Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/edeee5b9-29f2-3d7f-a212-90b512d2d2a2.roa
File:                     edeee5b9-29f2-3d7f-a212-90b512d2d2a2.roa (raw, json)
Hash identifier:          WodKC7OBVHUo3jOX7E+7fAH/W1gEPJ1Pcx49jDFfmxU=
Subject key identifier:   70:D2:E5:10:18:B5:01:B6:E0:40:AD:96:F5:48:67:97:C4:43:6F:AB
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858409506595C5416836091F5C280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/edeee5b9-29f2-3d7f-a212-90b512d2d2a2.roa
Signing time:             Sat 14 Jan 2023 12:00:00 +0000
ROA not before:           Sat 14 Jan 2023 12:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        18.254.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:95:06:59:5c:54:16:83:60:91:f5:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 14 12:00:00 2023 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=b582127e-ca59-4bc7-b1d0-28e8cdb6634e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ef:fc:90:04:26:8e:7d:61:50:34:44:a2:50:
                    97:39:a8:5f:87:df:ab:b4:51:fe:ca:b5:ca:29:48:
                    0b:cb:d1:33:b6:ee:08:c8:3d:27:8d:f2:93:79:64:
                    9f:6c:96:a7:a3:1e:9e:5f:91:06:7e:8a:63:8f:d9:
                    a5:80:61:b3:a8:fb:ba:93:fc:23:53:c3:c5:a4:87:
                    57:48:fd:34:42:b0:25:d6:75:fd:33:3d:c2:30:b2:
                    25:1a:56:57:0f:f3:61:65:7e:69:ae:27:16:c1:af:
                    3b:be:18:76:22:98:b9:52:d1:a9:a2:e0:4f:af:99:
                    53:da:47:38:fe:2f:fe:3c:4e:9f:58:56:45:9d:0f:
                    05:c3:ad:8f:f1:e2:9a:dd:46:2b:3e:ca:dc:0f:a0:
                    62:2f:a3:7a:cb:57:f6:0f:11:c3:ce:3e:b1:7a:4d:
                    69:05:99:e6:31:46:d7:df:01:bb:08:7a:99:5d:20:
                    d7:21:46:11:ed:5c:27:d6:c9:ee:29:79:69:60:cd:
                    28:fb:20:3d:d3:2f:ac:21:e2:e3:02:26:f9:11:f3:
                    6d:92:c5:cc:5b:30:e1:df:b0:e5:74:61:49:c4:fa:
                    a2:ba:f7:8f:4f:8c:68:20:0e:fb:8f:42:85:76:67:
                    d9:6b:83:f0:20:b5:a0:f2:c9:db:b7:1b:0e:79:57:
                    29:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D2:E5:10:18:B5:01:B6:E0:40:AD:96:F5:48:67:97:C4:43:6F:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/edeee5b9-29f2-3d7f-a212-90b512d2d2a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.254.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:e9:7a:fb:f0:22:16:56:b1:52:3a:94:83:74:19:47:a6:3d:
         21:00:27:8d:8c:64:2b:bf:b4:87:db:10:ca:aa:c9:5f:da:4c:
         a5:da:45:e4:0b:b2:48:b3:62:02:05:2a:28:6b:18:6a:2d:8d:
         82:f8:3c:89:6d:0d:f0:6f:05:c8:ae:60:21:24:e2:2e:a4:63:
         bd:52:07:02:e9:17:4c:ea:4c:58:6e:90:27:18:6a:d7:10:bf:
         34:68:89:be:95:bf:de:e4:ad:b2:ac:f4:09:58:ac:f7:99:cf:
         6f:3e:13:f3:b8:8b:03:ae:d0:63:17:a8:e9:1a:c2:70:29:3d:
         4f:0d:ed:a1:0d:ec:58:0a:60:ef:3d:b3:ed:76:a3:48:d1:58:
         9b:c2:54:26:ec:60:ff:c3:5a:f3:63:ae:c4:00:9c:4f:aa:42:
         a0:45:5a:34:02:0b:fe:4f:35:25:78:71:cf:ff:4f:ac:27:31:
         1d:48:fe:5c:e3:16:f0:06:12:ee:e9:fa:d5:29:99:94:4f:e4:
         be:f5:7e:d0:72:f2:3f:22:21:a3:2b:7e:38:d0:af:a5:70:23:
         89:bb:56:6b:d5:2b:f9:f0:33:de:0e:73:d3:bf:ed:ef:84:03:
         cf:63:f3:98:04:94:39:7c:5c:99:63:43:d5:87:ef:aa:b4:5d:
         17:a1:97:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----