Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/179f1cf3-4a52-323f-9f85-50fe3c821ab4.roa
File:                     179f1cf3-4a52-323f-9f85-50fe3c821ab4.roa (raw, json)
Hash identifier:          31sJWqXOaspHg+YHtac1yasLCODuciCNk6j0EgfNa6k=
Subject key identifier:   F2:99:01:33:8E:6E:8B:3F:7F:DF:BA:DF:B9:28:C8:D4:06:87:EF:B1
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EE5871B63DB5AF87041F49AC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/179f1cf3-4a52-323f-9f85-50fe3c821ab4.roa
Signing time:             Sat 13 Aug 2022 12:00:00 +0000
ROA not before:           Sat 13 Aug 2022 12:00:00 +0000
ROA not after:            Sun 18 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.128.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e5:87:1b:63:db:5a:f8:70:41:f4:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 13 12:00:00 2022 GMT
            Not After : Sep 18 04:00:00 2022 GMT
        Subject: CN=a62b9f14-a9e8-4b9a-876d-fe45518dc841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e5:e9:a4:5a:68:48:66:6f:96:72:01:62:b5:
                    bc:0a:2a:2a:a4:22:89:ad:da:50:55:7c:5f:c6:2a:
                    d2:bb:e7:23:71:90:03:5a:59:e0:71:92:10:b4:d0:
                    0d:58:3b:10:3a:5a:63:bd:c9:f3:4f:67:ea:fd:bf:
                    c3:4e:71:bd:ba:17:07:e6:fd:fa:cd:53:48:cf:02:
                    d2:32:96:b5:70:c1:b7:c1:99:96:26:6b:85:68:fb:
                    03:01:b8:6e:46:a7:22:7e:f7:8d:30:df:0e:5e:11:
                    39:7c:e6:70:12:b6:34:b7:79:85:82:fe:0a:61:3f:
                    8d:46:3f:27:2e:51:a2:e3:00:86:cd:d2:d3:69:15:
                    80:2c:30:e3:ab:1a:49:4b:b2:a7:86:0f:31:6a:cf:
                    ec:b0:4d:55:98:ba:fd:55:50:97:34:5e:ad:f4:91:
                    63:33:62:99:b6:1f:8a:9d:77:b1:2e:45:4a:81:e8:
                    ba:b6:70:86:3b:12:75:7a:7f:4f:72:64:6d:cb:74:
                    55:7f:65:72:ff:b1:01:f9:96:97:b6:1e:25:d2:67:
                    31:61:9a:46:69:a9:b9:e2:1c:90:d5:71:b8:28:3f:
                    8b:23:77:63:5c:8a:c8:90:32:5c:e7:f7:6a:c3:de:
                    87:7a:d3:24:f8:64:fc:8a:aa:79:ec:b7:a0:85:61:
                    f4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:99:01:33:8E:6E:8B:3F:7F:DF:BA:DF:B9:28:C8:D4:06:87:EF:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/179f1cf3-4a52-323f-9f85-50fe3c821ab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.128.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:aa:15:f0:9b:b4:31:ca:f1:ea:80:52:56:75:02:f2:ee:bf:
         59:0a:0e:30:02:52:31:7c:a7:86:6b:a1:65:b8:91:99:7f:5e:
         99:df:7f:0e:5f:bd:73:82:97:76:c6:ea:12:9e:81:03:e4:af:
         c6:2b:eb:7c:7a:40:5f:6b:25:ef:05:23:5c:c8:32:80:9d:36:
         4f:4a:e9:dc:0a:cd:4c:6a:60:d8:88:75:60:6d:22:59:26:e9:
         fa:31:15:e1:c0:7e:7a:6b:31:26:b7:b6:36:93:af:46:89:ea:
         8b:12:2d:8d:5a:8a:fb:9a:f9:71:cb:85:e0:69:3e:7c:92:ec:
         e5:1b:c2:75:2a:39:48:4a:10:9c:6c:e0:77:d1:69:c0:1d:03:
         bf:f8:0c:98:5c:ca:e7:6a:d5:4b:fa:af:50:8b:ef:20:26:53:
         bd:1a:d6:04:b7:61:74:a7:2f:ab:5f:1d:3a:05:3f:f0:ac:ac:
         61:b1:1e:88:9b:f1:06:a7:aa:76:94:9a:d5:17:ab:f9:b2:f2:
         e8:03:e8:8f:47:6f:d1:c4:66:d3:a7:2f:ff:24:a1:32:23:d9:
         61:59:34:8b:4d:09:26:cb:b7:ad:c6:36:67:a2:ba:f5:c2:9f:
         21:e6:22:6d:32:8c:78:36:01:39:a6:be:ea:ff:87:d6:ab:0f:
         15:b5:31:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----