Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10b39551-bb36-3119-b787-4a775b1e6067.roa
File:                     10b39551-bb36-3119-b787-4a775b1e6067.roa (raw, json)
Hash identifier:          6dreiHZh2jpVvRWtOHQ3dSGSe9LU5pEBOae3WzooaUg=
Subject key identifier:   65:29:E0:1B:99:B6:63:CF:E8:78:34:36:BD:47:83:BA:BF:AD:B5:99
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FA9F02C6EE86EDB6D44E0A380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10b39551-bb36-3119-b787-4a775b1e6067.roa
Signing time:             Sat 22 Oct 2022 12:00:00 +0000
ROA not before:           Sat 22 Oct 2022 12:00:00 +0000
ROA not after:            Sun 27 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        18.52.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a9:f0:2c:6e:e8:6e:db:6d:44:e0:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 22 12:00:00 2022 GMT
            Not After : Nov 27 05:00:00 2022 GMT
        Subject: CN=a19abf2e-751d-4fa3-9ac7-5c2ea9732096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2a:ac:4a:42:1d:fd:28:2b:58:81:50:dc:1a:
                    fc:09:f5:27:fe:ee:a7:39:46:c3:ca:b1:e7:56:f6:
                    93:6f:39:cd:58:19:ff:e9:04:0d:20:21:e3:d1:e7:
                    cf:17:76:08:1a:f1:06:eb:19:bf:cd:ec:2f:de:b9:
                    23:54:60:3c:7c:a5:3b:b9:20:9c:5f:73:da:d6:67:
                    f2:40:cb:4c:96:bb:21:80:fa:e6:40:25:e9:b5:7e:
                    ed:1d:b9:31:17:07:55:0d:56:3f:7b:36:c0:3a:9a:
                    d8:77:46:3a:b6:6b:62:33:47:36:e5:60:53:2a:c7:
                    1c:b7:1d:c4:09:43:61:5f:d4:29:ab:c1:b5:76:83:
                    20:98:46:3b:8a:e0:30:8e:0a:f0:6a:b5:ed:22:3e:
                    46:97:79:5c:7b:f8:d1:30:ca:4c:51:ce:ae:df:cf:
                    19:46:80:bb:d9:ce:40:38:a4:4e:a0:9f:78:49:24:
                    4f:c9:6a:f9:59:00:be:2b:07:05:83:34:57:72:4b:
                    68:ad:81:21:3f:51:2c:4a:41:61:eb:6e:6c:80:b0:
                    6d:61:96:17:5c:76:2d:a2:e5:9f:7d:50:75:7e:63:
                    e2:14:71:5d:c5:32:b4:bb:3d:64:eb:f2:bd:5b:56:
                    23:59:18:0b:75:9c:f9:2d:3d:bb:4f:ab:29:17:79:
                    8c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:29:E0:1B:99:B6:63:CF:E8:78:34:36:BD:47:83:BA:BF:AD:B5:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10b39551-bb36-3119-b787-4a775b1e6067.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.52.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:27:9a:9b:72:4a:db:e3:fb:f1:bf:5b:7a:f4:43:64:93:bb:
         62:02:13:66:91:83:db:59:b6:03:23:56:a4:2b:18:28:80:c7:
         73:83:ab:b3:64:a3:a3:f7:a8:f2:ab:f6:5a:10:65:59:99:d6:
         4d:4f:d8:25:10:35:41:28:82:9d:a4:e7:10:40:30:c3:58:ac:
         cd:0e:89:13:c6:ab:40:4e:00:fb:7b:1f:12:14:a7:52:35:53:
         a6:47:70:1e:0c:a6:c6:85:aa:c3:70:e8:5f:76:b3:83:65:e5:
         b8:06:06:45:3d:af:1d:b9:65:e6:18:48:ee:9c:1c:b9:92:1c:
         95:e2:fa:08:a1:6c:91:88:69:c4:db:f7:d4:da:e4:dd:a3:27:
         98:60:48:1d:a3:4a:b6:c7:94:75:49:e6:b1:7a:7b:60:fc:96:
         5c:31:f2:5d:2b:70:c4:0a:d4:50:d0:fc:b5:e6:47:d4:63:4d:
         07:62:d1:13:57:9b:37:84:92:94:c3:1d:72:20:c2:fb:3d:b6:
         a3:c2:39:6e:2e:d7:9f:4a:48:d1:fa:dd:6a:90:e0:57:d7:3d:
         ba:b2:66:60:de:ea:02:47:7a:e1:27:62:8e:28:ad:63:c9:0a:
         f5:5a:61:40:54:ea:c7:9b:29:46:a8:84:44:ba:a5:a1:40:fb:
         b6:3a:cf:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----