Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4c6f8aa2-7fb2-3c2a-8a70-fc3d495c3a6f.roa
File:                     4c6f8aa2-7fb2-3c2a-8a70-fc3d495c3a6f.roa (raw, json)
Hash identifier:          xWJcNxR1Dk5FK91N3BtTsWKtAwfTG6w4mS9eGvjtyb0=
Subject key identifier:   2E:E9:AB:F2:B3:38:2E:BC:1D:42:B4:1E:0B:A1:1D:45:DC:61:A8:78
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E973E0E717B339FB2F2F45510
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4c6f8aa2-7fb2-3c2a-8a70-fc3d495c3a6f.roa
Signing time:             Sat 16 Jul 2022 12:00:00 +0000
ROA not before:           Sat 16 Jul 2022 12:00:00 +0000
ROA not after:            Sun 21 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.138.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:97:3e:0e:71:7b:33:9f:b2:f2:f4:55:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 16 12:00:00 2022 GMT
            Not After : Aug 21 04:00:00 2022 GMT
        Subject: CN=e18fcc6d-f0ce-4f6c-84fb-203726d42a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e8:a4:06:18:91:26:45:ae:5b:c1:d9:af:9a:
                    9d:92:e8:1b:ac:11:6e:63:80:9e:66:3a:d5:e3:96:
                    39:f3:98:69:d2:81:46:af:53:c4:14:b5:d9:e2:1d:
                    eb:69:1b:66:71:73:74:90:5a:75:02:ad:bd:7b:64:
                    11:33:72:93:0c:a0:cb:e9:f1:6a:b6:bd:a0:95:6c:
                    46:d7:c2:b9:8b:be:57:c4:9b:86:5b:a1:09:e1:74:
                    a5:44:79:a2:4b:71:4d:88:29:48:bb:a4:62:8c:36:
                    63:a8:e0:44:0f:67:84:f5:12:c4:6e:93:38:3e:f3:
                    72:e0:2c:0d:36:97:94:e3:85:84:c6:af:dd:23:85:
                    91:76:ef:84:48:15:8b:60:89:38:1c:4e:5a:e6:de:
                    5c:e1:b8:1e:f7:0f:a8:ad:73:c3:42:a2:86:18:27:
                    f2:c3:54:37:34:0b:e9:75:ea:bd:ae:01:59:3a:e1:
                    c7:af:8c:38:31:6e:e8:77:e7:dd:0d:28:a3:ac:92:
                    69:46:d9:a5:b4:90:43:ac:0c:6a:96:fe:1b:e0:c3:
                    fd:4d:40:07:08:f1:f4:c4:28:19:fe:a6:5c:67:5d:
                    2d:2d:9c:fb:f8:9e:cd:3d:ad:5f:32:05:b4:81:56:
                    36:3c:2c:b0:fb:bc:55:c4:30:e5:d9:b9:72:63:f9:
                    a1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E9:AB:F2:B3:38:2E:BC:1D:42:B4:1E:0B:A1:1D:45:DC:61:A8:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4c6f8aa2-7fb2-3c2a-8a70-fc3d495c3a6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.138.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:76:d6:bc:20:11:01:12:0b:1e:0c:16:14:79:9d:79:87:5b:
         6f:0d:6f:24:72:b6:ca:a9:4d:38:ab:3e:57:d1:31:9b:99:87:
         42:7b:35:cf:35:c7:44:c6:36:52:70:8e:b4:97:89:5d:2c:67:
         f3:00:b6:7e:69:f8:bf:f8:db:3d:b1:a6:81:fe:7b:8c:b9:91:
         d4:89:52:37:c1:e7:b0:f0:aa:4f:75:f5:f8:49:29:12:2e:7a:
         ed:7f:77:0a:c7:20:2a:13:9b:52:0b:cb:fa:73:f1:91:db:e3:
         79:83:ec:fe:10:a2:e5:7a:96:fa:5d:55:50:f0:c1:41:05:77:
         55:03:79:5c:85:61:55:24:59:97:88:2c:ac:22:10:b3:92:de:
         2b:2d:cf:77:94:45:7d:c6:a8:74:fd:1c:90:15:f3:f1:d3:70:
         47:52:97:d3:79:dd:84:6c:a8:d4:06:9b:a5:18:8f:83:49:1a:
         5e:e6:cf:7a:0e:2e:35:74:8f:8e:fd:58:3a:5b:f9:74:a5:65:
         d5:7e:9c:ff:98:d7:c6:cc:27:da:3a:d2:7c:c8:8a:54:fe:8b:
         9d:e2:ff:f4:06:6e:ff:58:a6:c0:ab:23:77:c4:6f:32:f5:03:
         13:29:3c:e2:1a:a4:24:da:c4:54:0a:89:cc:35:b7:34:1b:76:
         01:e1:91:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----