Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a60b910f-4960-3c62-acc7-adad83e582f9.roa
File:                     a60b910f-4960-3c62-acc7-adad83e582f9.roa (raw, json)
Hash identifier:          bU30QJqsfVx0gCyLhbvv4qMpD4vgSTTjhmB9563BylU=
Subject key identifier:   14:61:60:79:0B:EA:17:AF:3C:A1:8D:E1:F5:13:DE:A3:33:88:98:E1
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858406A293B4618D021252D8B6680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a60b910f-4960-3c62-acc7-adad83e582f9.roa
Signing time:             Fri 30 Dec 2022 12:00:00 +0000
ROA not before:           Fri 30 Dec 2022 12:00:00 +0000
ROA not after:            Sat 04 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        18.204.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6a:29:3b:46:18:d0:21:25:2d:8b:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 30 12:00:00 2022 GMT
            Not After : Feb  4 05:00:00 2023 GMT
        Subject: CN=7fa077e5-fa98-4fe1-a32d-6938affae592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9b:e5:a7:e6:67:b1:b8:a8:8a:f0:bf:e0:f5:
                    74:cf:a0:fa:f6:a5:45:06:1a:4f:50:92:d4:a8:1d:
                    6c:39:c7:18:21:ee:62:3e:ca:d7:ae:e9:aa:36:67:
                    04:97:0e:57:5a:3c:0e:00:f0:a5:98:a0:c5:2d:3a:
                    52:1f:ff:ec:90:44:b5:c1:ed:07:26:d5:94:7a:77:
                    32:76:62:5a:b1:95:db:06:6c:f0:63:38:03:93:0f:
                    b0:30:5c:07:b6:dd:05:16:85:70:f1:23:3b:f7:78:
                    d6:7b:44:cd:9b:60:09:09:0a:23:a9:2f:21:13:b2:
                    bf:61:06:49:ab:7a:60:f2:eb:4e:a0:11:6c:b5:57:
                    08:a4:bb:00:c2:74:af:ff:d2:63:06:a3:d6:dc:cf:
                    68:85:4f:7c:16:6f:34:4f:25:f9:c2:f0:b6:68:70:
                    94:78:fe:46:1f:ae:66:16:b4:6a:d1:65:b8:9c:98:
                    10:5f:9e:ae:92:43:08:28:ef:57:e5:a1:91:a8:28:
                    e7:af:c6:79:70:df:60:3b:f3:cf:af:34:63:0c:06:
                    7d:59:d0:31:05:61:d1:a3:ff:b9:06:59:0e:af:b1:
                    c2:a8:37:33:b1:01:84:c3:b6:b5:04:9c:2b:e3:1e:
                    ce:4e:55:40:27:24:9f:1c:34:b2:8b:c5:98:d1:74:
                    f1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:61:60:79:0B:EA:17:AF:3C:A1:8D:E1:F5:13:DE:A3:33:88:98:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a60b910f-4960-3c62-acc7-adad83e582f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.204.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:6a:cb:e9:71:17:37:af:88:53:d0:00:31:78:df:3b:96:77:
         8f:07:bd:55:b8:7d:51:13:b0:b7:6e:d5:3c:47:72:01:9e:ef:
         b3:30:7f:cd:96:17:aa:b1:3b:1c:98:0f:51:6e:db:7c:c1:4d:
         1f:1f:ef:10:5e:42:62:81:a2:9f:d5:18:e9:fd:26:41:3d:e0:
         0b:65:f0:87:26:47:ee:c8:a1:cf:53:2a:d0:67:14:a1:2f:4f:
         08:da:57:b6:1c:c8:9f:65:0d:a4:86:be:63:1f:6e:22:56:7c:
         c4:34:3c:78:30:22:da:aa:0e:59:3d:b0:49:c1:e8:68:87:02:
         2b:b9:8d:6e:b6:80:eb:2c:1e:d9:7f:26:43:9b:f2:c8:03:c7:
         00:97:20:9b:d8:a8:5d:69:05:4f:ec:56:82:86:6f:fc:85:40:
         48:17:15:8c:71:0b:3b:31:b2:1a:e0:ec:98:25:5b:74:2b:1e:
         0e:88:05:0a:52:da:34:98:c3:f8:1f:10:81:86:9b:90:7c:22:
         e7:20:ee:26:ff:02:d0:91:e4:a8:b8:79:ea:cd:9d:5b:45:38:
         bc:93:60:04:2a:85:d9:ce:ad:82:b2:74:75:d3:bc:1a:2f:c1:
         0f:6e:50:e6:48:e5:1e:94:c2:2c:e9:86:f2:20:4f:73:2f:e2:
         86:ef:3d:cd
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBqKTtGGNAhJS2LZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIzMDEyMDAwMFoXDTIzMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
N2ZhMDc3ZTUtZmE5OC00ZmUxLWEzMmQtNjkzOGFmZmFlNTkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopvlp+ZnsbioivC/4PV0z6D69qVFBhpPUJLU
qB1sOccYIe5iPsrXrumqNmcElw5XWjwOAPClmKDFLTpSH//skES1we0HJtWUency
dmJasZXbBmzwYzgDkw+wMFwHtt0FFoVw8SM793jWe0TNm2AJCQojqS8hE7K/YQZJ
q3pg8utOoBFstVcIpLsAwnSv/9JjBqPW3M9ohU98Fm80TyX5wvC2aHCUeP5GH65m
FrRq0WW4nJgQX56ukkMIKO9X5aGRqCjnr8Z5cN9gO/PPrzRjDAZ9WdAxBWHRo/+5
BlkOr7HCqDczsQGEw7a1BJwr4x7OTlVAJySfHDSyi8WY0XTxdQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBRhYHkL6hevPKGN4fUT3qMziJjhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYTYwYjkxMGYtNDk2MC0z
YzYyLWFjYzctYWRhZDgzZTU4MmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEswwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAAWrL6XEXN6+IU9AAMXjfO5Z3jwe9Vbh9UROwt27VPEdyAZ7vszB/zZYX
qrE7HJgPUW7bfMFNHx/vEF5CYoGin9UY6f0mQT3gC2XwhyZH7sihz1Mq0GcUoS9P
CNpXthzIn2UNpIa+Yx9uIlZ8xDQ8eDAi2qoOWT2wScHoaIcCK7mNbraA6ywe2X8m
Q5vyyAPHAJcgm9ioXWkFT+xWgoZv/IVASBcVjHELOzGyGuDsmCVbdCseDogFClLa
NJjD+B8QgYabkHwi5yDuJv8C0JHkqLh56s2dW0U4vJNgBCqF2c6tgrJ0ddO8Gi/B
D25Q5kjlHpTCLOmG8iBPcy/ihu89zQ==
-----END CERTIFICATE-----