Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8dc72c55-258e-3048-91be-1664a7b89ffd.roa
File:                     8dc72c55-258e-3048-91be-1664a7b89ffd.roa (raw, json)
Hash identifier:          YrkxXKWaTm+NuknOsodOf7YDknJ23PXoUipx+Aqcxfc=
Subject key identifier:   14:05:81:78:F6:01:4C:DD:76:92:B0:F4:4B:A2:E7:69:EC:85:CC:BD
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584046A73770605C821EF94F1D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8dc72c55-258e-3048-91be-1664a7b89ffd.roa
Signing time:             Sat 17 Dec 2022 12:00:00 +0000
ROA not before:           Sat 17 Dec 2022 12:00:00 +0000
ROA not after:            Sun 22 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        18.104.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:46:a7:37:70:60:5c:82:1e:f9:4f:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 17 12:00:00 2022 GMT
            Not After : Jan 22 05:00:00 2023 GMT
        Subject: CN=5d198cbd-e23f-408d-9ef2-5f9f3770d2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ca:21:52:0e:e9:30:37:ed:af:eb:86:3d:eb:
                    af:72:d5:ee:f3:d5:d4:47:22:a4:7e:20:5a:90:74:
                    4d:11:e9:c5:48:e6:9d:47:81:12:0c:9c:7e:13:a7:
                    cc:c0:5b:23:b4:67:18:47:b7:f0:05:c6:fb:04:b0:
                    f7:68:2b:ee:47:67:55:4c:24:a0:d1:1c:4b:9c:13:
                    a6:de:38:27:b5:5f:8c:5a:56:25:53:fc:7e:41:a4:
                    4c:8d:7f:4f:b3:05:cb:5f:f5:d4:71:14:76:61:b3:
                    96:8e:40:e4:7d:df:35:1a:79:a0:2e:42:d6:22:65:
                    2f:d6:05:42:e3:04:a2:bd:be:4b:29:82:02:e8:de:
                    3f:15:fb:42:62:d3:14:43:ec:84:c4:c3:f1:ce:80:
                    0d:f0:bc:d0:82:ce:80:d9:4a:f1:ff:bb:f4:ba:54:
                    cc:62:4b:63:c7:53:96:c4:7e:e7:13:0e:1e:05:1b:
                    00:88:ef:d8:99:57:09:a3:c4:57:d7:33:52:4d:8a:
                    64:81:a6:cf:be:1e:22:9b:eb:3d:b3:83:61:a3:9f:
                    c5:27:9a:68:17:f3:f0:52:ab:cc:bb:19:ab:57:26:
                    4c:f8:c1:f2:02:71:fb:c3:e5:69:9a:4e:5f:22:72:
                    f6:b4:66:e0:37:b2:cd:97:e0:d4:ca:f3:23:89:81:
                    98:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:05:81:78:F6:01:4C:DD:76:92:B0:F4:4B:A2:E7:69:EC:85:CC:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8dc72c55-258e-3048-91be-1664a7b89ffd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.104.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:46:77:7f:39:13:54:db:52:7b:42:bd:e9:36:00:da:33:e0:
         ae:2e:7e:84:fd:14:bd:ce:22:45:c1:92:0d:cb:b7:bb:33:41:
         e2:88:8b:7a:b1:c2:8d:38:4b:b8:e7:ba:c8:85:36:84:ac:a7:
         36:36:01:f9:25:3f:6b:01:6f:7f:38:3e:f2:b5:bd:15:f6:d4:
         8e:7e:bb:7c:81:0f:4a:1d:e4:81:bc:cb:ca:dc:6a:c6:a5:b6:
         f0:2a:19:d3:6f:93:d0:a7:6c:43:58:1a:cf:69:b7:0a:77:02:
         e8:05:98:43:43:f6:99:4c:74:d1:e2:43:37:bf:38:0f:f5:44:
         73:05:b5:10:57:09:cc:7f:f3:0b:94:45:4d:61:c1:00:72:26:
         4a:10:8b:75:c6:9b:c1:39:08:35:0b:08:16:39:1d:ad:5a:26:
         70:fd:10:e3:0b:e7:52:25:a0:5c:49:43:39:68:b1:9d:67:31:
         4c:4c:9b:43:2f:93:b1:a0:5a:af:d3:5e:e1:ff:e8:61:1a:b0:
         65:e9:c5:1a:67:d2:22:8f:b6:ea:bd:e2:8b:84:da:f4:11:7f:
         c7:55:fd:fc:64:1c:46:fc:c9:83:ff:6d:c7:79:98:2b:61:f1:
         a5:29:61:d6:fe:64:a9:03:1f:0f:4d:0d:4d:19:9c:c4:a3:c5:
         66:85:c5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----