Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/20419731-b48c-3c9b-b868-08fd5477fbdd.roa
File:                     20419731-b48c-3c9b-b868-08fd5477fbdd.roa (raw, json)
Hash identifier:          H+CrxuDzj9KeaOylaff3ee1cJAYWgADDGtkml6axAew=
Subject key identifier:   06:F3:E0:38:B2:51:92:D4:54:5C:3E:0D:95:98:9B:B5:7C:50:8A:55
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584043FA698795B22D60496DB480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/20419731-b48c-3c9b-b868-08fd5477fbdd.roa
Signing time:             Fri 16 Dec 2022 12:00:00 +0000
ROA not before:           Fri 16 Dec 2022 12:00:00 +0000
ROA not after:            Sat 21 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        18.224.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:43:fa:69:87:95:b2:2d:60:49:6d:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 16 12:00:00 2022 GMT
            Not After : Jan 21 05:00:00 2023 GMT
        Subject: CN=d6703ba1-64b0-471b-8d36-dbac6301ed75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6e:76:b7:5a:af:7c:ca:2c:07:4b:a1:e5:a8:
                    b0:66:ac:c8:e2:b1:aa:b4:d3:0c:e0:c2:02:12:0f:
                    0c:b2:92:d1:48:7a:80:ac:f0:51:12:6e:05:d5:1f:
                    5f:77:11:d8:d5:11:5c:86:af:67:7a:59:d8:c6:5b:
                    58:18:33:8f:af:3d:65:97:92:37:91:6d:0d:c7:d1:
                    e2:2e:4c:02:3d:5d:b4:9a:21:26:e1:3a:11:eb:87:
                    09:44:ee:ef:8e:4b:88:a6:1e:6b:b7:cd:13:b1:10:
                    48:14:ba:53:2a:bf:f5:0c:65:41:ca:45:6d:9c:50:
                    2b:60:7c:71:a8:ff:fe:d9:64:1d:8f:1c:b4:64:4e:
                    a5:24:c2:9e:2a:70:b3:72:d2:84:11:76:41:45:c5:
                    b8:78:b0:fc:2d:eb:dc:2f:e2:14:84:2d:3a:69:cc:
                    18:3f:a6:2e:44:15:68:5f:a1:e2:d1:09:f1:b4:e7:
                    95:13:5c:51:fe:d2:2a:56:6b:4e:2e:8a:78:8c:0f:
                    7b:3b:6c:a7:8e:a4:81:46:2d:04:aa:30:a2:33:18:
                    ba:21:60:0c:7f:6f:4d:84:d2:a2:89:4e:56:64:07:
                    d9:2f:84:26:fa:04:46:9b:64:0f:df:2b:7f:58:c5:
                    8e:82:f7:fe:77:ac:99:ae:0f:b3:12:bf:b5:fe:00:
                    83:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F3:E0:38:B2:51:92:D4:54:5C:3E:0D:95:98:9B:B5:7C:50:8A:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/20419731-b48c-3c9b-b868-08fd5477fbdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.224.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:ae:99:32:7d:e2:f8:93:99:99:16:18:15:c5:81:2c:86:23:
         ab:e8:e7:b9:55:b1:f3:ff:0f:ef:76:db:f3:dc:d0:5b:d4:14:
         a7:27:c1:4a:79:b4:be:c5:7d:f1:9b:c3:db:45:17:58:10:b1:
         71:10:e9:38:86:7c:e1:fd:05:a8:80:3d:47:af:97:25:0f:42:
         67:2c:8d:36:46:8c:ab:72:3e:8c:0d:f8:0f:59:e0:66:7f:d7:
         c5:b1:a2:58:5b:9f:0b:6b:79:9a:8c:24:80:45:56:a2:37:00:
         25:02:88:4a:1b:e7:29:ce:a2:6d:12:e2:3d:a6:63:66:a9:5c:
         52:bf:4f:15:d7:91:0f:63:66:ad:ef:55:f8:e5:a3:0a:4e:8a:
         9f:ef:3a:0b:69:de:e8:c0:14:79:98:52:13:31:9d:44:dc:49:
         53:0f:61:56:ac:55:4f:76:ba:cd:d0:58:6b:e8:3b:8f:21:e0:
         46:20:47:4f:4f:bc:14:6e:81:e4:ce:79:d1:2b:37:0a:3c:d6:
         85:7c:7c:c4:a8:cd:1a:26:2f:8a:5c:cc:6f:8a:a1:34:e3:fe:
         c6:85:49:34:71:0e:3e:10:d8:40:9d:6b:d4:b0:30:3f:b9:bc:
         64:d6:68:5b:e6:0e:d2:21:88:2c:0d:83:a9:9f:d8:c6:fb:57:
         e7:68:4c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----