Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49dafd83-1951-376d-9705-870c7e4e9d42.roa
File:                     49dafd83-1951-376d-9705-870c7e4e9d42.roa (raw, json)
Hash identifier:          acBeo5xOlJIopQGBzZP3pjgRiE2iak6307joJQYG2Bw=
Subject key identifier:   68:1B:AB:F8:9E:D6:11:A7:B0:3A:67:D1:26:22:A7:F9:F2:5D:91:55
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EE56984995552D19706BD3800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49dafd83-1951-376d-9705-870c7e4e9d42.roa
Signing time:             Sat 13 Aug 2022 12:00:00 +0000
ROA not before:           Sat 13 Aug 2022 12:00:00 +0000
ROA not after:            Sun 18 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.104.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e5:69:84:99:55:52:d1:97:06:bd:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 13 12:00:00 2022 GMT
            Not After : Sep 18 04:00:00 2022 GMT
        Subject: CN=c4c5518f-64d2-4981-9d6d-333c1ea7f07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:13:14:44:2b:4b:a2:30:82:ac:c6:f2:f2:4c:
                    7b:bb:4b:2c:93:9e:3b:39:c0:29:f1:a0:11:ae:5e:
                    ee:55:05:11:05:49:90:6d:78:27:1f:57:2a:07:80:
                    d0:33:58:16:4f:8a:ef:58:5d:17:c2:63:6c:e4:8f:
                    8a:bc:b5:18:bc:f2:d6:e6:4d:35:aa:b3:43:61:f0:
                    57:64:fc:09:fc:8c:22:fa:ba:38:e4:1b:6a:28:ee:
                    2b:b9:0b:3a:58:2a:43:7e:d3:36:5b:8d:e1:74:51:
                    f6:20:ec:27:0c:37:64:75:95:95:84:5b:bf:6d:55:
                    4a:74:46:e4:39:4f:41:7b:24:aa:4d:c3:47:0e:bf:
                    62:4e:18:54:39:a2:6a:38:73:fb:2c:fe:02:fd:4e:
                    82:ec:eb:6e:f6:73:d2:c9:ea:5e:88:c5:f6:69:9a:
                    ce:43:6f:0c:17:04:62:22:b7:cd:56:27:8e:0d:f9:
                    eb:5b:9d:bd:97:38:0a:ee:2e:a5:89:13:44:f2:e1:
                    25:fd:da:d5:68:8c:2f:ea:1e:97:c1:62:cb:a8:80:
                    ab:a3:7f:30:04:7a:52:ba:9d:ed:01:62:2e:a5:2e:
                    8c:5e:2e:e4:c8:13:d0:cf:a1:35:ea:29:9c:ac:1a:
                    43:4f:8a:47:76:22:3a:97:0f:d7:03:2f:23:75:6a:
                    c4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1B:AB:F8:9E:D6:11:A7:B0:3A:67:D1:26:22:A7:F9:F2:5D:91:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49dafd83-1951-376d-9705-870c7e4e9d42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.104.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:35:6d:6b:6c:e7:a3:2a:3d:7b:53:d4:f5:62:c1:b7:f1:5a:
         15:19:1e:90:1f:29:ee:8a:9c:15:71:8b:e6:98:e9:70:56:90:
         7e:6b:d5:38:7c:af:18:62:e6:0d:5e:10:a4:55:9d:f6:7b:52:
         8a:e3:d1:30:3b:ba:97:82:0b:fb:a1:d6:1c:c7:e6:10:12:ff:
         2b:0f:98:13:f6:a3:2e:39:e6:cc:55:ef:93:25:b2:e1:9c:e1:
         a8:9c:6b:1a:02:13:9f:ce:95:3b:c4:ce:79:24:b4:55:d1:3f:
         cb:f4:0c:df:df:ce:70:44:61:5e:0b:0d:cb:88:4d:65:df:96:
         f5:fd:52:fe:16:b2:06:2a:90:46:4c:05:f3:ad:26:7c:c6:ab:
         2d:d6:f6:81:94:19:10:bf:e0:09:61:ee:43:eb:71:b6:83:c1:
         18:19:38:5f:6f:13:54:6d:88:10:e5:c5:6c:71:94:b3:0a:b0:
         4a:6d:cd:21:13:d3:86:66:62:f7:7d:2e:29:63:23:b3:ac:9b:
         9c:ba:71:c3:fd:88:28:13:4d:ee:56:df:26:a2:12:a1:bf:66:
         5d:61:73:f6:f9:3a:6b:52:01:2f:74:ff:d7:ef:8b:2c:ad:9b:
         c6:e6:18:29:ac:92:9e:88:8d:ed:ec:41:e1:0b:4a:fb:25:dc:
         f6:5b:2a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----