Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0e1b33ce-eeec-3148-9c9e-2a4b253ebaf6.roa
File:                     0e1b33ce-eeec-3148-9c9e-2a4b253ebaf6.roa (raw, json)
Hash identifier:          6X2cMPp0bXMom2LdD+GIfQzjboVgFYQA/SF+E7LwzGw=
Subject key identifier:   78:C7:ED:07:E7:77:7A:F4:E5:A9:85:3B:1A:CE:33:2B:01:4F:3C:74
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E96EC32508B2CCAB532A0BC00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0e1b33ce-eeec-3148-9c9e-2a4b253ebaf6.roa
Signing time:             Fri 15 Jul 2022 12:00:00 +0000
ROA not before:           Fri 15 Jul 2022 12:00:00 +0000
ROA not after:            Sat 20 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.174.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:96:ec:32:50:8b:2c:ca:b5:32:a0:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 15 12:00:00 2022 GMT
            Not After : Aug 20 04:00:00 2022 GMT
        Subject: CN=d0df4f02-e81e-478c-80d4-60b14bb2cdf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1f:ed:71:06:ab:91:37:16:81:ab:ad:2c:08:
                    d7:d2:4e:fe:bd:82:20:3e:e9:a9:3d:21:1d:3b:2a:
                    9a:26:60:1e:18:50:26:09:3d:97:f6:69:fa:ca:fa:
                    ae:fe:45:50:9d:a3:22:c5:2a:84:b4:e8:a4:08:76:
                    de:5d:4e:a4:8e:d4:ca:68:84:0a:93:28:87:ae:86:
                    48:c5:c1:89:ad:5a:af:d3:a1:15:5c:e4:2e:cc:73:
                    53:60:c4:44:09:0f:e0:c3:3b:1a:ec:2a:29:8c:50:
                    ad:68:3e:9b:2f:da:f4:c6:bd:49:cf:41:b5:7b:a1:
                    2b:4a:ab:bb:b8:21:aa:82:ff:fd:ae:16:a3:a3:eb:
                    31:d5:34:12:91:d0:9b:a5:5b:19:76:b1:40:2f:55:
                    c1:e7:a4:db:41:96:81:2f:0e:da:b6:cc:6e:5b:90:
                    64:74:5c:2d:fc:f0:4d:de:c5:59:fa:0f:fb:fb:d9:
                    d6:47:05:87:b4:27:5b:69:6f:a7:a8:fa:29:4d:23:
                    1e:8a:a4:c5:b2:31:68:22:71:f9:e4:78:5e:e3:2e:
                    8e:da:5c:f0:4e:48:57:a3:1f:68:25:cc:9f:2c:b3:
                    14:b7:d4:c9:03:03:2f:da:b8:e0:7e:35:4c:08:6b:
                    78:5f:de:b4:53:a1:bc:ed:a7:f5:7b:f7:fe:96:6a:
                    9a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C7:ED:07:E7:77:7A:F4:E5:A9:85:3B:1A:CE:33:2B:01:4F:3C:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0e1b33ce-eeec-3148-9c9e-2a4b253ebaf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.174.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:04:bd:8f:04:dc:dc:6d:64:b5:4d:08:ca:4f:a6:a5:f2:dc:
         94:e7:65:25:5b:3e:0d:71:fb:f8:da:a1:d3:2a:f0:98:a6:3b:
         43:6c:ed:50:31:e4:33:23:35:b0:37:2c:28:1b:26:c5:01:1d:
         cb:9d:5e:8b:a1:dc:a9:1a:28:82:d0:f1:c4:29:c7:d2:96:43:
         e4:96:cd:70:c1:20:87:cc:37:93:d7:12:c6:d4:bc:7d:0e:e6:
         95:5f:cf:66:d8:c1:43:81:20:5e:95:bb:6d:bc:2d:fc:1a:a0:
         5a:f3:88:8f:5c:83:96:77:24:ad:c7:55:63:58:78:90:ef:1a:
         27:ce:e9:5d:a6:ac:79:60:73:75:fc:8a:4a:1d:b9:fe:26:55:
         d8:9f:a7:a9:82:03:4c:b9:23:7d:a5:f0:05:3d:f3:0b:c2:60:
         dd:07:9c:6f:d5:a6:33:14:2c:88:b9:f7:38:5a:42:e2:f7:7f:
         5d:7a:d5:fd:0b:94:a4:dc:63:93:c1:53:33:3c:96:bf:27:9d:
         64:95:c8:0b:e8:1b:2f:77:63:14:03:6e:92:81:09:69:92:3f:
         66:36:24:3b:f3:4a:e2:1c:5b:9d:53:85:49:cf:b6:9e:c0:00:
         2f:dd:ea:68:db:bf:2a:6f:af:19:d1:8e:85:9f:75:12:d3:d1:
         5f:c8:72:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----