Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/740676b5-39d6-33db-ad4e-48802a9b6596.roa
File:                     740676b5-39d6-33db-ad4e-48802a9b6596.roa (raw, json)
Hash identifier:          biVxFHVWusvpvYZWigykK/LmlRFFiM6IaX1U7E8l1SQ=
Subject key identifier:   37:F4:CC:78:2D:68:91:A5:5A:5D:AB:7A:9B:36:7E:C8:F1:7F:78:6C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FF8C66814BACB2F2D88F70940
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/740676b5-39d6-33db-ad4e-48802a9b6596.roa
Signing time:             Sat 19 Nov 2022 12:00:00 +0000
ROA not before:           Sat 19 Nov 2022 12:00:00 +0000
ROA not after:            Sun 25 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        18.231.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f8:c6:68:14:ba:cb:2f:2d:88:f7:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 19 12:00:00 2022 GMT
            Not After : Dec 25 05:00:00 2022 GMT
        Subject: CN=839b32e8-3e30-4e2d-a6ac-63294b4fd5dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c8:ad:c3:da:0e:55:2a:9c:83:9c:bb:52:d3:
                    3b:54:f3:dc:0a:d9:92:cf:a0:31:fb:8c:98:c8:29:
                    e7:97:04:c9:05:85:48:4d:97:75:e1:2e:af:46:c0:
                    43:92:48:b0:00:7c:6a:5c:d8:d8:1d:e5:66:3f:f8:
                    d8:dc:b9:97:2e:bb:f9:89:a1:0d:6a:03:98:02:2e:
                    61:88:e3:ca:57:ac:0b:20:e8:19:2d:08:a3:29:f9:
                    38:06:40:19:c3:34:b9:2c:40:ea:d7:c2:09:5f:7c:
                    ed:ad:82:d7:e2:ef:fd:6a:b0:ba:59:31:8b:75:91:
                    51:45:e1:4c:ab:4a:85:67:da:bb:a5:55:d8:9c:1d:
                    7d:94:1a:7c:52:9e:77:be:ef:63:d8:55:ad:14:1f:
                    b7:ff:16:ea:78:36:b0:10:51:91:e8:a1:ec:0b:66:
                    17:63:f9:18:fc:d4:21:ae:9e:80:af:ee:83:cc:19:
                    75:bc:79:86:24:d9:d9:62:5f:33:49:5f:f2:76:f8:
                    18:b2:61:31:39:56:3e:62:51:ed:11:d3:70:fd:6f:
                    c4:90:b8:04:a2:c7:42:0f:2c:eb:4c:79:b4:cb:54:
                    b8:60:16:8b:77:b2:77:9d:89:0a:81:0f:f5:ca:2d:
                    a4:d0:b0:a4:7a:e9:de:7a:9c:95:71:aa:98:50:4a:
                    97:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F4:CC:78:2D:68:91:A5:5A:5D:AB:7A:9B:36:7E:C8:F1:7F:78:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/740676b5-39d6-33db-ad4e-48802a9b6596.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.231.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:34:34:2c:7b:98:4f:a5:52:23:46:3f:94:b3:68:75:cc:78:
         74:67:75:e4:75:cf:51:9b:9e:02:bd:7b:6b:8c:d0:70:09:b5:
         bf:23:43:cc:f0:fa:08:de:ad:3f:aa:9d:97:07:37:78:65:68:
         a3:e4:b8:ff:97:1e:c5:59:18:a6:84:a1:07:84:c7:82:7d:99:
         16:c8:ee:66:df:b9:79:30:98:2a:27:0e:c8:07:79:c7:e4:b4:
         1b:d6:19:f2:22:3e:d7:5f:02:ed:5a:d2:38:06:b6:28:74:d1:
         c1:3e:be:fb:e1:f1:39:0c:a0:a5:5b:02:bf:0f:c3:53:d3:71:
         82:67:6c:df:b0:0a:57:fc:c8:dc:86:4c:d8:0d:6c:7a:8b:de:
         7d:c4:7b:1a:2d:40:e8:32:84:55:87:05:3d:46:0b:2c:f9:83:
         7a:d7:c6:3a:0e:f8:53:6a:d4:0c:63:e1:45:64:e7:2b:80:5a:
         d9:f1:0d:0d:b3:78:c0:43:2c:f5:e8:38:a9:72:50:25:20:34:
         8b:83:8e:f1:1f:98:26:9e:a2:3c:2c:5f:62:8b:b5:a8:7d:8f:
         2d:b0:8b:52:b8:fb:ae:0b:c5:b8:1d:8d:97:16:88:a8:6b:b6:
         4b:2d:bb:8e:e1:24:9f:18:9e:0e:12:30:87:c6:09:8d:26:b5:
         e7:74:f2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----