Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d81f5b5c-e126-37f5-bffc-002b11125b55.roa
File:                     d81f5b5c-e126-37f5-bffc-002b11125b55.roa (raw, json)
Hash identifier:          V5SMy6339bvuEQC4XW4zzaKqrJUJEC12NnowwhEt+6c=
Subject key identifier:   1D:86:92:ED:0F:1B:D8:C8:B4:83:68:97:BB:39:99:50:A9:C5:29:A9
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840B5F92B2856B2F6F189D6DF00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d81f5b5c-e126-37f5-bffc-002b11125b55.roa
Signing time:             Thu 26 Jan 2023 12:00:00 +0000
ROA not before:           Thu 26 Jan 2023 12:00:00 +0000
ROA not after:            Fri 03 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        18.183.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b5:f9:2b:28:56:b2:f6:f1:89:d6:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 26 12:00:00 2023 GMT
            Not After : Mar  3 05:00:00 2023 GMT
        Subject: CN=9c98b3de-fe37-4fef-b7a0-9167d87e94d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9b:35:8a:fe:ec:9d:04:0d:00:2e:df:34:06:
                    12:d9:7f:ac:53:52:4c:32:9d:d6:1b:03:e4:c0:54:
                    76:c5:0d:f1:7e:eb:e5:53:1a:1f:44:83:68:09:18:
                    5b:c3:20:1b:9e:0b:b3:68:c3:0d:3c:a7:c6:58:10:
                    81:cc:de:f3:f3:e8:a4:40:fc:29:a4:ca:9b:02:4b:
                    72:2b:77:db:2c:79:73:96:b4:17:07:3f:56:a4:28:
                    09:72:fa:17:8b:9e:11:4b:9b:2e:8a:75:c9:05:a0:
                    05:60:98:32:2e:5a:81:67:19:05:64:0c:64:65:be:
                    5f:43:33:f7:6e:f9:c9:d9:00:20:3d:b8:7d:e1:8b:
                    16:37:62:d2:ce:36:6f:e3:d6:49:45:0d:d4:0f:28:
                    e1:e0:e1:2c:26:fb:f6:e2:b5:51:a9:4f:38:96:14:
                    ec:71:e2:e1:84:0d:23:23:f8:90:d0:76:d5:92:d7:
                    c9:4e:d8:03:bf:c7:e0:65:08:b5:87:bf:ba:ef:69:
                    a2:3a:c5:70:3e:e4:ee:bd:90:8a:9f:a4:23:38:0c:
                    a5:98:31:82:a2:ab:31:c3:c4:18:c2:5f:cd:b7:a7:
                    70:6b:d6:33:c2:05:2d:34:6f:90:c4:d2:eb:ac:fc:
                    e6:4f:70:4c:3d:4e:86:9a:b8:12:41:c5:ac:4d:04:
                    da:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:86:92:ED:0F:1B:D8:C8:B4:83:68:97:BB:39:99:50:A9:C5:29:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d81f5b5c-e126-37f5-bffc-002b11125b55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.183.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:95:91:81:46:76:f6:ba:1f:ba:36:03:14:ae:15:92:08:30:
         85:c5:fd:70:8a:d3:de:0d:e6:76:c9:76:3e:ef:81:52:7c:25:
         0f:66:58:e4:c4:8b:3a:4a:9d:85:82:53:fe:9f:45:21:95:f2:
         5b:29:c4:f0:e7:ec:0f:db:30:e8:4c:d9:12:30:2b:3c:08:cf:
         19:31:a6:5e:d0:0a:b5:3a:2e:55:d5:93:38:2c:c6:7e:74:77:
         55:79:48:7d:2c:9e:c7:f5:e1:54:e1:ea:d7:e5:c0:55:2f:e5:
         4b:31:30:b4:8c:71:c5:3f:bf:eb:95:6a:2e:78:f1:c3:0f:49:
         df:44:f1:ad:b8:f9:73:0a:fd:f6:5c:90:20:6a:ba:34:63:26:
         06:58:90:a2:2c:5f:7b:1b:92:a2:70:0b:3c:0e:ca:ce:bf:e7:
         35:9a:dd:96:da:f1:62:23:64:b8:77:47:58:73:c9:5e:1f:93:
         53:27:33:23:f2:af:de:d3:10:d9:c8:ad:83:21:a4:d9:15:7c:
         c1:71:1f:e3:d2:cf:66:af:84:06:5f:eb:12:1b:b4:ba:6c:67:
         d9:50:14:67:3e:51:54:39:10:04:0b:0f:b4:d0:84:4d:cd:03:
         7a:96:3d:3c:9e:c0:80:c4:37:a4:bb:7c:f2:fa:1a:71:2d:92:
         64:a4:ff:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----