Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a596bd5c-5f61-3176-8600-9dfb5ec56cb1.roa
File:                     a596bd5c-5f61-3176-8600-9dfb5ec56cb1.roa (raw, json)
Hash identifier:          4qh2bl4OC/FDubGCknZzeXPTpdyVZyGXmq54JYJGkHI=
Subject key identifier:   D8:46:CF:12:2A:E8:DF:A3:AE:9F:EB:30:90:C1:6A:08:3A:61:5A:84
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584095587A0439819EEC90E5E4C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a596bd5c-5f61-3176-8600-9dfb5ec56cb1.roa
Signing time:             Sat 14 Jan 2023 12:00:00 +0000
ROA not before:           Sat 14 Jan 2023 12:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        18.253.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:95:58:7a:04:39:81:9e:ec:90:e5:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 14 12:00:00 2023 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=321969bb-5ff6-47fc-b556-735e1e7b8519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ad:21:ee:a2:03:26:b5:86:2c:5c:cb:44:1e:
                    7b:78:9f:1f:ca:ee:d5:e9:59:49:8a:13:31:be:7a:
                    ce:04:25:68:ee:7a:28:0c:6e:f3:87:4f:60:da:d4:
                    10:19:69:40:aa:7c:e6:67:a5:9a:44:8b:ce:24:e5:
                    50:dd:49:ec:0e:38:c4:1b:36:26:e6:5c:ff:3a:33:
                    d6:13:9c:de:80:f2:f1:ef:99:5f:25:a0:c5:16:38:
                    17:db:37:27:54:42:64:3f:0c:ed:8d:a2:a2:4f:82:
                    5f:17:19:54:29:42:53:fb:43:8d:0c:86:fc:23:48:
                    9e:6e:69:67:07:3c:a5:23:91:2a:7d:8c:35:99:70:
                    50:3c:31:2a:16:bb:f5:c4:7a:0a:e2:fb:25:71:30:
                    26:7b:5c:e4:ce:75:ea:3f:f8:66:8d:7f:d9:fb:9f:
                    f2:df:35:42:e5:21:15:5c:8d:51:59:57:64:cd:a2:
                    b5:39:f9:d7:60:2c:dc:ac:89:a2:df:32:ee:4f:bc:
                    a1:9a:09:13:b0:61:b4:6d:5a:71:2b:2c:c8:4e:6c:
                    8b:98:8a:9e:e1:ad:9c:fd:01:0b:fa:ab:d2:f0:e8:
                    fc:62:21:b8:bf:40:15:66:a6:46:64:f0:e8:2e:5e:
                    73:00:1e:3c:5f:79:9c:c7:55:27:29:1d:31:79:86:
                    d4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:46:CF:12:2A:E8:DF:A3:AE:9F:EB:30:90:C1:6A:08:3A:61:5A:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a596bd5c-5f61-3176-8600-9dfb5ec56cb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.253.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:f5:2f:af:84:64:8c:03:4f:09:18:a4:0b:24:6c:a9:8c:dc:
         1c:67:9a:88:27:0d:4e:1a:ca:36:ab:97:82:d4:69:ed:0e:52:
         a0:dd:d2:4e:23:2d:4a:71:0b:22:c2:53:94:24:cc:fd:a9:75:
         07:f7:97:50:35:52:2e:dc:f4:d0:8f:81:4c:0d:a9:05:68:e4:
         4d:35:f4:11:a7:c9:60:11:6a:ab:f2:0e:6e:4e:97:80:f2:88:
         eb:11:db:ab:78:fa:03:05:c9:e1:48:67:36:d5:86:7f:93:21:
         ab:39:82:ea:3e:a7:d5:20:11:80:5c:1d:2a:51:23:91:eb:1c:
         f8:9d:ca:51:62:5b:0f:37:a8:43:1b:3d:60:9f:5c:ad:5f:c9:
         20:9b:1c:03:fc:36:52:a8:68:06:30:e1:0b:cc:e8:93:eb:ad:
         20:7c:23:89:51:e7:1e:99:75:1d:58:9c:4a:4c:40:e3:a4:7c:
         58:8e:b4:21:fb:30:24:b3:85:fb:f5:7b:8f:0f:87:18:4c:4b:
         84:e3:3d:c5:33:ad:04:34:fa:f5:18:93:4f:a1:57:5c:9d:90:
         0b:2e:7f:cb:0b:4d:77:96:38:1d:e3:6f:1f:0b:ed:7d:28:c6:
         14:4a:3e:87:f8:73:58:a4:5b:1c:f1:e7:de:b3:21:d1:04:a5:
         29:79:45:a9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECVWHoEOYGe7JDl5MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDExNDEyMDAwMFoXDTIzMDIxOTA1MDAwMFowLzEtMCsGA1UEAxMk
MzIxOTY5YmItNWZmNi00N2ZjLWI1NTYtNzM1ZTFlN2I4NTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm60h7qIDJrWGLFzLRB57eJ8fyu7V6VlJihMx
vnrOBCVo7nooDG7zh09g2tQQGWlAqnzmZ6WaRIvOJOVQ3UnsDjjEGzYm5lz/OjPW
E5zegPLx75lfJaDFFjgX2zcnVEJkPwztjaKiT4JfFxlUKUJT+0ONDIb8I0iebmln
BzylI5EqfYw1mXBQPDEqFrv1xHoK4vslcTAme1zkznXqP/hmjX/Z+5/y3zVC5SEV
XI1RWVdkzaK1OfnXYCzcrImi3zLuT7yhmgkTsGG0bVpxKyzITmyLmIqe4a2c/QEL
+qvS8Oj8YiG4v0AVZqZGZPDoLl5zAB48X3mcx1UnKR0xeYbUjwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNhGzxIq6N+jrp/rMJDBagg6YVqEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYTU5NmJkNWMtNWY2MS0z
MTc2LTg2MDAtOWRmYjVlYzU2Y2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEv0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgvUvr4RkjANPCRikCyRsqYzcHGeaiCcNThrKNquXgtRp7Q5SoN3STiMt
SnELIsJTlCTM/al1B/eXUDVSLtz00I+BTA2pBWjkTTX0EafJYBFqq/IObk6XgPKI
6xHbq3j6AwXJ4UhnNtWGf5MhqzmC6j6n1SARgFwdKlEjkesc+J3KUWJbDzeoQxs9
YJ9crV/JIJscA/w2UqhoBjDhC8zok+utIHwjiVHnHpl1HVicSkxA46R8WI60Ifsw
JLOF+/V7jw+HGExLhOM9xTOtBDT69RiTT6FXXJ2QCy5/ywtNd5Y4HeNvHwvtfSjG
FEo+h/hzWKRbHPHn3rMh0QSlKXlFqQ==
-----END CERTIFICATE-----