Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/61f33c06-5de5-371c-a25b-df8b4b38d914.roa
File:                     61f33c06-5de5-371c-a25b-df8b4b38d914.roa (raw, json)
Hash identifier:          1SChG8odLzBW4hJQBle8BoexaOjZfQaoPW46o0UrYG4=
Subject key identifier:   0C:40:D2:83:8D:63:49:41:60:E9:80:F5:29:3B:FA:7E:CA:97:CD:C0
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583C95D3B7ECA459148BF15CB300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/61f33c06-5de5-371c-a25b-df8b4b38d914.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        18.58.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:95:d3:b7:ec:a4:59:14:8b:f1:5c:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=882bee1a-231d-4fee-abbb-b0dc3965d94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ca:aa:0a:c4:22:99:c9:ec:23:ea:f6:3f:21:
                    0c:9f:fd:17:49:7b:30:c1:0b:0d:69:74:52:49:03:
                    73:47:fb:d6:b7:db:f7:b3:6d:3e:3d:f6:da:06:d6:
                    ab:81:90:78:b8:bd:3f:f0:98:fe:8e:c1:49:ee:0c:
                    26:c3:41:d4:bd:d2:40:70:3d:bd:ac:58:cf:81:5e:
                    3e:25:53:b4:12:96:1f:6f:e9:cf:65:ee:b4:2d:0e:
                    28:a6:d7:13:7d:cb:68:fe:5b:7c:d3:8f:35:3a:07:
                    91:b5:48:db:9e:93:25:26:cf:f3:4d:ba:0c:66:fb:
                    83:47:14:aa:2d:73:90:2a:0b:33:ac:4b:bc:73:09:
                    be:f9:75:32:4c:93:61:74:ab:09:19:9b:04:36:43:
                    01:ac:71:ba:47:3d:3d:e9:40:bf:14:0c:f5:82:f7:
                    95:ad:f4:0f:b2:1c:f0:34:36:7c:6c:bc:f5:e6:fb:
                    5c:73:86:44:07:e5:cf:f2:41:0c:44:82:0f:a7:c2:
                    a5:35:05:82:7b:b7:62:f2:71:d2:e7:0e:81:b7:41:
                    07:24:5d:aa:c2:44:73:53:8b:d0:e1:9f:f0:a2:ae:
                    f7:61:c1:e7:86:c7:89:5d:2f:5f:59:62:73:95:23:
                    63:c9:7e:f5:0f:6e:35:27:3d:10:5d:1f:41:4d:d9:
                    52:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:40:D2:83:8D:63:49:41:60:E9:80:F5:29:3B:FA:7E:CA:97:CD:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/61f33c06-5de5-371c-a25b-df8b4b38d914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.58.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:d1:01:39:33:d8:67:3b:57:6a:1f:6a:90:0a:54:17:d6:d0:
         7d:75:b2:4a:e0:cd:89:1c:12:d1:a5:f1:89:b1:1d:c1:b2:bc:
         56:3a:65:53:70:52:b3:0c:b8:66:63:30:bb:ae:fd:42:f1:36:
         7a:5a:a3:b8:ee:98:bc:a7:a0:bd:38:82:e7:89:8a:f1:96:61:
         86:03:ce:2b:ae:e3:dc:71:69:85:46:50:b8:c3:f7:0c:8e:bc:
         1a:1f:fa:22:66:21:82:93:a9:f7:f4:59:e0:10:71:2b:ec:aa:
         dc:cc:f9:0d:a7:01:d5:66:21:a6:f1:18:09:bd:03:10:58:13:
         14:07:2a:17:25:42:51:84:ab:76:7d:da:51:ce:b1:4d:31:79:
         6f:a4:a5:20:6f:03:0b:3f:ab:c6:69:26:aa:39:11:6b:ab:d4:
         21:a5:12:07:cd:c4:43:eb:15:07:b1:ec:d4:a0:0a:67:bf:f5:
         8f:76:41:c4:c1:50:19:2e:ae:19:7c:a4:86:78:4d:73:d6:ed:
         65:e5:5f:76:d5:87:aa:d9:bc:03:c6:45:49:50:29:87:bb:e1:
         84:7f:ff:53:3f:ac:1d:f9:33:63:0f:5a:6b:c3:88:ca:d9:3b:
         b4:63:4a:03:04:c6:56:25:59:31:eb:a6:7e:0b:df:6b:38:fa:
         94:ee:11:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----