Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c6813ec-9d3a-3f3f-9b69-bc7bc8c3888f.roa
File:                     7c6813ec-9d3a-3f3f-9b69-bc7bc8c3888f.roa (raw, json)
Hash identifier:          LPRmLL7aWrI2+Raerc8Z0T1BszDvbMNfW/ae1MY9rM0=
Subject key identifier:   58:66:8A:4D:B2:EB:1E:01:BB:CA:1B:58:70:88:AC:DB:5E:00:9C:9A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FF6F1A2451D60DF407D3D2600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c6813ec-9d3a-3f3f-9b69-bc7bc8c3888f.roa
Signing time:             Fri 18 Nov 2022 12:00:00 +0000
ROA not before:           Fri 18 Nov 2022 12:00:00 +0000
ROA not after:            Sat 24 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        18.162.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f6:f1:a2:45:1d:60:df:40:7d:3d:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 18 12:00:00 2022 GMT
            Not After : Dec 24 05:00:00 2022 GMT
        Subject: CN=0adb6b4c-ac81-4f80-9ece-a4da29bd9711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9b:cb:62:e9:d2:df:ce:a0:ba:85:a7:b9:f9:
                    f7:4e:e0:44:d9:84:c9:e3:1d:06:55:cc:0e:bb:84:
                    ba:6c:9f:4a:c8:63:cd:82:b3:17:c3:6a:93:2f:fa:
                    53:fa:7d:e7:69:ea:2f:f9:c7:9f:c6:07:f6:1f:7c:
                    0c:f8:1b:c0:60:49:15:11:9e:e4:05:56:08:3e:b6:
                    b0:c1:1c:b1:f6:1d:fc:c3:51:3e:75:c5:d3:a5:ef:
                    f5:e0:d7:3f:f4:dc:fe:7e:f4:5a:6a:e1:3c:cc:a5:
                    17:53:f7:69:fe:ce:4c:76:87:4d:02:71:2a:82:b5:
                    66:7a:57:eb:a7:d4:a0:84:47:2b:f8:7a:25:2c:f3:
                    05:7d:8f:40:29:a5:2a:32:c8:44:54:61:98:18:5a:
                    ad:6b:1f:88:b4:84:a9:39:d0:e6:90:00:cd:f7:8f:
                    9a:09:bb:7d:2b:1b:4e:4b:27:7f:ca:48:1c:9d:20:
                    7d:ec:92:a6:3b:85:3f:06:6b:f3:f2:05:b8:ef:06:
                    6c:27:af:df:ac:0a:e5:c0:14:95:e8:73:79:15:46:
                    b8:c4:89:08:aa:53:8d:b7:73:b7:5b:d4:1f:c0:96:
                    6c:dd:4a:af:6b:c4:aa:72:49:03:9a:43:ca:25:80:
                    db:48:2d:12:54:76:3b:01:33:e9:6d:d6:10:83:ab:
                    1c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:66:8A:4D:B2:EB:1E:01:BB:CA:1B:58:70:88:AC:DB:5E:00:9C:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c6813ec-9d3a-3f3f-9b69-bc7bc8c3888f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.162.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:7e:b5:e3:ba:2e:62:68:23:ca:19:83:30:b3:6e:ab:af:07:
         39:fa:18:31:7a:61:b8:13:53:76:4a:56:b7:89:b5:39:43:7c:
         48:51:5f:76:b5:ac:b6:8f:35:54:8b:79:9b:27:34:57:89:b3:
         ff:c6:f0:04:ff:29:d5:9e:e3:2d:a7:27:f3:d8:14:8b:fb:0a:
         37:eb:e3:3f:4a:b6:66:1a:90:64:33:61:5e:4f:20:09:70:7b:
         09:a7:7b:89:01:4c:80:38:91:7f:34:8f:f1:ff:19:8b:02:30:
         90:30:b9:8b:e7:ff:33:1c:85:4d:f3:5f:27:dd:16:9e:ae:5c:
         f6:37:43:f3:c6:55:f3:43:59:d2:7c:da:32:29:31:56:f6:1a:
         b6:48:88:e8:c7:e5:5f:3e:70:04:29:97:35:33:3c:37:2e:73:
         96:09:24:0b:14:2c:7b:0a:ae:59:63:0d:be:ba:17:4c:f4:4f:
         6a:8d:f4:fe:8c:d3:d8:ce:99:50:01:ef:da:e0:93:b2:a0:f8:
         4b:17:4b:07:8d:c9:a1:a2:fb:48:ed:08:f6:cf:c3:3c:8f:26:
         90:6f:7c:28:96:ae:eb:7f:21:d7:1c:6b:6c:ba:07:07:da:dd:
         71:4e:49:03:9b:1f:3e:bd:cf:9f:65:15:7d:ef:a7:e1:c5:6f:
         a6:65:a8:18
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/28aJFHWDfQH09JgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTExODEyMDAwMFoXDTIyMTIyNDA1MDAwMFowLzEtMCsGA1UEAxMk
MGFkYjZiNGMtYWM4MS00ZjgwLTllY2UtYTRkYTI5YmQ5NzExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopvLYunS386guoWnufn3TuBE2YTJ4x0GVcwO
u4S6bJ9KyGPNgrMXw2qTL/pT+n3naeov+cefxgf2H3wM+BvAYEkVEZ7kBVYIPraw
wRyx9h38w1E+dcXTpe/14Nc/9Nz+fvRaauE8zKUXU/dp/s5MdodNAnEqgrVmelfr
p9SghEcr+HolLPMFfY9AKaUqMshEVGGYGFqtax+ItISpOdDmkADN94+aCbt9KxtO
Syd/ykgcnSB97JKmO4U/Bmvz8gW47wZsJ6/frArlwBSV6HN5FUa4xIkIqlONt3O3
W9QfwJZs3Uqva8SqckkDmkPKJYDbSC0SVHY7ATPpbdYQg6scGwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFhmik2y6x4Bu8obWHCIrNteAJyaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvN2M2ODEzZWMtOWQzYS0z
ZjNmLTliNjktYmM3YmM4YzM4ODhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEqIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAiH6147ouYmgjyhmDMLNuq68HOfoYMXphuBNTdkpWt4m1OUN8SFFfdrWs
to81VIt5myc0V4mz/8bwBP8p1Z7jLacn89gUi/sKN+vjP0q2ZhqQZDNhXk8gCXB7
Cad7iQFMgDiRfzSP8f8ZiwIwkDC5i+f/MxyFTfNfJ90Wnq5c9jdD88ZV80NZ0nza
MikxVvYatkiI6MflXz5wBCmXNTM8Ny5zlgkkCxQsewquWWMNvroXTPRPao30/ozT
2M6ZUAHv2uCTsqD4SxdLB43JoaL7SO0I9s/DPI8mkG98KJau638h1xxrbLoHB9rd
cU5JA5sfPr3Pn2UVfe+n4cVvpmWoGA==
-----END CERTIFICATE-----