Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8417dd81-22c7-375d-b3bf-f8aa6d3c64ad.roa
File:                     8417dd81-22c7-375d-b3bf-f8aa6d3c64ad.roa (raw, json)
Hash identifier:          +bo1AdQxW01E6XXjPczECUVH5dTxalzM2/egFQC71Ws=
Subject key identifier:   F2:BC:43:CB:94:B2:86:5B:3E:56:BA:21:C2:13:B1:C8:D8:9C:96:30
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FF5E561C0DAE74C647C1C6D30
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8417dd81-22c7-375d-b3bf-f8aa6d3c64ad.roa
Signing time:             Fri 18 Nov 2022 12:00:00 +0000
ROA not before:           Fri 18 Nov 2022 12:00:00 +0000
ROA not after:            Sat 24 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        18.248.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f5:e5:61:c0:da:e7:4c:64:7c:1c:6d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 18 12:00:00 2022 GMT
            Not After : Dec 24 05:00:00 2022 GMT
        Subject: CN=dc85ad7e-7400-4319-abd8-4c899cd09e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d1:a1:39:cf:e0:dc:24:5f:4f:80:9d:c5:8f:
                    a7:82:d2:8e:b4:59:85:48:75:d0:44:f1:9b:14:3e:
                    65:df:e8:08:e6:52:40:3b:b7:59:49:1d:70:11:19:
                    10:13:8c:11:83:61:16:a3:a6:df:af:d6:8b:01:63:
                    16:5e:28:4c:1d:b0:17:33:aa:06:6b:77:e6:7d:1e:
                    3e:9d:aa:94:d6:d7:27:93:c7:72:32:49:6d:00:b3:
                    a8:5c:e8:f6:43:5f:9b:68:6f:f4:ec:30:95:d9:87:
                    b7:49:b4:09:e7:3d:64:2d:53:17:7b:cd:67:00:01:
                    a1:85:6b:e5:b5:12:7d:c8:71:d6:33:37:e1:93:79:
                    9c:0f:00:12:54:ea:b9:6a:88:22:95:32:a0:00:e3:
                    76:13:30:49:59:d8:30:ea:46:38:49:da:11:b6:c4:
                    60:7e:12:c2:0a:f7:b2:5c:a3:00:35:92:04:d7:2f:
                    ff:72:c0:df:f4:da:f7:49:ed:11:62:ba:49:54:41:
                    f1:76:34:7b:3d:3f:a5:ff:5e:c3:0c:20:5e:52:0f:
                    a6:39:17:7a:37:9b:4b:b4:a4:31:22:08:54:14:c4:
                    36:81:29:e0:1d:21:0e:ab:d3:57:2b:b3:94:49:32:
                    19:1a:e7:92:49:4b:78:09:a7:32:28:9c:a5:f6:64:
                    a0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BC:43:CB:94:B2:86:5B:3E:56:BA:21:C2:13:B1:C8:D8:9C:96:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8417dd81-22c7-375d-b3bf-f8aa6d3c64ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.248.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:17:d4:c4:97:17:87:c2:83:8e:13:f4:76:0c:71:be:49:70:
         99:43:33:c7:45:e8:17:d2:8a:6f:ef:42:a6:8b:09:64:81:b4:
         14:01:8b:9f:a3:5c:3d:67:24:f2:30:90:54:f1:32:5a:3b:98:
         a0:5b:01:99:5b:00:b6:de:c2:d1:33:3b:7a:5f:62:df:11:dd:
         2b:70:6f:79:12:70:55:6c:73:52:4a:68:fd:a5:81:fb:58:a2:
         c8:93:c0:f3:23:65:35:99:5c:23:57:7e:b7:17:db:40:f6:fa:
         c4:b7:c8:cb:ec:49:44:04:44:71:fb:13:8b:51:1c:14:e1:99:
         7a:90:c2:bf:06:18:bb:f7:fc:1f:f4:7a:61:dd:fa:68:40:d6:
         fd:2c:f8:e3:c7:18:06:d0:64:e9:06:90:de:62:0e:91:9a:a0:
         af:1c:0f:72:66:be:8a:0a:a3:3e:36:55:7b:a4:2a:0c:0b:07:
         26:d0:0a:56:09:d2:13:df:44:e8:2c:71:dc:6a:34:f7:9b:16:
         88:0f:06:e7:54:cf:6b:d3:35:6f:a7:15:58:32:f3:14:fa:d1:
         7f:e3:a0:8a:57:3a:2c:15:8d:67:0c:75:15:b3:31:7c:19:80:
         ea:be:e1:e2:52:bd:03:32:b7:e1:cf:61:5c:c8:60:42:7c:7e:
         e1:c3:d5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----