Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4d72e29-5cb5-39d7-a7c6-74ba99739197.roa
File:                     d4d72e29-5cb5-39d7-a7c6-74ba99739197.roa (raw, json)
Hash identifier:          EAGgCDg0aeM7f2yQtw7mNALJDNrDimKTWKC+YWuaBQs=
Subject key identifier:   D0:AC:C5:D1:90:86:81:12:17:77:48:1C:69:5F:08:35:53:C8:17:18
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DD36A1F272D82E76491022000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4d72e29-5cb5-39d7-a7c6-74ba99739197.roa
Signing time:             Fri 06 May 2022 12:00:00 +0000
ROA not before:           Fri 06 May 2022 12:00:00 +0000
ROA not after:            Sat 11 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.168.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d3:6a:1f:27:2d:82:e7:64:91:02:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  6 12:00:00 2022 GMT
            Not After : Jun 11 04:00:00 2022 GMT
        Subject: CN=44b1fc08-0c91-4731-9de3-5715c021542a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:45:61:17:33:98:e5:b5:ed:9f:3f:f4:3b:fc:
                    21:50:7b:fc:a0:56:72:bc:8d:21:b5:a9:1d:01:3f:
                    e8:d8:93:3b:d9:c4:7e:4c:f0:9e:3c:76:c1:30:63:
                    b7:09:b9:9c:d6:1a:60:a5:16:7f:ea:38:72:89:a7:
                    06:39:71:f9:dd:c8:96:61:5b:9f:57:05:78:d3:0a:
                    e4:dd:ba:26:d1:5c:0c:9a:5e:f6:ec:66:61:83:95:
                    13:91:d9:bc:36:bb:46:94:0a:04:27:13:e6:bf:97:
                    d9:c7:23:f5:81:a1:65:05:c7:df:b1:cc:b0:f5:57:
                    a7:89:2f:63:52:d4:2a:67:bb:92:0e:88:58:37:70:
                    fb:1f:a8:cb:a9:99:d7:b8:d8:9b:41:27:8f:4c:b7:
                    0d:8e:9f:46:c1:58:b7:46:84:f1:96:6b:c9:f0:ff:
                    70:17:40:2e:6d:17:8a:22:03:56:4f:36:b9:33:9c:
                    8b:7d:d2:2d:71:1c:59:1c:f5:90:a7:15:5d:f0:ab:
                    66:9a:56:72:03:6f:36:02:bf:4c:f1:42:b7:a2:a1:
                    c9:0c:9f:47:62:b2:36:71:ce:cf:ca:4c:77:3d:30:
                    f7:fb:6f:e9:dd:43:30:1b:6e:8d:ea:6d:1c:e7:5e:
                    27:bc:50:7d:f7:58:d0:1d:0f:3b:03:c8:3e:dc:0e:
                    1f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:AC:C5:D1:90:86:81:12:17:77:48:1C:69:5F:08:35:53:C8:17:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4d72e29-5cb5-39d7-a7c6-74ba99739197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.168.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:21:e0:d6:fa:07:d2:31:80:ca:d2:d7:b0:b9:e2:6d:90:9c:
         34:b8:32:90:0b:c0:7c:eb:c9:b5:38:25:34:98:3b:97:f9:f0:
         59:c6:ac:f9:73:55:6c:57:81:ae:e9:f0:e0:c0:94:1c:e1:51:
         29:59:b7:ff:15:e6:a4:38:d4:c4:0f:32:3a:ed:dc:3e:bc:33:
         21:49:10:a5:32:7a:9a:63:30:3e:51:f8:b3:8a:01:7d:64:ae:
         87:4e:b0:32:06:be:7b:01:db:02:ba:f5:d7:6a:b3:09:7a:3c:
         6f:23:50:2c:95:5f:38:84:4e:15:fc:32:11:ef:63:32:c3:ec:
         91:c0:e4:56:a7:87:f8:69:36:c0:fc:2c:f7:6b:d0:b2:67:9f:
         6c:db:ee:2e:db:84:a6:7f:6e:2a:37:97:75:5b:f1:51:f0:72:
         80:69:5d:7d:64:e5:73:8b:08:61:57:8e:dc:da:90:55:68:c8:
         84:c2:62:c9:a4:9e:f6:6f:f2:d1:6a:bc:42:d4:b5:5f:79:7b:
         ee:68:e3:4c:2e:1a:5e:9a:eb:b6:e5:78:74:78:3d:c5:07:5a:
         31:bb:d9:a4:08:41:2e:04:e6:0d:49:0b:ef:57:29:b1:40:75:
         1d:59:b8:2c:5b:46:71:72:9c:19:33:a5:15:29:ab:84:b9:8b:
         2d:7f:7a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----