Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/80859062-4cdd-3bbf-a23f-531d401f6600.roa
File:                     80859062-4cdd-3bbf-a23f-531d401f6600.roa (raw, json)
Hash identifier:          ataNSt7HJhLMEmXpvKwt4SKCUbLlFbd+098h9zCvUBI=
Subject key identifier:   B9:D8:9F:FE:E0:2C:DA:FC:7D:F3:EF:91:BB:5E:5D:68:0E:62:67:BF
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D324F3FDE00CCAD000A8AEC80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/80859062-4cdd-3bbf-a23f-531d401f6600.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.90.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:32:4f:3f:de:00:cc:ad:00:0a:8a:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=d384622b-e20a-43dd-acc4-5b0c6f363be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ba:9f:a9:2d:56:55:ff:a5:07:2c:ce:68:75:
                    74:88:6e:f4:12:25:82:2c:e6:8f:d7:34:ec:bc:71:
                    54:63:5a:32:1c:dc:99:6d:a4:80:66:3b:93:13:43:
                    7d:22:fe:93:87:67:dd:29:13:d8:13:d2:c7:d7:55:
                    0d:7f:b0:7f:72:7b:cf:15:b8:32:fa:f6:9a:ea:15:
                    30:f5:f2:89:2f:39:23:19:4d:ae:6a:e6:eb:d3:20:
                    cc:3c:51:e2:f8:83:c7:9c:0e:10:eb:82:d7:e3:e4:
                    25:dc:1a:98:38:2e:e8:8a:1d:39:f3:bc:da:66:fa:
                    6b:34:c1:0c:ca:8f:d2:9e:52:2c:bc:03:b3:38:b4:
                    51:de:09:88:01:c2:2c:2d:39:54:ac:27:9e:6f:7f:
                    6b:23:af:48:8e:1e:bc:d4:8f:c7:79:7a:cc:3a:61:
                    9f:fa:b8:8f:fe:63:61:a4:19:21:e1:aa:96:06:73:
                    0e:6f:2e:8e:f0:57:99:8d:35:e2:c4:58:6b:67:2b:
                    86:ad:2a:eb:c1:4a:dc:d2:24:d6:4e:06:46:22:0d:
                    2f:61:90:01:36:48:e1:7d:48:a2:8c:97:24:4f:83:
                    96:cb:a0:90:d4:77:d2:32:54:16:fe:01:66:0d:b7:
                    af:95:89:b0:3e:3b:d5:22:7a:9d:42:e2:26:fc:cd:
                    aa:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D8:9F:FE:E0:2C:DA:FC:7D:F3:EF:91:BB:5E:5D:68:0E:62:67:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/80859062-4cdd-3bbf-a23f-531d401f6600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.90.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:f9:7a:ff:78:99:17:6b:16:4d:c6:c9:7b:a3:36:4d:fc:98:
         30:5c:3a:87:79:e3:f1:13:1c:bd:d8:7f:61:97:9b:60:a8:12:
         8d:de:37:67:e1:e8:de:7e:14:d4:f7:12:02:ad:86:8b:3a:b8:
         73:70:e7:75:0a:7c:9c:1a:c8:2c:30:98:50:6d:64:1a:95:d7:
         77:80:2f:80:d1:24:2a:51:82:8d:22:6b:e8:eb:99:92:9f:9c:
         e0:a1:f7:9b:1e:f2:eb:33:e2:12:4c:60:74:68:ac:4e:83:05:
         cc:2f:8c:9c:ec:a9:1f:cf:23:25:b4:17:57:af:db:44:8b:77:
         70:f4:cc:1e:c6:97:06:ff:a5:d7:f0:7c:fe:1a:d1:26:ce:5e:
         2d:1e:62:a5:eb:62:b5:24:f2:3c:d8:70:55:35:29:0a:37:37:
         13:d1:6f:35:fb:85:16:26:dd:2e:d4:16:49:18:5f:fe:5b:de:
         22:a4:15:6d:69:4d:a9:2b:49:b3:af:3e:2c:f3:5d:64:99:cb:
         15:75:5f:bc:07:14:55:c1:94:63:96:4e:24:0f:1d:86:61:dc:
         2b:4e:de:85:bc:2f:00:27:11:4a:da:1e:c9:4e:44:72:13:66:
         e3:df:d9:10:12:64:47:03:3b:58:40:4e:fc:e0:a5:3f:37:24:
         53:55:a6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----