Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c0b8bf66-b64b-300a-9f60-0eca206a992a.roa
File:                     c0b8bf66-b64b-300a-9f60-0eca206a992a.roa (raw, json)
Hash identifier:          MIdzMfBNkshRhj608pOIHrU0m3UasYZ92SxdEMzru0M=
Subject key identifier:   74:79:C7:BC:BC:F6:DC:4F:A6:85:73:16:43:F8:39:13:CB:ED:EB:73
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584091982E7D80AD42223227CC00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c0b8bf66-b64b-300a-9f60-0eca206a992a.roa
Signing time:             Fri 13 Jan 2023 12:00:00 +0000
ROA not before:           Fri 13 Jan 2023 12:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        18.216.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:91:98:2e:7d:80:ad:42:22:32:27:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 13 12:00:00 2023 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=a5f261f9-f7be-4d3f-b535-1339b81d452b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8b:f5:37:98:01:93:6d:90:3b:22:2d:e4:73:
                    38:1b:c5:2b:88:4b:f4:b8:7a:d7:bc:ee:2d:4d:88:
                    35:e3:8f:7e:a4:b4:09:44:94:a5:cb:9b:c4:db:63:
                    ff:83:d5:81:68:81:cf:eb:f9:8c:b7:2d:8c:e4:8d:
                    5f:2b:e7:7f:96:98:6f:5a:84:e7:ab:c7:70:2d:83:
                    09:33:52:63:89:86:36:97:a4:4b:62:9b:52:d3:51:
                    c6:ac:df:d8:31:6d:70:5d:f5:8a:e9:a3:e9:7a:27:
                    43:dd:5f:3e:7f:e6:a5:84:a6:d1:f4:48:5d:b1:b3:
                    f2:2e:e9:13:d1:cf:be:f6:ef:16:8f:a7:50:bd:73:
                    0e:b7:5a:23:d2:65:f1:9a:f5:06:78:52:16:74:21:
                    c0:bb:47:a1:ae:f2:ef:f4:06:21:4b:17:34:ed:71:
                    07:30:33:ef:48:57:fa:7d:10:e4:ec:c5:11:c7:73:
                    07:4c:12:f7:40:51:58:9e:5e:f9:2f:d8:4a:82:d7:
                    4b:65:b4:7a:64:95:29:01:20:0a:9e:a5:b9:e3:17:
                    da:a8:bf:12:fb:e4:7b:6f:8e:f2:3d:7d:b9:94:e7:
                    e1:af:7b:93:0c:76:3d:60:65:1f:b8:8c:bb:97:05:
                    7c:c6:6d:cb:3d:cc:b8:54:c4:f6:54:bc:e3:3e:c6:
                    6c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:79:C7:BC:BC:F6:DC:4F:A6:85:73:16:43:F8:39:13:CB:ED:EB:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c0b8bf66-b64b-300a-9f60-0eca206a992a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.216.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:ef:8c:43:d3:36:92:c4:28:f2:ea:c5:db:f4:87:3d:0e:8a:
         29:8e:e7:c6:37:0a:ad:22:43:06:f3:86:05:af:70:34:54:7e:
         b6:5e:87:0b:38:46:98:93:3e:c4:be:2b:3a:15:f7:a1:fa:9f:
         f1:d5:13:53:d6:19:45:06:a4:46:95:20:c8:a3:1e:30:3d:07:
         f3:b0:60:46:e8:fb:1a:99:d5:da:cf:05:0a:b4:cb:7c:86:72:
         23:94:e6:5d:2a:5f:fb:66:59:35:b0:33:25:92:cb:cd:5a:8a:
         59:50:7a:70:32:c2:28:67:76:e7:5e:1c:3e:98:11:d5:1b:cb:
         00:21:a2:96:ea:e2:24:57:d2:89:4d:65:98:54:fb:10:5b:54:
         86:ce:20:ac:27:81:cc:ba:5a:7c:f2:f7:91:0f:b6:e9:9f:8b:
         54:a1:2c:21:17:0f:2a:3b:26:dd:3c:e0:44:1c:b7:ec:46:e2:
         a0:71:15:85:a5:83:fd:fa:8f:53:e4:69:05:8a:cf:91:9a:d4:
         51:3f:25:d7:e0:02:ad:ba:cf:fb:67:d0:8b:65:5a:d5:1c:9b:
         3a:15:dc:f1:ed:52:f1:31:95:7f:c6:0c:9b:85:34:ce:0f:67:
         09:2e:64:7d:95:5c:40:56:c1:89:3d:e0:cd:3e:64:5f:b5:b8:
         7d:7d:5c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----