Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ce3ca4ec-7ed9-3f6d-bc41-2110a5f50b12.roa
File:                     ce3ca4ec-7ed9-3f6d-bc41-2110a5f50b12.roa (raw, json)
Hash identifier:          mGekTIhjqwemuKRsZlWUQmgdgAMsgmr2XRtLV/Cqjlo=
Subject key identifier:   34:27:89:42:A6:15:E7:D3:1E:19:45:D6:8C:67:75:C6:07:91:17:A6
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840947920A31EED683569648100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ce3ca4ec-7ed9-3f6d-bc41-2110a5f50b12.roa
Signing time:             Sat 14 Jan 2023 12:00:00 +0000
ROA not before:           Sat 14 Jan 2023 12:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        18.116.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:94:79:20:a3:1e:ed:68:35:69:64:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 14 12:00:00 2023 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=264083cb-5943-4720-9b2f-223b5e968698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6c:ab:a3:3d:1e:ec:78:6c:7d:e9:c3:fc:33:
                    fc:58:19:e9:02:4e:d6:48:55:47:d1:87:84:08:ce:
                    52:85:bd:bf:94:13:f6:91:d5:05:24:1c:22:5b:3d:
                    7f:8d:e2:08:34:90:d6:ae:93:25:3a:ce:42:76:51:
                    cf:c3:15:44:0a:fc:9d:2a:dd:cf:24:b3:ad:b6:df:
                    bc:0b:e2:80:a6:2a:9a:f2:28:fd:db:d7:dc:c8:df:
                    b6:ec:63:7e:79:99:0a:d3:05:a5:9e:5d:bf:28:aa:
                    0d:9f:17:47:af:57:d8:72:83:62:7d:0f:59:04:10:
                    50:50:82:06:6a:7b:0a:c7:28:3c:a0:14:b1:d0:83:
                    a1:4e:8a:37:2d:2f:44:48:25:02:04:34:bd:82:8b:
                    15:82:2e:4c:98:42:0d:ff:c0:8c:59:42:12:c5:38:
                    25:6f:92:09:8b:53:c0:88:83:ee:b0:61:70:80:a6:
                    ff:ed:c9:a7:6c:ce:29:5c:8b:f0:1c:d9:20:5e:1d:
                    54:d9:57:eb:0e:c9:2d:7d:ce:a0:5f:c8:26:70:9f:
                    57:cd:ff:6f:c5:d2:a5:17:fe:95:2a:ed:be:4c:07:
                    ef:a1:7b:63:1e:1c:5f:a6:c8:0f:2b:9e:dd:c4:6e:
                    b7:78:25:c1:33:ea:64:99:bf:cd:73:c4:55:71:3f:
                    e5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:27:89:42:A6:15:E7:D3:1E:19:45:D6:8C:67:75:C6:07:91:17:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ce3ca4ec-7ed9-3f6d-bc41-2110a5f50b12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.116.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:41:72:71:fc:bd:e8:56:a5:7b:06:e7:8d:92:4d:fa:0e:b4:
         64:4f:2c:a6:78:4b:4a:ae:00:35:93:2f:85:e6:70:27:2f:29:
         4a:d6:ba:1f:43:60:9d:f0:01:ed:50:02:3c:46:90:d1:32:48:
         4d:b3:6d:f9:04:91:e6:00:c8:ab:40:08:24:82:26:11:3b:45:
         c7:df:5e:99:09:a7:90:56:5b:30:26:ea:1e:93:f3:c7:64:ae:
         3f:62:91:5f:3e:82:c6:76:0f:35:82:94:32:68:87:47:95:b1:
         aa:0d:55:09:25:03:24:0f:02:a3:d7:89:3e:90:e7:fa:66:6d:
         73:c7:ae:90:c4:1f:65:c8:1c:e8:02:10:92:de:4e:b3:3f:ee:
         18:0e:ae:a0:8f:a1:ef:83:c1:19:bf:d2:36:6d:32:46:06:98:
         a6:7f:b5:ac:62:a4:15:cf:f7:a4:68:63:99:b1:38:9e:e9:e9:
         97:a9:00:eb:c6:d5:2a:fd:ae:c9:f2:fc:f9:67:4a:e1:ec:31:
         d0:0f:83:c4:43:e8:2b:cf:68:4a:88:15:34:44:79:c0:ca:83:
         3f:ef:f3:21:b8:dd:6d:d2:18:f1:60:0a:90:43:d8:71:c8:44:
         d0:ad:c7:d5:d3:5c:eb:9e:4f:d9:38:20:f7:00:ec:a6:5f:73:
         26:a7:06:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----