Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9dca02b7-31fa-3888-97bf-4157a72c8471.roa
File:                     9dca02b7-31fa-3888-97bf-4157a72c8471.roa (raw, json)
Hash identifier:          kgcGjE5uw0DZz+Fp8diRMo5aZNcbDbSsN2isPMdD4UM=
Subject key identifier:   03:98:6D:68:AF:97:C7:7D:1E:0F:B9:41:6E:E2:2C:53:EF:07:36:FE
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DAC636855D07C5F51ECD6AD40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9dca02b7-31fa-3888-97bf-4157a72c8471.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.122.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ac:63:68:55:d0:7c:5f:51:ec:d6:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=72d2e813-69a7-4607-9a73-4a7869dd1116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b0:da:cf:a7:cd:3c:8c:92:64:7e:46:18:5a:
                    6b:39:97:3f:15:21:dc:1f:af:af:60:3a:6c:63:41:
                    b1:ea:8c:fa:0d:ce:e7:24:68:84:8a:1e:83:fd:25:
                    7e:49:88:9c:3c:ca:07:00:46:52:69:06:89:f4:9b:
                    53:cd:19:73:25:5a:a3:ad:10:77:30:10:15:79:c9:
                    2e:36:bd:13:d8:b8:72:66:d9:1a:54:34:e2:b3:99:
                    ce:61:e7:8a:fa:0e:87:4f:ef:b8:3f:38:c0:1b:f2:
                    57:35:0a:d2:76:5b:40:c4:a3:fd:1e:b7:9e:ad:b5:
                    f9:a6:1e:ed:11:96:5f:2c:84:cd:79:db:df:14:9a:
                    32:06:2c:d4:09:88:c4:19:e3:0c:ba:fc:fe:5c:55:
                    f0:e5:ea:64:74:2b:9d:32:68:fd:d3:66:4e:55:de:
                    fa:e7:0a:df:36:78:6a:0e:e1:8a:f8:d5:c1:c7:7e:
                    fc:7b:df:ad:d1:18:cc:89:4e:35:82:94:5c:a0:1e:
                    40:e8:74:eb:00:14:ac:52:57:80:a7:34:e3:88:27:
                    db:93:0a:e6:f3:ff:aa:2a:c7:4f:08:18:26:f4:06:
                    f1:18:0c:12:0f:c3:f9:18:bb:71:77:e1:33:20:e2:
                    a6:53:fb:3a:f7:1c:44:c8:3d:30:6e:6e:63:e0:e7:
                    e6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:98:6D:68:AF:97:C7:7D:1E:0F:B9:41:6E:E2:2C:53:EF:07:36:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9dca02b7-31fa-3888-97bf-4157a72c8471.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.122.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:d9:1c:2e:f8:70:fa:2b:46:e8:71:15:94:36:af:6d:47:cb:
         0a:af:96:99:e5:01:af:b0:99:24:be:da:13:d2:7f:27:e6:8c:
         32:fb:66:dd:af:ee:5c:e4:e2:1c:d1:bc:7c:57:79:26:c1:ff:
         46:ee:a1:f7:33:e4:79:84:d3:f5:51:fe:cf:72:e6:ca:9e:3c:
         50:7d:0e:88:f6:45:79:8f:81:26:b0:8b:9e:52:f3:46:31:6c:
         1c:66:7f:a7:92:f2:95:f8:aa:b5:6a:da:a5:9f:97:ff:0e:ee:
         7d:66:65:5d:5f:e2:5d:e2:f9:5b:4a:91:62:f5:62:90:3e:74:
         c8:b6:5d:83:be:b5:24:16:97:16:0c:c6:0e:48:ed:2b:56:aa:
         c2:66:28:fa:5f:e8:12:76:39:86:83:36:10:d6:cb:82:ea:16:
         c5:6d:ef:a1:fb:5a:23:10:c9:a1:4a:f4:4c:60:ef:ab:a0:40:
         c5:fc:95:68:18:7b:2b:10:4d:6a:bf:2a:95:31:fb:40:32:d3:
         1e:92:91:2d:3f:85:e8:80:96:6a:52:0b:98:3a:01:60:72:3f:
         30:de:c7:23:2c:e3:47:f6:dd:4e:c7:68:08:a5:d0:77:d4:b2:
         08:dd:04:92:6c:c3:e2:1e:5d:81:b0:96:14:ea:ed:1d:08:fc:
         ca:c7:e9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----