Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e897c2b3-53f4-3e05-8dd6-ee2f8641fe36.roa
File:                     e897c2b3-53f4-3e05-8dd6-ee2f8641fe36.roa (raw, json)
Hash identifier:          VedytXePzQiK1mGdEYe0lLKsXms8lfcKoxdJ8jqrVeM=
Subject key identifier:   BA:4B:28:DD:5E:52:FF:AB:7B:51:0E:BE:DD:6B:AB:A8:6F:CF:7D:FA
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584094541F2059028F33E092A380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e897c2b3-53f4-3e05-8dd6-ee2f8641fe36.roa
Signing time:             Sat 14 Jan 2023 12:00:00 +0000
ROA not before:           Sat 14 Jan 2023 12:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        18.34.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:94:54:1f:20:59:02:8f:33:e0:92:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 14 12:00:00 2023 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=fc5085ef-2838-4013-8c2e-4cd79bf17016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:23:8e:86:07:4e:78:5b:0e:9a:de:05:ad:83:
                    da:11:fd:85:4e:34:6a:19:b2:6c:d7:4f:84:cd:65:
                    08:6d:ee:8f:dc:81:f5:83:a7:7a:d5:ec:eb:c2:e6:
                    d8:52:99:c3:3c:08:bd:58:f9:2a:ab:08:61:ae:a6:
                    94:55:76:05:40:7c:47:b8:b7:63:2e:40:a3:bf:be:
                    b8:4c:9a:df:f9:1b:f0:6e:90:cb:2b:07:68:cd:41:
                    02:25:18:37:ed:4a:75:3c:6d:29:4c:a6:3e:ec:ec:
                    50:26:05:5b:17:ca:9f:db:32:74:c6:60:f7:a8:92:
                    67:23:1d:66:0a:30:af:4c:66:4a:a7:77:fc:d4:8e:
                    7c:69:2d:6b:56:a7:9b:12:16:64:e0:7d:a2:5a:27:
                    da:22:d5:34:2c:bf:a2:33:e8:65:33:80:b0:09:80:
                    12:66:52:69:dc:c4:68:2f:c1:3e:89:d0:74:1a:0b:
                    1b:44:47:64:3b:63:28:8d:c1:28:e1:82:2e:cb:9c:
                    f6:d4:d9:24:36:08:34:01:69:c0:b3:59:68:19:e6:
                    11:e2:37:ff:0c:9c:cc:83:f9:d4:fc:0a:3f:8a:42:
                    6e:6c:ee:c3:c2:07:92:81:e1:25:fc:09:29:be:77:
                    b4:d6:9a:97:e8:57:de:b5:d5:bb:98:9a:1c:ab:cc:
                    0b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4B:28:DD:5E:52:FF:AB:7B:51:0E:BE:DD:6B:AB:A8:6F:CF:7D:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e897c2b3-53f4-3e05-8dd6-ee2f8641fe36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.34.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:cd:60:f4:7b:3f:47:a1:dc:d6:64:77:6f:b2:e2:a9:95:92:
         c0:23:fe:93:30:86:b0:66:a0:da:05:74:2b:fd:3f:9d:6a:bd:
         9a:51:b2:53:6d:90:33:33:09:82:e6:fe:95:be:df:12:6c:81:
         60:4e:8d:e5:d0:ed:eb:b8:e7:56:b9:2e:f5:13:2e:13:b7:81:
         0e:a4:ea:26:7a:30:e2:7a:ff:ae:aa:46:6b:9d:0e:35:27:6b:
         c7:f1:72:79:a4:15:24:b7:4c:33:b4:39:e0:c2:46:09:50:21:
         68:99:ca:df:92:6f:57:37:2e:f1:81:8a:70:03:23:90:39:2f:
         d7:a3:f3:9a:af:db:0a:fc:7e:34:01:c1:0c:d5:03:3c:16:22:
         f6:f5:2c:70:89:3f:9c:62:db:7b:d6:c5:37:b5:f3:26:b5:31:
         f8:3b:23:9d:7e:13:a0:78:1a:5e:83:d2:09:e5:d7:30:ec:a6:
         a1:10:04:88:45:09:00:2e:7c:48:01:55:4d:cf:41:17:50:5c:
         20:02:e0:80:f6:15:3c:ca:3f:b2:ea:0c:4c:1d:11:de:00:a4:
         69:11:c8:63:44:2f:5f:65:41:f6:66:eb:7a:95:64:66:06:55:
         80:70:1e:11:79:21:6c:fe:e2:52:c2:c2:4d:eb:ea:b3:73:9c:
         26:92:d8:47
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECUVB8gWQKPM+CSo4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDExNDEyMDAwMFoXDTIzMDIxOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZmM1MDg1ZWYtMjgzOC00MDEzLThjMmUtNGNkNzliZjE3MDE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCOOhgdOeFsOmt4FrYPaEf2FTjRqGbJs10+E
zWUIbe6P3IH1g6d61ezrwubYUpnDPAi9WPkqqwhhrqaUVXYFQHxHuLdjLkCjv764
TJrf+RvwbpDLKwdozUECJRg37Up1PG0pTKY+7OxQJgVbF8qf2zJ0xmD3qJJnIx1m
CjCvTGZKp3f81I58aS1rVqebEhZk4H2iWifaItU0LL+iM+hlM4CwCYASZlJp3MRo
L8E+idB0GgsbREdkO2MojcEo4YIuy5z21NkkNgg0AWnAs1loGeYR4jf/DJzMg/nU
/Ao/ikJubO7DwgeSgeEl/Akpvne01pqX6FfetdW7mJocq8wL1wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLpLKN1eUv+re1EOvt1rq6hvz336MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZTg5N2MyYjMtNTNmNC0z
ZTA1LThkZDYtZWUyZjg2NDFmZTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEiIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAF81g9Hs/R6Hc1mR3b7LiqZWSwCP+kzCGsGag2gV0K/0/nWq9mlGyU22Q
MzMJgub+lb7fEmyBYE6N5dDt67jnVrku9RMuE7eBDqTqJnow4nr/rqpGa50ONSdr
x/FyeaQVJLdMM7Q54MJGCVAhaJnK35JvVzcu8YGKcAMjkDkv16Pzmq/bCvx+NAHB
DNUDPBYi9vUscIk/nGLbe9bFN7XzJrUx+DsjnX4ToHgaXoPSCeXXMOymoRAEiEUJ
AC58SAFVTc9BF1BcIALggPYVPMo/suoMTB0R3gCkaRHIY0QvX2VB9mbrepVkZgZV
gHAeEXkhbP7iUsLCTevqs3OcJpLYRw==
-----END CERTIFICATE-----