:b3:51:
                    30:4f:19:ab:23:12:4a:4e:30:a3:37:6d:fc:1e:ec:
                    57:d2:b6:ba:21:7d:9d:33:54:b3:26:f3:87:70:a0:
                    80:97:2a:f5:41:e2:b4:b4:66:d7:c5:7f:a5:87:ee:
                    1d:69:27:82:21:c3:5f:bf:2a:e8:47:48:93:11:24:
                    46:89:e5:1b:38:bd:ca:52:0e:e0:c7:c3:ca:8a:82:
                    5a:e1:c6:5d:ef:1b:b7:96:db:38:76:7d:a5:ea:5f:
                    73:19:99:33:51:dd:9b:db:be:32:9a:af:fb:b2:6d:
                    11:57:5d:88:c1:8b:31:10:95:69:84:ec:26:07:00:
                    e4:6c:82:6f:a7:58:b0:2a:88:81:e0:7b:d3:64:e3:
                    09:a9:b6:55:8e:51:11:4c:6c:f8:64:34:0d:6b:e5:
                    5f:a9:71:4f:11:61:90:38:5c:9f:e1:39:76:cd:99:
                    60:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2A:D7:72:14:72:17:80:ED:46:3B:77:0F:16:69:B2:82:24:3A:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9b578d7e-84c3-3c2a-afc6-ce6e21bfd7d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.230.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f7:a6:90:a9:87:eb:32:86:5a:19:88:bb:1c:32:79:f1:e8:
         4b:95:5f:d8:99:fb:fe:cd:57:c2:e8:b8:c2:6d:87:31:9a:58:
         c3:e2:6f:35:55:55:8a:d5:88:14:b1:01:4f:2e:64:7f:0a:28:
         30:de:46:7a:be:cc:f3:66:51:cc:23:c6:36:4d:4b:54:e8:9f:
         56:fb:b8:71:0f:ea:63:13:15:b5:95:70:47:a2:6a:8a:76:11:
         48:66:c0:03:70:26:f7:cd:2e:b9:6e:4d:14:95:44:e2:20:b4:
         23:f7:60:62:20:57:50:37:cf:94:29:4d:12:3a:5c:c7:d6:db:
         37:70:c1:10:c9:6b:1f:22:61:3d:b0:fa:c6:53:3d:c8:d4:b9:
         8a:bf:62:0b:a1:87:11:93:7c:80:0c:ba:f1:42:d2:38:7c:c5:
         0d:19:fd:7e:81:af:70:48:d6:26:6e:4d:04:39:e1:6f:35:80:
         26:f3:c4:b2:21:06:6b:ab:89:bd:0a:96:c6:3b:26:49:51:73:
         53:49:e4:a4:b9:19:b2:f1:09:3e:ee:20:7d:47:6c:7c:99:ca:
         ee:9d:44:1c:92:3c:03:8a:b3:df:97:3a:68:c1:1e:2c:8f:f6:
         5b:3d:b8:5e:9c:46:15:f2:ab:fc:be:e5:17:ec:a5:8d:85:3a:
         92:06:55:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----