Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/55a7a663-7b1f-355c-a59b-933b546e9e46.roa
File:                     55a7a663-7b1f-355c-a59b-933b546e9e46.roa (raw, json)
Hash identifier:          UEZzXHX5zITfWR37Qc5lkVK3xNwf9ZuHbRwwy+3JZHI=
Subject key identifier:   85:03:CE:8D:3B:3B:B8:FF:07:37:F1:78:30:30:4F:70:2E:9F:C6:94
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F080BCAEDC84ED6CD0CCF1D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/55a7a663-7b1f-355c-a59b-933b546e9e46.roa
Signing time:             Thu 25 Aug 2022 12:00:00 +0000
ROA not before:           Thu 25 Aug 2022 12:00:00 +0000
ROA not after:            Fri 30 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.247.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:08:0b:ca:ed:c8:4e:d6:cd:0c:cf:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 25 12:00:00 2022 GMT
            Not After : Sep 30 04:00:00 2022 GMT
        Subject: CN=112873b7-8a20-4dc0-b9ae-2a801012eb4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:08:52:54:f2:e1:f3:6d:30:7e:ea:3e:56:3a:
                    17:2e:79:9a:26:d2:77:45:fa:a0:50:d5:b3:ad:c7:
                    14:5a:97:cd:15:e6:61:da:73:1b:b8:8b:e3:b7:09:
                    da:90:01:53:71:ce:85:2d:7c:58:80:2b:13:2a:0d:
                    69:85:a6:06:b8:89:a3:fe:26:ce:55:63:9f:9f:c9:
                    5d:61:21:82:52:c8:e5:cd:97:a2:c9:10:c5:ba:3d:
                    d8:14:4d:35:84:f4:f6:92:83:73:39:f4:19:b8:3c:
                    71:35:6f:b5:4a:f9:64:97:2e:c0:de:7a:94:bf:13:
                    00:88:50:7b:2e:93:d2:a1:fd:bf:99:98:6d:21:43:
                    51:90:24:87:e8:63:e8:c9:07:06:d0:91:43:0b:db:
                    44:7c:a4:8b:b7:f5:cd:7d:de:5c:19:b4:33:5f:d1:
                    f6:41:7c:15:ac:24:3a:40:23:4a:37:25:96:6f:e5:
                    30:bf:91:d3:07:f7:82:53:b6:4d:f7:17:29:e9:e8:
                    1b:14:99:9d:aa:86:2f:c7:eb:83:5a:eb:85:eb:a1:
                    c0:2e:f9:54:b1:8d:5d:5c:38:7a:bd:db:e1:b0:9f:
                    71:5a:21:5c:55:65:ba:6a:79:ce:2f:08:d4:b2:52:
                    30:ed:7a:93:ba:ab:0b:23:4c:b3:eb:71:41:df:3f:
                    de:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:03:CE:8D:3B:3B:B8:FF:07:37:F1:78:30:30:4F:70:2E:9F:C6:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/55a7a663-7b1f-355c-a59b-933b546e9e46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.247.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:44:86:3b:12:78:f1:f2:43:6f:d0:75:16:94:3a:99:d8:30:
         38:35:0e:71:a8:2f:5e:eb:a1:bc:17:14:db:d6:59:a6:fa:f6:
         db:72:ab:4f:50:bb:d2:75:ba:25:58:05:86:15:7d:79:69:f8:
         49:cd:3b:c1:6f:be:90:67:3a:b8:05:01:c4:9e:93:f1:67:e4:
         0d:1e:73:4f:5e:4e:aa:f5:9e:b4:d5:72:06:66:a8:5f:fe:3c:
         a4:93:79:76:3c:d2:17:cd:de:2d:84:d9:b1:c7:a6:5e:7c:6b:
         43:20:8b:e8:77:71:8f:34:40:ee:41:07:75:79:28:dd:0a:ca:
         45:f3:78:5b:4c:9c:ba:51:4c:89:c5:6e:44:9e:a4:09:0b:c0:
         72:15:42:2a:48:93:31:d8:e0:fe:81:82:f9:6e:3f:b3:df:5c:
         49:b6:62:4f:ae:b3:d2:65:79:cc:6f:ea:d6:d8:61:a3:b9:f9:
         07:8a:c4:67:f2:e0:7f:6d:c6:92:d0:3a:b6:09:c6:a2:6b:1e:
         7b:b7:2c:18:07:93:f6:88:3a:f7:88:e3:0f:d9:4a:f3:9f:9b:
         50:ce:1c:d9:f8:93:c5:86:7b:f2:ec:42:99:48:36:e2:ba:21:
         6d:c8:1b:29:4a:89:24:af:f1:01:b9:d6:3c:29:ae:7a:41:c4:
         1c:5c:d6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----