Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9caa5ce8-698c-381c-af11-4ad61d058015.roa
File:                     9caa5ce8-698c-381c-af11-4ad61d058015.roa (raw, json)
Hash identifier:          nc8Rh4jwTYrG9GbVk6QF0pgMQZ+YA65YSq5doOoFXCo=
Subject key identifier:   15:2A:DD:6D:48:1C:66:F1:20:10:1B:1C:4E:57:D9:9C:63:07:6F:8E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858406CEC70B90A01629841F4C900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9caa5ce8-698c-381c-af11-4ad61d058015.roa
Signing time:             Sat 31 Dec 2022 12:00:00 +0000
ROA not before:           Sat 31 Dec 2022 12:00:00 +0000
ROA not after:            Sun 05 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        18.136.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6c:ec:70:b9:0a:01:62:98:41:f4:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 31 12:00:00 2022 GMT
            Not After : Feb  5 05:00:00 2023 GMT
        Subject: CN=6f1be7f3-9470-4746-a77e-db0985466999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d9:1b:8b:6b:58:64:0d:ca:5d:5d:bb:5e:ad:
                    b9:34:a1:ce:a1:f3:2c:27:d4:91:2d:1a:89:db:81:
                    a8:00:37:aa:63:31:d2:35:62:e9:5f:b0:da:84:c7:
                    48:19:b5:2e:85:88:6d:55:21:06:17:28:0b:91:01:
                    83:13:1d:f9:78:a9:ac:1b:59:ad:3c:7c:89:e9:09:
                    7f:1d:10:77:bd:90:38:21:c3:42:3c:ff:69:32:fb:
                    0f:ca:e8:4d:f0:62:b2:23:8e:47:46:33:78:4e:20:
                    9e:30:3b:e5:d4:85:0a:e6:ba:8a:3f:5b:1b:c5:0d:
                    e2:65:2d:c9:8a:c0:6e:29:4b:f8:84:77:ab:a1:6f:
                    a6:6a:e1:78:1f:44:ad:56:44:b2:9e:db:62:58:25:
                    da:4e:f3:7d:5c:43:3d:b6:22:1c:62:1a:d4:f0:9c:
                    c0:d5:9d:c5:84:2e:d9:c6:e9:e2:93:29:af:56:a0:
                    5c:b4:55:30:1f:ad:f0:14:39:42:22:c4:50:f5:83:
                    bb:19:d8:f0:51:66:6e:bf:85:66:df:75:a6:d4:7a:
                    d8:34:84:9f:4a:85:b5:04:6d:b1:cc:8c:e6:02:44:
                    d7:03:bc:71:55:5a:20:71:1b:91:4b:c5:9a:1b:cd:
                    e9:07:d3:50:35:86:76:09:27:94:b0:34:99:62:42:
                    f7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2A:DD:6D:48:1C:66:F1:20:10:1B:1C:4E:57:D9:9C:63:07:6F:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9caa5ce8-698c-381c-af11-4ad61d058015.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.136.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:e8:d3:d3:1b:de:27:0a:0b:71:aa:b0:93:60:b9:69:ac:89:
         b4:40:d6:97:b1:e9:36:84:40:6f:6e:40:77:63:40:f9:27:c2:
         f2:1a:21:cd:d1:43:54:35:c7:8d:1a:b4:d2:bd:23:c9:b3:3c:
         08:17:18:5d:fc:56:e9:f2:fa:f4:20:5a:f1:36:8f:15:08:5b:
         ad:70:49:79:a7:b5:59:54:41:b2:46:6d:25:1f:03:06:c3:52:
         53:ce:4a:64:a6:e5:be:13:45:b4:21:d9:6f:75:38:d4:9f:b3:
         a8:18:07:02:70:62:64:03:95:3a:f2:aa:c0:14:75:4b:90:87:
         06:17:43:79:a2:1a:e3:8c:9d:b4:32:2e:7d:ee:12:41:b8:cd:
         63:8d:80:9a:2d:23:a2:f1:4f:e5:22:7c:7e:74:6b:55:7a:06:
         d8:8b:29:6b:a5:c7:3f:cd:e1:90:05:b4:79:c6:e9:07:86:76:
         1a:2d:e9:cf:a3:26:81:27:bf:80:fa:e3:68:2b:1f:ce:c7:0a:
         b8:73:a1:19:c8:54:f4:d5:68:8b:bb:44:49:14:6d:fa:f9:eb:
         5b:eb:da:cc:72:c9:81:1d:02:f5:6a:74:62:a6:96:80:92:f8:
         02:bd:10:a7:d5:4e:59:57:78:4a:75:54:e0:88:2a:8b:9e:1c:
         c7:14:06:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----