Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ac4c26d6-e25c-3f92-a411-d24db0ed3472.roa
File:                     ac4c26d6-e25c-3f92-a411-d24db0ed3472.roa (raw, json)
Hash identifier:          LYs+aLGgt5u3kw8GSv2MbyOVzMRRhZuzny/LBMBMZko=
Subject key identifier:   6F:C3:48:A8:CA:C2:6F:50:E8:A0:94:C9:9D:A4:CF:87:DC:6C:71:4D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858406B1EA2D425E48E715BB22B00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ac4c26d6-e25c-3f92-a411-d24db0ed3472.roa
Signing time:             Fri 30 Dec 2022 12:00:00 +0000
ROA not before:           Fri 30 Dec 2022 12:00:00 +0000
ROA not after:            Sat 04 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        18.180.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6b:1e:a2:d4:25:e4:8e:71:5b:b2:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 30 12:00:00 2022 GMT
            Not After : Feb  4 05:00:00 2023 GMT
        Subject: CN=3be2fdbd-f64d-4d13-8fd9-046572dac6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:12:72:69:da:a3:ec:4c:49:db:f8:d7:47:d0:
                    43:14:83:13:2c:54:d7:26:20:14:5f:1e:6c:fe:a3:
                    b2:19:fc:a8:3d:81:60:17:5a:11:28:15:3a:09:14:
                    af:8a:d6:ca:75:bf:54:f6:a3:cc:b2:4a:4e:f1:9b:
                    00:42:54:52:c9:80:98:1a:3a:5d:96:46:7f:1d:fc:
                    80:70:d2:60:04:ca:5c:13:f1:d8:90:44:ad:17:04:
                    81:59:b0:4d:34:99:9e:79:2d:c1:c9:ea:aa:f0:79:
                    e4:13:d3:9f:59:f5:de:1d:36:2c:6d:dd:32:dd:c9:
                    f9:33:d5:d7:5d:94:ea:e7:2d:df:be:31:76:a2:d5:
                    1b:0e:96:ec:ec:f4:13:06:e4:a3:95:3c:1a:46:86:
                    d5:f9:16:75:00:2d:eb:da:28:68:82:e7:f8:22:53:
                    1d:f0:19:c1:9c:99:01:68:4f:8c:87:73:a0:ec:b5:
                    c8:2b:72:35:38:67:e5:92:e2:a0:24:6b:12:57:8a:
                    05:49:8f:70:76:56:65:94:96:e8:a6:99:df:62:17:
                    02:0e:7b:0a:a4:96:57:d3:32:9e:9d:f8:6f:98:ac:
                    23:9b:52:d7:93:a1:41:db:8c:d2:f4:eb:fd:fa:be:
                    f2:b0:44:ae:61:c4:1b:6b:14:7e:86:e9:48:5b:f8:
                    8c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C3:48:A8:CA:C2:6F:50:E8:A0:94:C9:9D:A4:CF:87:DC:6C:71:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ac4c26d6-e25c-3f92-a411-d24db0ed3472.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.180.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:d4:3e:02:eb:d6:9b:fd:7f:48:ff:04:a7:bf:2a:3e:6b:a8:
         7f:fd:aa:ff:e5:a5:d2:0b:6a:78:34:27:4e:d2:2b:4a:2d:ff:
         91:f2:b3:26:8b:70:d9:b9:c0:21:63:4e:6c:4e:35:47:6a:92:
         68:b6:41:cd:0c:ad:c8:d4:f3:7b:6a:0b:98:a4:ea:da:80:09:
         69:1c:8e:cc:5d:bd:96:11:d7:c7:85:e3:77:59:c0:13:88:49:
         8a:07:a1:46:84:eb:e6:18:aa:da:5b:b5:aa:84:e2:ac:f8:3a:
         73:59:be:f6:b1:79:67:38:21:6b:83:1c:60:b4:45:36:d9:55:
         51:5f:b2:76:75:cb:70:d8:27:88:ac:6d:bc:47:6b:67:fc:c1:
         82:4e:80:a1:53:c4:3e:e4:ab:4e:6e:2f:8a:5c:4a:4c:e8:0e:
         26:31:57:2f:2a:d3:8b:1f:a4:de:05:79:5b:fd:0a:91:b1:ee:
         ac:25:44:af:83:ad:b5:90:ec:b7:d6:9d:7c:a3:9d:2d:dc:be:
         83:a1:74:92:1a:0a:35:ab:de:ae:ec:85:11:f7:a0:95:49:13:
         71:80:c7:c1:9e:de:08:4c:31:1a:56:3e:51:86:3f:e5:bd:68:
         3d:ef:92:8e:1a:33:a3:6d:2b:ee:18:c7:f1:8e:7f:2c:da:9f:
         b4:fe:85:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----