Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1af854b4-8dda-334e-bc0c-697a065573a4.roa
File:                     1af854b4-8dda-334e-bc0c-697a065573a4.roa (raw, json)
Hash identifier:          LCTvWfYupcfvUJITK5SoMYNLsCY078DsBh78CC6eZ1I=
Subject key identifier:   F8:D6:C2:F4:85:8D:A7:EE:FD:43:99:8F:05:32:99:13:03:A4:C9:76
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DACB52B1D49988F809BA40440
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1af854b4-8dda-334e-bc0c-697a065573a4.roa
Signing time:             Sat 23 Apr 2022 12:00:00 +0000
ROA not before:           Sat 23 Apr 2022 12:00:00 +0000
ROA not after:            Sun 29 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.95.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ac:b5:2b:1d:49:98:8f:80:9b:a4:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr 23 12:00:00 2022 GMT
            Not After : May 29 04:00:00 2022 GMT
        Subject: CN=46c6f6b0-fc08-4b56-a8f7-06ec7ee6ebfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c2:ca:d1:0b:aa:7d:95:7e:53:0c:25:5d:30:
                    99:87:b9:3b:9d:21:0f:80:b6:40:7a:2f:1c:af:9a:
                    0c:11:52:88:6f:97:0a:ad:05:93:85:45:6c:0e:98:
                    da:a8:c2:62:df:13:8a:48:54:ae:62:7c:e0:50:6c:
                    42:79:d3:cb:29:6a:6b:e4:bc:98:26:3e:a4:16:96:
                    31:3d:90:93:2c:d1:b1:bd:42:be:e5:3c:00:ac:a9:
                    62:f3:33:e5:f9:8d:4b:dc:44:24:cd:a2:ea:17:72:
                    1c:c0:26:42:17:f3:b1:c1:41:ac:ad:01:82:d0:44:
                    16:55:20:cb:ef:d6:ba:a9:4d:f6:5b:60:55:c3:30:
                    62:b5:73:bc:ce:00:f7:82:51:e0:53:e5:be:fe:dd:
                    19:69:6d:52:a6:26:17:d9:48:b5:fe:cf:22:14:d1:
                    d1:bb:43:a4:93:04:e5:33:5f:43:f2:85:c3:6c:9f:
                    d5:c1:68:cd:76:9d:e6:ac:b6:2a:06:d7:82:45:76:
                    c1:ec:96:7f:fe:62:a0:86:6d:56:fe:a0:cd:c7:3a:
                    88:f7:47:de:e4:c9:72:d5:a4:7a:ae:c9:36:88:af:
                    1a:fc:2a:c3:06:3a:8f:f1:5b:04:b8:0a:79:b2:af:
                    6d:1d:ce:d9:f8:58:1c:67:cb:e2:69:59:9c:e9:50:
                    95:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D6:C2:F4:85:8D:A7:EE:FD:43:99:8F:05:32:99:13:03:A4:C9:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1af854b4-8dda-334e-bc0c-697a065573a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.95.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:0a:e7:b1:ee:30:4b:89:22:9b:77:be:b3:6a:fe:e9:6d:86:
         51:c1:c0:ed:bb:5c:3b:4d:3b:cd:17:5b:1c:ac:de:1b:da:c1:
         20:02:b9:0d:f4:99:32:f1:2d:68:4d:bd:87:63:45:b5:de:16:
         d9:7f:93:0a:75:54:a6:3b:96:fe:38:66:1e:fd:c1:0c:a9:ca:
         82:76:6c:d7:62:25:b4:0e:88:2e:6b:7b:c6:06:fd:9e:1f:2f:
         1d:8d:08:e5:21:fd:71:c4:8f:ce:25:9a:91:11:c1:8f:6b:75:
         3d:80:1c:93:3d:8f:83:c1:c9:e2:dc:71:31:c8:ca:cf:52:8b:
         a5:6f:5b:cf:81:48:b4:de:fa:c7:92:ee:1d:2a:8b:29:3f:28:
         56:98:ec:7b:3d:0e:bc:66:bc:8b:7c:75:cc:3e:8c:d3:b2:d1:
         c4:d8:3f:5e:74:b9:8f:28:c0:c7:f8:9b:b9:df:00:bc:d8:8c:
         fd:af:a2:81:da:0d:e4:7b:47:f0:1b:8c:c1:a0:23:c6:ff:9c:
         40:03:70:73:80:07:fb:ff:92:57:60:07:58:0b:a0:42:0e:bd:
         38:7f:af:c5:f5:4f:9b:22:66:f7:5d:b1:ac:1a:ed:83:60:c4:
         12:06:74:01:fb:14:c5:b6:b6:cb:07:13:89:9c:80:c8:90:d1:
         4a:82:b8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----