Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/edbd2124-8a36-3a52-97b7-58410e60d991.roa
File:                     edbd2124-8a36-3a52-97b7-58410e60d991.roa (raw, json)
Hash identifier:          hQ7ZT5eXmDzTInmE3rqsdxP2E9GHAkiFQ6sMNDd2F38=
Subject key identifier:   FF:EE:0D:18:99:74:11:BE:60:30:49:E9:D2:DF:2B:87:A1:2B:B8:37
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840923BA995552F56C04DD3CCC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/edbd2124-8a36-3a52-97b7-58410e60d991.roa
Signing time:             Fri 13 Jan 2023 12:00:00 +0000
ROA not before:           Fri 13 Jan 2023 12:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        18.190.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:92:3b:a9:95:55:2f:56:c0:4d:d3:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 13 12:00:00 2023 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=15f3c06b-1f41-4349-a192-01b49b673a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:13:fb:1a:be:99:c2:79:ad:37:57:f6:f1:91:
                    6d:be:d0:53:a3:63:59:21:35:03:8f:0e:a5:a8:b7:
                    d4:40:21:25:9b:69:56:d0:c3:a0:ad:7a:61:1f:92:
                    4f:fc:07:8a:22:b9:24:31:56:e2:ac:f5:e8:cb:1e:
                    1c:c2:bf:db:e6:52:56:e1:24:96:10:5b:83:a2:06:
                    3b:d4:e4:2a:e8:d0:54:2b:8d:aa:cf:5e:6e:cc:7a:
                    6b:71:72:87:79:ce:5a:35:6c:01:67:4f:fc:b8:e0:
                    f4:9f:93:24:9a:2f:3a:f6:e6:6d:74:27:3a:8e:34:
                    f0:cd:45:52:3d:16:26:7f:b0:02:2c:49:18:dd:a4:
                    fe:af:6c:ad:bf:d6:33:f0:c0:8c:80:5c:0f:08:7e:
                    8c:c7:07:26:19:5e:bb:fa:28:2d:fb:cc:82:50:31:
                    9c:3e:70:de:8f:51:63:80:8e:b6:18:27:e0:51:45:
                    7c:d2:71:8d:98:ae:fa:a0:bc:98:b6:57:38:bb:aa:
                    9b:69:a5:cc:2a:41:8e:15:1c:94:f1:f8:30:aa:fc:
                    2b:04:b3:28:35:05:50:51:3b:07:0e:0a:e1:d9:ed:
                    fb:4b:de:75:f1:16:c0:22:53:00:9f:13:fa:22:82:
                    c0:9d:23:d6:e4:2c:19:56:28:5c:8e:26:3c:60:f1:
                    72:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EE:0D:18:99:74:11:BE:60:30:49:E9:D2:DF:2B:87:A1:2B:B8:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/edbd2124-8a36-3a52-97b7-58410e60d991.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.190.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:4e:f0:7c:aa:8d:f4:3a:00:bd:a0:85:27:53:63:a3:07:9f:
         f2:02:7e:9d:0d:b8:0a:6c:8d:b3:ac:42:5d:9f:74:22:46:a9:
         fa:f6:91:14:a6:da:31:f8:3e:39:e9:03:db:e1:84:e0:b6:9c:
         66:25:7f:12:25:91:8d:96:cb:48:63:a6:ee:14:7a:76:72:0b:
         c8:06:ed:a8:a8:af:29:f1:cd:d2:a7:0c:d4:8e:40:5c:d0:59:
         83:ef:8a:09:4d:5b:3a:c5:57:1d:0b:51:31:e5:ca:50:05:a3:
         05:41:04:4a:f0:67:61:22:9d:bb:b8:33:dc:cd:9e:14:8d:99:
         39:9a:c9:4c:98:1e:37:e0:68:53:54:d8:73:63:f2:8b:79:bc:
         55:fa:5b:1e:42:35:0d:bb:31:d7:07:a0:78:c4:f3:cf:f8:e1:
         b2:8c:1c:a4:f2:e2:8f:80:b4:d2:95:ef:0a:f3:2f:4b:3e:f9:
         ad:fa:03:33:df:d5:20:ef:fd:79:c3:76:51:91:44:6d:c9:2c:
         80:3c:2d:ab:00:8e:ac:ff:ea:ac:38:b8:c1:3c:f1:6e:88:b0:
         04:6f:c5:f2:08:e9:1f:11:9a:ad:93:54:72:e4:25:bb:8b:ce:
         8a:ed:ce:09:e2:65:ee:fe:b1:1c:5f:ef:1a:94:24:4c:df:24:
         1c:76:8d:bd
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECSO6mVVS9WwE3TzMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDExMzEyMDAwMFoXDTIzMDIxODA1MDAwMFowLzEtMCsGA1UEAxMk
MTVmM2MwNmItMWY0MS00MzQ5LWExOTItMDFiNDliNjczYTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxP7Gr6ZwnmtN1f28ZFtvtBTo2NZITUDjw6l
qLfUQCElm2lW0MOgrXphH5JP/AeKIrkkMVbirPXoyx4cwr/b5lJW4SSWEFuDogY7
1OQq6NBUK42qz15uzHprcXKHec5aNWwBZ0/8uOD0n5Mkmi869uZtdCc6jjTwzUVS
PRYmf7ACLEkY3aT+r2ytv9Yz8MCMgFwPCH6MxwcmGV67+igt+8yCUDGcPnDej1Fj
gI62GCfgUUV80nGNmK76oLyYtlc4u6qbaaXMKkGOFRyU8fgwqvwrBLMoNQVQUTsH
Dgrh2e37S9518RbAIlMAnxP6IoLAnSPW5CwZVihcjiY8YPFyGQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFP/uDRiZdBG+YDBJ6dLfK4ehK7g3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZWRiZDIxMjQtOGEzNi0z
YTUyLTk3YjctNTg0MTBlNjBkOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEr4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAWk7wfKqN9DoAvaCFJ1Njowef8gJ+nQ24CmyNs6xCXZ90Ikap+vaRFKba
Mfg+OekD2+GE4LacZiV/EiWRjZbLSGOm7hR6dnILyAbtqKivKfHN0qcM1I5AXNBZ
g++KCU1bOsVXHQtRMeXKUAWjBUEESvBnYSKdu7gz3M2eFI2ZOZrJTJgeN+BoU1TY
c2Pyi3m8VfpbHkI1Dbsx1wegeMTzz/jhsowcpPLij4C00pXvCvMvSz75rfoDM9/V
IO/9ecN2UZFEbcksgDwtqwCOrP/qrDi4wTzxboiwBG/F8gjpHxGarZNUcuQlu4vO
iu3OCeJl7v6xHF/vGpQkTN8kHHaNvQ==
-----END CERTIFICATE-----