Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/19c92bb8-d8a5-3b6e-b94c-74a785cb8d33.roa
File:                     19c92bb8-d8a5-3b6e-b94c-74a785cb8d33.roa (raw, json)
Hash identifier:          T1H22Ek8YGjmPyju19GcZvbzVSVYLZHofyHcr33PT7A=
Subject key identifier:   5F:BB:F7:4A:F0:87:B2:0A:89:F9:F4:FE:AC:63:25:95:EF:97:14:EC
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584094BC1664672C923DD4707840
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/19c92bb8-d8a5-3b6e-b94c-74a785cb8d33.roa
Signing time:             Sat 14 Jan 2023 12:00:00 +0000
ROA not before:           Sat 14 Jan 2023 12:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        18.53.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:94:bc:16:64:67:2c:92:3d:d4:70:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 14 12:00:00 2023 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=7d39596c-f6be-4f29-844d-b9682f1d422b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:45:b8:20:fb:b6:15:18:6e:0e:ad:97:48:7e:
                    47:d3:0f:35:3e:31:15:36:93:87:10:cc:5a:8b:c8:
                    41:15:7c:5c:a2:d4:2e:1e:10:b8:b7:3c:a7:ea:fb:
                    96:22:b6:a5:86:3f:99:7b:e5:bd:07:1a:4b:4c:8c:
                    82:e4:b3:e9:15:f6:40:73:bb:c3:00:c9:ab:ea:44:
                    ce:dc:45:b6:28:ee:3f:01:45:40:9c:8d:24:ad:f1:
                    38:47:c7:6f:e8:ca:d3:f6:fa:75:b1:de:0f:e5:bc:
                    71:ad:c5:5f:0d:2f:cc:e4:1d:b8:1b:47:b5:ee:52:
                    c0:ee:e9:b8:d3:4f:5a:fd:31:40:26:7f:79:53:9e:
                    ab:0b:70:09:aa:ff:ef:5e:5c:14:bf:e6:69:78:de:
                    a3:e4:7d:44:74:b7:71:32:35:a0:17:0a:be:97:f1:
                    cb:54:05:99:07:05:22:4a:93:6c:cf:a2:ec:2f:5c:
                    8f:8c:65:53:f1:89:73:86:ed:4c:22:3c:b2:0e:d6:
                    18:eb:f8:85:bc:89:f8:fc:dd:40:03:aa:41:7b:73:
                    d9:ce:69:26:2e:00:66:4b:f8:26:bf:73:f0:46:ec:
                    b3:07:04:22:6c:f9:09:96:60:4c:0a:60:a9:c6:db:
                    e5:84:35:79:9f:6b:ae:2e:82:31:84:76:d2:8b:85:
                    ce:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BB:F7:4A:F0:87:B2:0A:89:F9:F4:FE:AC:63:25:95:EF:97:14:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/19c92bb8-d8a5-3b6e-b94c-74a785cb8d33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.53.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:cc:33:db:c4:cf:e5:c2:5d:fe:26:a8:a9:58:92:7e:81:1c:
         ca:dd:2b:43:74:9c:0b:e5:3b:a3:41:8e:fe:8a:ad:4d:2d:a9:
         19:e5:07:ce:b1:d3:3c:4e:43:5e:21:84:e1:d9:2e:e9:6a:2b:
         86:64:f5:5c:ef:b4:fc:42:18:de:e3:c3:e1:5b:97:cd:e2:62:
         ca:85:b3:23:1b:e1:7b:e4:d1:f3:19:a6:2b:e6:8c:95:0f:6a:
         54:9a:bd:e6:48:d5:d0:23:0a:4a:69:14:92:77:1a:55:63:5d:
         8b:6c:c1:24:c6:fa:18:fe:0f:c9:0c:c8:e7:2f:54:a2:f0:f6:
         cb:30:69:9e:53:fd:2d:c0:5d:1f:c6:84:21:bc:38:72:47:26:
         0f:d1:4c:87:2b:35:21:c7:a6:f7:bc:f1:31:f0:96:07:7b:6f:
         a6:6c:b6:72:ca:e5:7e:5c:19:84:d9:8b:0d:48:d3:20:18:47:
         3c:a9:0f:b1:36:c8:db:93:f1:38:8a:d2:7e:c5:ee:34:40:f3:
         06:13:48:08:ce:41:a3:f9:b2:40:cf:cf:a6:b5:bf:12:35:4a:
         6d:06:fd:28:3a:66:43:67:80:b8:d0:04:06:c6:ae:3d:1c:27:
         49:f7:2d:90:a3:91:66:cd:2e:e5:1d:8c:39:b3:7d:db:ad:2c:
         3f:02:b2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----