Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34f36a56-7e4f-3d90-90ee-47af39b0b8a6.roa
File:                     34f36a56-7e4f-3d90-90ee-47af39b0b8a6.roa (raw, json)
Hash identifier:          4GdLNbLds3pvyeEQGO0Yd4RkqHnVP1MKgUlliCo9EQ0=
Subject key identifier:   5F:F2:BD:79:A3:84:8A:2A:AA:3D:24:7F:42:DB:C0:E2:2C:42:F7:38
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EE5BB728DB552DFEE9BF49400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34f36a56-7e4f-3d90-90ee-47af39b0b8a6.roa
Signing time:             Sat 13 Aug 2022 12:00:00 +0000
ROA not before:           Sat 13 Aug 2022 12:00:00 +0000
ROA not after:            Sun 18 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.84.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e5:bb:72:8d:b5:52:df:ee:9b:f4:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 13 12:00:00 2022 GMT
            Not After : Sep 18 04:00:00 2022 GMT
        Subject: CN=408d5001-7448-4e71-b5e6-ed7a91758cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6a:c0:92:c5:04:af:e1:b2:7e:ec:6b:4c:60:
                    24:4b:5e:38:6a:d2:91:01:87:d8:65:2b:62:f5:dc:
                    25:df:d0:7c:6a:86:1f:61:f8:55:d0:38:f7:b7:f7:
                    28:bb:57:4c:a2:de:31:25:0b:b5:64:98:9d:b4:93:
                    5a:07:31:96:1e:3b:ab:0b:62:e1:20:e3:1d:16:36:
                    f1:09:8f:94:0c:d6:5a:53:04:ba:21:5d:47:77:3e:
                    71:49:92:8a:c9:00:24:0a:e4:a0:53:b1:3f:65:f8:
                    1a:b9:e2:d7:e1:4c:f4:c3:fb:08:16:5d:1f:16:3f:
                    fc:7f:dc:16:7a:60:8f:11:06:f5:2e:69:86:1a:46:
                    df:ae:f7:8d:9e:e3:be:f8:de:f5:f9:5d:d8:fb:71:
                    1a:f0:ec:f6:3b:37:ec:2a:0f:c5:31:22:84:05:6e:
                    0d:9a:0c:d2:1a:55:5c:05:b4:64:f2:e1:59:7a:0e:
                    26:2d:16:49:e6:34:06:ba:d9:86:29:e1:8e:3a:43:
                    f8:da:8c:5a:f8:9f:45:dd:f7:81:5c:52:11:01:66:
                    42:94:80:f1:d8:4b:cd:5f:56:91:6f:72:34:c7:95:
                    14:53:2f:8f:30:b8:e1:92:a2:4c:bf:36:6a:d7:72:
                    bb:04:c0:25:27:b6:8f:33:4f:98:3c:71:90:cf:db:
                    52:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F2:BD:79:A3:84:8A:2A:AA:3D:24:7F:42:DB:C0:E2:2C:42:F7:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34f36a56-7e4f-3d90-90ee-47af39b0b8a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.84.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:ba:ef:d2:39:4c:bc:64:2d:b8:97:5a:45:7d:aa:b6:09:2e:
         ef:84:b0:b8:26:8e:c0:a2:0b:75:18:d7:c7:55:e4:3b:54:80:
         e1:59:cb:89:e0:cc:1f:73:88:e0:de:13:4b:e1:e7:09:8f:3b:
         e4:30:ee:cc:09:99:ad:d3:1d:73:d8:5a:45:31:a2:eb:17:62:
         d3:7d:22:6a:5d:dd:e3:b8:4a:df:6d:2d:b2:2e:9f:e7:52:b3:
         fd:e2:ca:48:91:4e:68:c3:99:4e:99:73:a3:c6:53:de:c1:0f:
         37:9b:0b:66:83:de:78:ed:8a:cd:f6:a7:59:b5:8a:45:51:3f:
         b7:94:d5:d1:82:d6:ce:c8:2f:28:92:59:6b:db:dc:6c:1a:0f:
         6f:64:22:af:08:ac:76:3b:4f:f8:4d:b3:06:27:a0:fa:a1:b6:
         5c:e7:1d:b9:02:85:88:88:dc:13:66:b3:a9:fb:ea:0e:1b:d9:
         12:fb:61:7f:5e:18:21:0d:b7:51:8c:8c:2b:6b:35:fb:9f:94:
         f2:27:cc:30:d0:a5:0a:a7:f0:bb:5f:78:bf:96:d2:cd:38:c3:
         69:19:e8:45:b7:32:f6:15:4e:8a:0c:01:ef:e0:95:83:5b:7b:
         f0:c8:b9:40:5b:25:35:f7:9a:b2:f3:29:37:30:27:83:f5:4a:
         65:68:81:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----