Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1d6c221f-2ce2-3270-b916-8963ff927b83.roa
File:                     1d6c221f-2ce2-3270-b916-8963ff927b83.roa (raw, json)
Hash identifier:          UbIxiveHrh7HdPTn1DFMAT5o3MHp+XSdPMTeSQmE7IM=
Subject key identifier:   80:9C:92:EC:B4:C1:59:E4:07:DC:7E:EA:22:E9:38:5C:D5:17:16:98
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CE449BC7860AE6378499EF600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1d6c221f-2ce2-3270-b916-8963ff927b83.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.154.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e4:49:bc:78:60:ae:63:78:49:9e:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=9a1ed7bb-0eb2-4684-a9d7-5c263845746d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0b:fb:99:1b:7e:d7:0a:a9:01:52:8b:fd:80:
                    cf:8d:47:7b:61:27:e3:c3:56:3d:7f:44:93:32:07:
                    04:56:05:68:22:5b:87:e5:9e:f5:f0:98:21:bc:8a:
                    d3:44:a3:e0:c3:1e:d8:4a:d1:60:b9:70:ba:9a:62:
                    de:cc:b9:e7:42:02:c4:ca:39:10:92:9d:27:fe:66:
                    16:71:96:6d:44:32:7f:33:92:45:1f:d0:81:b5:dc:
                    58:45:91:19:72:1d:24:8b:03:bb:ed:7c:54:85:42:
                    f9:66:c2:16:8d:d0:de:e9:c3:d1:c9:d6:29:03:77:
                    09:14:4f:73:05:f5:74:d4:cb:28:37:0e:8b:bb:dc:
                    98:db:d7:64:fe:9a:0a:52:a4:fe:d5:a7:dd:5f:5d:
                    2d:c2:06:db:01:dc:39:44:20:12:88:db:43:fb:fa:
                    be:c5:c5:97:b3:74:33:e3:fa:64:81:05:7a:db:4c:
                    76:0b:6d:58:8c:bc:2f:84:fc:b2:73:5f:b2:99:58:
                    a6:cc:ba:bf:b7:17:1d:39:52:8c:51:a6:cf:1b:95:
                    da:11:a1:41:d3:1e:23:1b:63:d3:28:eb:19:bb:0c:
                    0e:b2:25:84:e6:05:aa:90:50:46:84:2d:b0:55:b4:
                    d6:f8:86:7e:e5:ec:42:54:b4:7b:02:47:e1:24:2a:
                    66:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9C:92:EC:B4:C1:59:E4:07:DC:7E:EA:22:E9:38:5C:D5:17:16:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1d6c221f-2ce2-3270-b916-8963ff927b83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.154.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:d4:06:91:1a:0b:a3:9e:72:1d:1c:a1:2e:23:64:ee:76:d3:
         2a:4a:bf:42:6f:9e:88:03:26:28:83:33:76:d6:f5:c6:21:50:
         9c:17:ee:c3:8c:6f:1b:a2:ee:0b:82:8d:a5:cc:4c:67:7e:1f:
         fa:26:1e:00:ce:53:0a:ea:85:9e:cb:78:c4:9b:62:06:5a:99:
         cf:26:e9:e6:36:0a:21:52:ac:87:6d:7f:07:49:b4:ef:21:b7:
         f9:f5:72:bc:28:a8:f8:a8:a7:52:b0:85:68:93:82:71:ce:7f:
         2c:d7:9a:9a:d2:4e:4f:77:b8:0e:19:cb:0d:e4:c1:ba:26:af:
         63:8a:b0:62:b9:88:7a:34:f3:d6:5f:da:ae:89:63:d6:7d:12:
         d6:eb:78:0d:d6:7a:35:84:92:65:88:f9:fe:01:ec:bc:38:8a:
         c4:47:78:33:ca:e9:36:ea:65:56:2e:8e:d3:f2:0c:e3:22:8d:
         31:a6:31:9a:b3:4e:92:ad:f3:15:de:a9:f9:47:b7:24:12:d7:
         92:15:80:11:9b:16:a9:9f:86:c9:01:f5:c4:ff:42:d5:c4:61:
         18:ac:2a:6c:50:29:5a:f4:34:f6:98:b4:b9:c1:17:e6:db:31:
         b4:a1:b2:d7:ad:ca:56:ec:96:7b:ce:58:79:75:c3:3f:8b:29:
         cd:bd:ad:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----