Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bec9fa7b-19fb-31a2-bf1d-bf4cac2e59ba.roa
File:                     bec9fa7b-19fb-31a2-bf1d-bf4cac2e59ba.roa (raw, json)
Hash identifier:          2R44Z9JK+fcrNFEoPq1BtWx3CKbbg6r4pT/0QYPHySE=
Subject key identifier:   CC:55:45:E3:8A:33:21:C9:F8:38:91:EC:9D:14:AB:0F:2C:C9:58:00
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858406BC29B0B24B664448A624880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bec9fa7b-19fb-31a2-bf1d-bf4cac2e59ba.roa
Signing time:             Fri 30 Dec 2022 12:00:00 +0000
ROA not before:           Fri 30 Dec 2022 12:00:00 +0000
ROA not after:            Sat 04 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        18.182.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6b:c2:9b:0b:24:b6:64:44:8a:62:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 30 12:00:00 2022 GMT
            Not After : Feb  4 05:00:00 2023 GMT
        Subject: CN=c67f23c7-0a86-46a4-9eb5-c94081cde45e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ba:04:fe:ce:c4:1d:66:42:86:73:d4:18:93:
                    ef:c7:9b:d3:b3:88:48:76:c8:3f:a5:3b:70:ab:6f:
                    bc:d5:92:37:a4:4c:44:29:b5:52:27:bd:a3:ef:5b:
                    29:25:a5:2d:85:2a:c0:48:89:52:cc:b0:c6:2f:07:
                    f2:87:0f:74:51:bd:ee:3f:0f:13:ee:b7:54:46:8e:
                    e8:4c:93:78:e3:39:dc:95:a5:f8:c9:03:00:61:a7:
                    54:45:77:fb:23:30:7b:a6:53:16:32:40:7b:7c:e4:
                    47:25:94:ee:12:2d:86:6a:a0:d2:56:75:29:6e:d3:
                    64:66:68:fc:0d:4d:86:1a:af:60:e5:c2:92:9e:6b:
                    c4:86:6f:5c:62:c6:c9:14:69:31:a2:ab:47:18:f5:
                    8b:f9:61:07:57:14:71:63:04:ff:5c:da:4d:12:a9:
                    66:33:63:46:b6:a5:6f:19:98:6f:f8:bb:21:d5:a5:
                    78:32:45:8c:fd:a9:15:4e:d0:74:01:d0:43:bf:71:
                    6b:4c:e1:09:5a:6d:4a:f2:03:6d:c6:d4:e6:ca:05:
                    ee:9a:cb:36:71:87:46:70:8f:a6:38:2b:f6:86:0f:
                    cd:41:59:cc:9d:47:0b:9b:43:a3:64:c1:52:fa:45:
                    49:22:76:3f:e9:4b:b2:c1:61:55:91:da:2e:04:aa:
                    3b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:55:45:E3:8A:33:21:C9:F8:38:91:EC:9D:14:AB:0F:2C:C9:58:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bec9fa7b-19fb-31a2-bf1d-bf4cac2e59ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.182.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:46:fe:93:ef:ac:f7:55:e2:dd:2d:c1:c6:76:32:ea:38:e6:
         ba:f3:2f:d6:61:5d:d6:13:60:65:b4:53:47:8d:1c:c8:53:93:
         9d:f6:7a:58:27:df:1e:f1:db:fc:02:32:be:7a:30:75:38:25:
         be:a5:57:16:56:09:4a:bc:07:2f:ba:99:d6:96:fa:0f:ec:28:
         46:37:42:90:2a:b3:b3:82:d7:16:96:51:63:95:4a:0d:d0:ad:
         34:c7:55:12:46:96:90:d6:5d:20:82:06:2d:16:c6:1f:91:7e:
         f8:fe:00:b6:e0:ea:07:85:88:0c:5c:01:51:3f:e9:7d:f4:7d:
         d5:ea:dc:f1:7f:96:5e:20:53:1b:8e:c0:9a:61:4d:52:aa:a6:
         92:dc:dc:67:27:f9:3b:52:d8:38:f4:7f:7c:5b:52:aa:3d:49:
         f3:89:32:70:9f:a2:f5:f4:c1:b7:b4:31:69:86:1d:af:01:25:
         ae:29:f6:97:6d:a2:31:c0:ee:b4:75:15:73:1f:58:2b:43:f6:
         99:85:8d:bd:ba:ec:94:3f:9b:60:d1:4a:4f:42:bf:c0:fe:4c:
         cf:cc:1b:4a:cb:c0:5c:a0:1f:6f:11:13:17:de:f7:c0:a6:19:
         35:72:ea:96:33:84:c2:0f:b2:e1:b2:2f:58:b5:e5:56:76:64:
         29:e1:98:4a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBrwpsLJLZkRIpiSIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIzMDEyMDAwMFoXDTIzMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
YzY3ZjIzYzctMGE4Ni00NmE0LTllYjUtYzk0MDgxY2RlNDVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07oE/s7EHWZChnPUGJPvx5vTs4hIdsg/pTtw
q2+81ZI3pExEKbVSJ72j71spJaUthSrASIlSzLDGLwfyhw90Ub3uPw8T7rdURo7o
TJN44znclaX4yQMAYadURXf7IzB7plMWMkB7fORHJZTuEi2GaqDSVnUpbtNkZmj8
DU2GGq9g5cKSnmvEhm9cYsbJFGkxoqtHGPWL+WEHVxRxYwT/XNpNEqlmM2NGtqVv
GZhv+Lsh1aV4MkWM/akVTtB0AdBDv3FrTOEJWm1K8gNtxtTmygXumss2cYdGcI+m
OCv2hg/NQVnMnUcLm0OjZMFS+kVJInY/6UuywWFVkdouBKo71wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMxVReOKMyHJ+DiR7J0Uqw8syVgAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYmVjOWZhN2ItMTlmYi0z
MWEyLWJmMWQtYmY0Y2FjMmU1OWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAErYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAeUb+k++s91Xi3S3BxnYy6jjmuvMv1mFd1hNgZbRTR40cyFOTnfZ6WCff
HvHb/AIyvnowdTglvqVXFlYJSrwHL7qZ1pb6D+woRjdCkCqzs4LXFpZRY5VKDdCt
NMdVEkaWkNZdIIIGLRbGH5F++P4AtuDqB4WIDFwBUT/pffR91erc8X+WXiBTG47A
mmFNUqqmktzcZyf5O1LYOPR/fFtSqj1J84kycJ+i9fTBt7QxaYYdrwElrin2l22i
McDutHUVcx9YK0P2mYWNvbrslD+bYNFKT0K/wP5Mz8wbSsvAXKAfbxETF973wKYZ
NXLqljOEwg+y4bIvWLXlVnZkKeGYSg==
-----END CERTIFICATE-----