Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0c83371e-2514-3bc7-b779-30307519201b.roa
File:                     0c83371e-2514-3bc7-b779-30307519201b.roa (raw, json)
Hash identifier:          /J65kH9yR3jfkeTdMpwPoHHhqxo3wAxk1V7rAD9u+04=
Subject key identifier:   15:24:6A:B4:00:B1:B2:DA:4F:66:33:17:B4:D8:40:F3:95:8A:FD:BE
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858404672F5D49279B75CDF18BF40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0c83371e-2514-3bc7-b779-30307519201b.roa
Signing time:             Sat 17 Dec 2022 12:00:00 +0000
ROA not before:           Sat 17 Dec 2022 12:00:00 +0000
ROA not after:            Sun 22 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        18.76.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:46:72:f5:d4:92:79:b7:5c:df:18:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 17 12:00:00 2022 GMT
            Not After : Jan 22 05:00:00 2023 GMT
        Subject: CN=cae2d5ea-27f2-4694-ba20-9ce1ac7cd9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:be:7b:99:9d:72:84:10:b4:e1:a5:e9:9f:62:
                    7f:44:66:e6:64:54:c7:e8:88:e9:4e:0a:8a:3a:49:
                    7c:78:b8:d9:79:96:38:31:be:29:2f:4c:a4:22:e9:
                    3f:0e:7c:08:42:40:b2:3e:46:c8:64:c5:11:d8:47:
                    5e:83:f9:2d:8e:74:f4:4e:9f:35:64:f1:7b:f3:00:
                    43:c4:a2:65:57:ce:e3:45:7d:95:e1:d0:bc:f7:1f:
                    e3:6e:aa:e5:7d:c0:bf:da:0f:58:21:f6:6b:8a:4b:
                    36:cc:10:ef:e3:e5:7b:4d:61:b8:88:7f:73:29:b9:
                    0a:f8:64:05:28:76:ef:3c:84:c2:fa:ba:47:ae:00:
                    ef:6c:a6:e6:63:56:f6:82:fc:e8:05:83:98:8c:4b:
                    8f:ca:b4:4d:f8:35:6d:a0:86:9a:4a:e4:64:81:47:
                    0f:6b:bb:17:7f:fc:0c:e5:f0:21:dd:66:f9:6c:29:
                    de:6c:3d:d8:72:6d:df:16:50:69:ca:51:8d:d7:25:
                    8f:d3:20:42:f3:7e:67:be:62:7b:32:60:fb:4e:72:
                    fb:47:2f:4e:c5:c5:be:e2:19:54:b6:3c:41:91:4c:
                    d7:60:28:ad:e2:c6:6a:31:f0:13:75:71:29:8f:40:
                    a7:f7:e1:25:aa:19:7f:74:83:36:dd:f6:d3:7b:67:
                    7b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:24:6A:B4:00:B1:B2:DA:4F:66:33:17:B4:D8:40:F3:95:8A:FD:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0c83371e-2514-3bc7-b779-30307519201b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.76.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:d9:11:c9:18:33:ce:86:ce:ac:8e:be:35:e0:b6:ed:ca:25:
         7c:60:b8:20:c1:48:80:29:5c:1e:fe:3e:e3:16:a1:da:f1:24:
         0b:2c:3e:08:75:5f:d2:6d:f6:73:84:ca:d7:44:96:d6:c9:f8:
         e5:f5:fa:4c:98:00:90:15:07:c7:c4:e1:a1:2a:84:ed:6d:93:
         7e:ca:3f:39:58:e1:90:59:e4:c6:35:eb:c1:58:42:83:46:1c:
         fe:0d:73:1f:3f:d9:fd:d9:ab:46:ea:2f:53:48:40:2a:1e:e4:
         51:07:a6:0d:6e:1f:46:07:12:11:5a:20:fe:31:c8:f9:9c:ac:
         c2:ac:b4:4b:78:f3:44:93:87:e7:1e:d7:8d:42:62:4d:71:5e:
         da:6a:66:5b:58:b4:d4:72:9b:b3:18:79:52:04:95:37:a7:da:
         57:b2:ad:21:e7:d4:25:ea:10:b5:4c:9e:25:f4:b0:5f:ce:3e:
         15:3c:31:9f:77:33:87:45:7a:5b:81:21:70:7d:b2:1d:79:10:
         81:71:39:80:76:94:76:ad:b0:a8:c5:7c:fd:a2:5a:99:8e:46:
         d3:19:49:c3:de:e8:42:15:e9:f1:e3:e2:73:ec:37:37:08:b1:
         e7:54:cb:8d:e1:0f:12:a7:70:1d:bc:44:5a:24:fa:4e:bc:b7:
         01:16:0f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----