Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f771d8b9-1bbd-39ef-a02c-bc620a0d3bce.roa
File:                     f771d8b9-1bbd-39ef-a02c-bc620a0d3bce.roa (raw, json)
Hash identifier:          d7ibbQwo3RuIJ1a2vnTEuZjg3eCaAzeV6HavJhe1DPo=
Subject key identifier:   CB:20:D5:D4:31:0E:D6:5F:BC:93:4A:F6:20:4D:D0:EA:81:AE:9E:8C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DCEF731029E18E16993A35340
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f771d8b9-1bbd-39ef-a02c-bc620a0d3bce.roa
Signing time:             Thu 05 May 2022 12:00:00 +0000
ROA not before:           Thu 05 May 2022 12:00:00 +0000
ROA not after:            Fri 10 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.152.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ce:f7:31:02:9e:18:e1:69:93:a3:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  5 12:00:00 2022 GMT
            Not After : Jun 10 04:00:00 2022 GMT
        Subject: CN=69365c67-c4e3-49b5-b3c2-448190c961cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:22:c5:ad:51:47:f0:18:c6:4a:98:52:3c:d1:
                    1a:26:4f:65:04:be:c1:7c:29:9b:21:08:66:e1:7d:
                    0c:01:c5:c0:6a:b3:d4:61:ea:c6:59:21:47:39:34:
                    9c:c3:e8:dc:53:94:ec:c6:b8:43:17:c9:d2:f9:12:
                    79:3b:b9:cb:37:d1:b1:25:dd:a2:94:a3:3e:a5:28:
                    90:79:e3:a6:25:e8:b7:93:24:14:fb:de:e3:b7:a3:
                    31:2b:1d:ba:30:50:db:69:bd:75:7d:fb:c5:7a:35:
                    da:eb:bc:f4:b5:2d:9f:dd:66:df:6d:ac:ab:7c:8f:
                    38:88:b4:42:10:5a:43:d5:fd:42:c2:f8:d9:69:fc:
                    49:26:fb:c9:54:0e:43:6b:62:91:70:92:4e:61:6f:
                    90:d6:25:a2:44:ca:07:36:35:4f:4f:6a:ef:00:d7:
                    f0:4a:d2:43:4f:d2:a6:e2:97:31:9c:3f:a8:86:0e:
                    27:e2:ec:b7:39:53:39:fd:2c:b7:85:06:26:91:3d:
                    ac:ba:fc:03:d6:97:cb:b9:10:fb:45:49:4f:d3:ca:
                    15:24:95:42:45:84:0b:e8:62:f2:61:5f:13:64:a6:
                    c5:bd:93:be:18:00:57:8f:e9:9d:ed:76:28:b4:31:
                    ee:bf:41:ff:50:62:47:78:cf:8e:70:07:da:86:38:
                    4a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:20:D5:D4:31:0E:D6:5F:BC:93:4A:F6:20:4D:D0:EA:81:AE:9E:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f771d8b9-1bbd-39ef-a02c-bc620a0d3bce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.152.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:0a:f7:c9:2a:f9:0c:85:c0:e5:a6:fd:1a:9f:7d:c9:93:19:
         7a:58:84:95:fc:93:6a:6c:e3:20:51:88:65:98:53:c8:e0:8d:
         b9:ce:8a:fd:2c:e8:5f:57:69:98:21:c3:36:de:3e:77:40:d8:
         01:5e:27:81:8c:12:d3:9c:01:b6:86:47:51:a2:e2:59:c8:3b:
         8c:5c:bf:b1:23:21:cd:fa:28:be:b7:f9:19:66:9e:bb:fa:02:
         c9:2d:55:5b:82:c2:55:c3:9c:0f:15:38:84:09:dd:36:07:75:
         62:8c:e3:c0:ed:93:78:37:60:54:66:03:ad:6a:26:53:a8:ad:
         75:8c:0c:34:bd:09:66:65:33:23:52:a8:42:b6:58:bd:30:55:
         57:2a:db:01:5a:35:54:61:cc:fe:fa:df:49:27:96:89:33:fb:
         95:19:94:0e:17:03:55:70:cd:70:85:08:e1:75:52:97:19:1d:
         36:e0:b8:17:30:12:a5:25:ee:bf:b1:7b:07:70:64:4c:7e:75:
         31:91:cd:42:ec:a6:d8:55:14:ca:d6:82:41:e0:77:35:d7:0d:
         2c:a9:a9:d5:d3:a9:1a:71:16:4e:13:8a:a3:f3:0a:1a:ac:08:
         4e:af:82:17:52:04:c0:20:84:2b:45:e9:f9:88:cc:ca:8f:4d:
         0d:ac:27:db
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3O9zECnhjhaZOjU0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUwNTEyMDAwMFoXDTIyMDYxMDA0MDAwMFowLzEtMCsGA1UEAxMk
NjkzNjVjNjctYzRlMy00OWI1LWIzYzItNDQ4MTkwYzk2MWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CLFrVFH8BjGSphSPNEaJk9lBL7BfCmbIQhm
4X0MAcXAarPUYerGWSFHOTScw+jcU5TsxrhDF8nS+RJ5O7nLN9GxJd2ilKM+pSiQ
eeOmJei3kyQU+97jt6MxKx26MFDbab11ffvFejXa67z0tS2f3WbfbayrfI84iLRC
EFpD1f1CwvjZafxJJvvJVA5Da2KRcJJOYW+Q1iWiRMoHNjVPT2rvANfwStJDT9Km
4pcxnD+ohg4n4uy3OVM5/Sy3hQYmkT2suvwD1pfLuRD7RUlP08oVJJVCRYQL6GLy
YV8TZKbFvZO+GABXj+md7XYotDHuv0H/UGJHeM+OcAfahjhKPwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMsg1dQxDtZfvJNK9iBN0OqBrp6MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZjc3MWQ4YjktMWJiZC0z
OWVmLWEwMmMtYmM2MjBhMGQzYmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEpgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAFgr3ySr5DIXA5ab9Gp99yZMZeliElfyTamzjIFGIZZhTyOCNuc6K/Szo
X1dpmCHDNt4+d0DYAV4ngYwS05wBtoZHUaLiWcg7jFy/sSMhzfoovrf5GWaeu/oC
yS1VW4LCVcOcDxU4hAndNgd1YozjwO2TeDdgVGYDrWomU6itdYwMNL0JZmUzI1Ko
QrZYvTBVVyrbAVo1VGHM/vrfSSeWiTP7lRmUDhcDVXDNcIUI4XVSlxkdNuC4FzAS
pSXuv7F7B3BkTH51MZHNQuym2FUUytaCQeB3NdcNLKmp1dOpGnEWThOKo/MKGqwI
Tq+CF1IEwCCEK0Xp+YjMyo9NDawn2w==
-----END CERTIFICATE-----