Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d05d9e24-a806-3fc7-9765-adf4f75fcf3b.roa
File:                     d05d9e24-a806-3fc7-9765-adf4f75fcf3b.roa (raw, json)
Hash identifier:          z26Rb22vj6FlDtkIkQZK5PCHVynoUWfiq69CPjaq1mU=
Subject key identifier:   FD:BD:B5:8A:4D:32:68:4C:67:2B:12:57:B5:5B:68:D9:A7:89:30:59
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584095153EB3F1ED261628DB606C
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d05d9e24-a806-3fc7-9765-adf4f75fcf3b.roa
Signing time:             Sat 14 Jan 2023 12:00:00 +0000
ROA not before:           Sat 14 Jan 2023 12:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        18.179.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:95:15:3e:b3:f1:ed:26:16:28:db:60:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 14 12:00:00 2023 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=41c8e21f-6dd3-4935-a76d-3d01ac0671b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:48:c4:f3:ac:f4:b3:df:48:a1:13:30:f7:bf:
                    79:32:03:fd:eb:10:cb:fa:12:8d:20:36:15:2c:7e:
                    89:17:c9:e8:b0:3b:c3:8c:20:e6:b1:77:8c:83:93:
                    37:6e:24:b3:32:98:6b:cd:ba:66:75:a0:98:05:45:
                    14:13:d9:7c:0c:5b:0a:8b:bf:cb:12:a3:2d:05:60:
                    ea:c5:7a:b1:5d:80:2f:2b:f4:ed:c6:13:5c:01:b2:
                    d8:af:ef:05:d2:89:59:99:92:57:fc:aa:46:35:f9:
                    52:d1:66:fa:5a:86:84:a7:ee:e8:1d:b0:00:e7:14:
                    f8:ca:79:7a:4a:bf:db:50:f1:58:eb:64:06:e5:04:
                    5f:ab:53:93:4b:13:22:9a:4d:76:90:0e:8a:7b:3a:
                    6b:d9:8a:9f:a3:02:50:49:bb:39:b5:9a:04:f5:98:
                    64:87:83:bf:d1:87:44:69:53:ca:19:73:0f:3a:d7:
                    66:43:23:f8:63:c0:91:f3:7f:81:89:bc:cf:01:f8:
                    48:b6:c1:46:69:97:9f:b0:5f:25:26:5b:e4:16:1c:
                    6f:6b:dc:1a:fe:6e:f5:02:6c:14:3c:07:dc:70:21:
                    55:a8:eb:cf:f6:17:5b:d6:2e:87:11:24:69:9b:c9:
                    2a:dc:75:59:59:ee:ed:5e:8a:ed:1a:f7:cf:70:a4:
                    16:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BD:B5:8A:4D:32:68:4C:67:2B:12:57:B5:5B:68:D9:A7:89:30:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d05d9e24-a806-3fc7-9765-adf4f75fcf3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.179.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:01:49:68:39:9e:13:0d:ba:6f:34:e9:29:2e:00:ba:8e:4c:
         a8:6d:77:48:41:e3:5b:43:a5:05:53:a0:b8:b7:38:17:49:2a:
         bb:3c:ce:04:fc:07:a4:64:1d:ba:5b:1d:e3:77:b5:bf:fb:0e:
         99:0c:01:ad:db:83:8a:0e:03:6d:2a:e9:15:f9:99:1b:00:72:
         e0:5b:61:7d:7b:19:1f:bf:c5:6e:70:2a:56:ce:7b:a9:f6:49:
         59:b4:67:75:be:f3:55:01:6f:59:bf:87:b7:a5:67:10:b8:62:
         3f:1d:d5:09:ab:74:84:da:dc:39:07:6e:60:1d:73:a4:77:d5:
         d5:73:39:c8:a6:a9:63:cf:8a:a4:e1:f3:bb:e7:a6:59:b1:67:
         6d:9a:3a:94:c3:0c:0a:cf:29:4d:c9:ca:4c:f5:55:b4:b4:f0:
         c7:e8:12:41:f9:40:13:ac:0b:cb:a6:1f:f3:d2:5f:88:d4:8c:
         e8:16:ee:87:7d:ee:24:f1:cd:ee:09:66:85:db:59:27:e3:00:
         a9:bb:fc:6a:19:95:5e:da:14:fe:17:db:7d:58:5d:d9:79:c1:
         41:d8:00:aa:1c:a9:1a:63:b3:5e:3d:ba:53:b4:63:fe:e0:84:
         ab:83:7b:fe:18:41:74:8c:cc:b0:91:dd:49:ac:63:e7:02:61:
         86:98:25:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----