Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/22c45867-74af-33f1-ac33-4d4877223721.roa
File:                     22c45867-74af-33f1-ac33-4d4877223721.roa (raw, json)
Hash identifier:          f5jsoEFmdmuovNXnYlKKmr8nNDEPvLy4Xdqs1sBPKJY=
Subject key identifier:   CD:2D:C1:B0:BC:2B:40:92:F4:AB:77:91:48:30:19:06:C0:A8:F8:43
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FA444902D84D227BD83CD7580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/22c45867-74af-33f1-ac33-4d4877223721.roa
Signing time:             Thu 20 Oct 2022 12:00:00 +0000
ROA not before:           Thu 20 Oct 2022 12:00:00 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        18.183.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a4:44:90:2d:84:d2:27:bd:83:cd:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 20 12:00:00 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=eeaac0ec-dcd7-4b0b-ac29-8939522ccb17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:77:74:0a:a6:bc:6f:13:ba:c2:14:5e:29:25:
                    e6:ac:0b:ee:a2:84:0f:a9:c1:84:a3:1b:b8:65:b0:
                    62:57:ca:fe:4c:bd:16:4a:99:d3:c3:fe:80:df:05:
                    aa:81:00:93:cb:cd:69:7d:bb:ac:31:9a:92:8b:35:
                    97:99:6a:e8:42:50:b2:e1:a2:c7:24:04:ad:1c:b0:
                    e7:22:4c:24:e9:26:e5:4d:4e:20:67:34:ca:57:72:
                    f7:f4:45:34:66:ee:7d:e5:d3:95:28:18:a2:59:bc:
                    e0:da:f6:ec:4e:9e:e5:93:d0:88:fe:9b:b1:2c:ce:
                    42:f3:63:e6:94:7d:2d:21:2f:b3:a4:15:23:2b:b7:
                    eb:51:39:d2:71:f3:af:53:7e:d2:3e:46:cf:24:12:
                    e4:0c:9f:1b:ec:25:da:35:90:47:fc:47:da:fb:45:
                    51:d1:bf:9b:56:ae:64:43:fb:93:be:87:36:f8:c2:
                    c8:9e:08:03:d8:28:71:4f:71:76:15:ac:de:cb:4b:
                    b4:c5:db:b4:90:40:d4:d1:4b:8c:59:f4:de:24:1a:
                    ce:e1:30:11:5e:25:75:42:60:f3:c5:d0:f0:f3:19:
                    45:b7:a8:02:62:24:66:5e:1b:a6:51:c8:69:92:94:
                    ad:c0:6d:79:d5:75:55:47:2b:07:5a:57:95:8f:72:
                    57:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2D:C1:B0:BC:2B:40:92:F4:AB:77:91:48:30:19:06:C0:A8:F8:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/22c45867-74af-33f1-ac33-4d4877223721.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.183.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:a2:ff:6e:fb:a8:2f:ca:62:9a:8f:89:bc:16:bf:27:d5:ae:
         e3:48:30:6e:5d:0d:40:ff:36:2b:a0:85:d1:14:a0:7d:34:6b:
         6a:12:91:94:95:3c:2f:8a:d3:f8:bd:3e:ef:74:00:a2:23:dd:
         63:6c:a2:26:c4:1a:79:7c:20:a0:b0:17:fb:f2:63:6b:e8:33:
         11:6a:e0:f1:6a:06:83:94:7e:7d:a1:d4:8a:34:c6:4b:1f:4e:
         40:88:95:95:80:3c:5e:17:5b:56:70:ef:cd:40:f6:f7:a5:8d:
         8d:b9:6b:ba:a7:c3:d8:3e:96:18:4d:ac:1c:0a:f7:68:94:cf:
         f6:e9:13:e5:69:99:c8:ce:fe:9a:2f:67:21:d8:eb:e0:75:b6:
         62:06:d9:d2:a3:6b:23:cb:16:d3:9d:e0:64:3c:c3:a5:1f:9d:
         f1:2a:98:58:a2:86:00:af:2f:83:f4:3c:f6:b7:f3:2b:5d:47:
         db:c3:be:f8:2b:80:b2:a0:5f:02:81:10:4c:57:8a:d2:a2:20:
         b1:01:71:b6:41:d2:b1:85:30:4f:45:bd:94:20:84:2e:3a:aa:
         2d:14:63:d9:41:a9:35:db:ef:b5:ce:17:44:e5:d2:cb:bf:24:
         8f:66:2a:07:01:6b:b3:57:e5:ec:9f:1b:1e:e1:38:ad:4a:ee:
         df:59:c3:e6
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+kRJAthNInvYPNdYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAyMDEyMDAwMFoXDTIyMTEyNTA1MDAwMFowLzEtMCsGA1UEAxMk
ZWVhYWMwZWMtZGNkNy00YjBiLWFjMjktODkzOTUyMmNjYjE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3d0Cqa8bxO6whReKSXmrAvuooQPqcGEoxu4
ZbBiV8r+TL0WSpnTw/6A3wWqgQCTy81pfbusMZqSizWXmWroQlCy4aLHJAStHLDn
Ikwk6SblTU4gZzTKV3L39EU0Zu595dOVKBiiWbzg2vbsTp7lk9CI/puxLM5C82Pm
lH0tIS+zpBUjK7frUTnScfOvU37SPkbPJBLkDJ8b7CXaNZBH/Efa+0VR0b+bVq5k
Q/uTvoc2+MLInggD2ChxT3F2Fazey0u0xdu0kEDU0UuMWfTeJBrO4TARXiV1QmDz
xdDw8xlFt6gCYiRmXhumUchpkpStwG151XVVRysHWleVj3JXJwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFM0twbC8K0CS9Kt3kUgwGQbAqPhDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMjJjNDU4NjctNzRhZi0z
M2YxLWFjMzMtNGQ0ODc3MjIzNzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAErcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAEKL/bvuoL8pimo+JvBa/J9Wu40gwbl0NQP82K6CF0RSgfTRrahKRlJU8
L4rT+L0+73QAoiPdY2yiJsQaeXwgoLAX+/Jja+gzEWrg8WoGg5R+faHUijTGSx9O
QIiVlYA8XhdbVnDvzUD296WNjblruqfD2D6WGE2sHAr3aJTP9ukT5WmZyM7+mi9n
Idjr4HW2YgbZ0qNrI8sW053gZDzDpR+d8SqYWKKGAK8vg/Q89rfzK11H28O++CuA
sqBfAoEQTFeK0qIgsQFxtkHSsYUwT0W9lCCELjqqLRRj2UGpNdvvtc4XROXSy78k
j2YqBwFrs1fl7J8bHuE4rUru31nD5g==
-----END CERTIFICATE-----