Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/92ed062d-5fd4-3add-a63e-dc7e6148ff33.roa
File:                     92ed062d-5fd4-3add-a63e-dc7e6148ff33.roa (raw, json)
Hash identifier:          eIkwEdZ779CGaORpXB459EdRrhnikNABpEs5D02COyU=
Subject key identifier:   45:7A:79:4E:AC:49:91:07:12:AC:B6:D5:47:8A:63:92:9A:66:63:E2
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840463EDCDE7018D21F0B1B4080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/92ed062d-5fd4-3add-a63e-dc7e6148ff33.roa
Signing time:             Sat 17 Dec 2022 12:00:00 +0000
ROA not before:           Sat 17 Dec 2022 12:00:00 +0000
ROA not after:            Sun 22 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        18.64.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:46:3e:dc:de:70:18:d2:1f:0b:1b:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 17 12:00:00 2022 GMT
            Not After : Jan 22 05:00:00 2023 GMT
        Subject: CN=6c5f8469-76f2-4a56-bc0e-6b7f4ce96ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e1:6f:e4:23:51:9b:ab:99:22:5d:a3:17:eb:
                    90:45:c2:3c:1e:1a:88:3d:1f:8d:62:bd:c1:7e:b3:
                    48:6f:00:47:83:3b:de:30:86:92:ec:73:1a:74:28:
                    b6:4f:1b:09:3f:0f:5e:c8:2c:94:11:98:95:33:95:
                    11:93:ae:23:69:66:4d:fc:ab:ad:73:83:4c:6c:ea:
                    1b:4d:8f:b5:f3:20:c5:e9:10:09:3b:e1:dc:b7:cd:
                    1a:69:5a:b1:50:0d:f8:bb:1f:72:26:df:66:44:37:
                    54:f6:d7:c1:21:99:8e:13:4c:8c:76:f8:32:64:eb:
                    b7:22:ce:a9:1f:81:89:e2:79:6a:5c:5b:0f:de:0c:
                    b1:50:41:1a:00:33:d3:12:07:26:a0:94:78:41:11:
                    d8:a7:52:9c:96:89:a3:c9:34:af:94:d7:93:66:e6:
                    ea:4e:0e:27:06:38:f5:8c:60:e5:a3:eb:2c:8a:78:
                    b6:50:7e:16:94:7c:91:e0:d5:f8:3c:5c:32:01:b1:
                    fb:94:c3:06:6d:86:49:5e:e2:b5:66:46:aa:48:9a:
                    a1:7d:b2:1f:3c:20:e2:4d:e2:2a:f5:fb:b0:20:d3:
                    1e:db:2c:d9:ab:1a:f8:36:ef:cc:3b:f6:a6:48:dc:
                    bc:a0:ec:30:df:52:1b:17:8b:08:f2:82:19:42:57:
                    95:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7A:79:4E:AC:49:91:07:12:AC:B6:D5:47:8A:63:92:9A:66:63:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/92ed062d-5fd4-3add-a63e-dc7e6148ff33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.64.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:c1:f6:c8:56:73:17:1f:49:42:04:0c:de:9d:f1:d1:a7:b3:
         40:53:b2:08:e8:4d:57:cd:e6:34:28:13:47:68:d4:c5:af:13:
         13:03:05:cd:0b:a8:17:dc:0d:9e:12:9b:c9:c8:93:78:bf:4d:
         0f:f6:86:6f:28:cc:ff:8e:f7:8b:7e:a6:f4:31:7c:32:c8:dd:
         5e:ac:54:91:55:92:86:fd:7a:ea:76:8c:dc:40:1b:b3:b5:97:
         91:f2:bf:9c:34:cb:a9:46:e7:01:47:9c:83:46:00:ee:3f:c8:
         10:7b:3c:8b:3d:44:06:de:8a:6c:96:dd:c2:aa:e6:32:85:2b:
         5e:37:6b:b6:0c:9f:ed:62:85:21:77:f0:11:79:83:f8:09:83:
         57:38:e0:56:53:a0:bb:1b:33:78:84:b3:de:b1:db:60:2e:92:
         78:fe:02:03:ea:57:00:d9:4b:49:14:74:82:02:3f:f3:d3:2d:
         fe:68:e3:c2:8b:f5:94:81:f9:a3:18:f0:7b:de:31:54:6d:b4:
         86:dd:ee:01:a6:8f:dc:a1:4c:45:bc:4f:4a:4a:0c:34:a8:29:
         d4:67:f3:93:61:16:58:89:86:51:18:c2:9a:07:25:57:f5:0b:
         24:4f:96:a4:3a:fa:eb:88:f7:6b:5a:b5:cd:7e:39:da:92:a8:
         0f:02:73:68
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBGPtzecBjSHwsbQIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxNzEyMDAwMFoXDTIzMDEyMjA1MDAwMFowLzEtMCsGA1UEAxMk
NmM1Zjg0NjktNzZmMi00YTU2LWJjMGUtNmI3ZjRjZTk2ZWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuFv5CNRm6uZIl2jF+uQRcI8HhqIPR+NYr3B
frNIbwBHgzveMIaS7HMadCi2TxsJPw9eyCyUEZiVM5URk64jaWZN/Kutc4NMbOob
TY+18yDF6RAJO+Hct80aaVqxUA34ux9yJt9mRDdU9tfBIZmOE0yMdvgyZOu3Is6p
H4GJ4nlqXFsP3gyxUEEaADPTEgcmoJR4QRHYp1KclomjyTSvlNeTZubqTg4nBjj1
jGDlo+ssini2UH4WlHyR4NX4PFwyAbH7lMMGbYZJXuK1ZkaqSJqhfbIfPCDiTeIq
9fuwINMe2yzZqxr4Nu/MO/amSNy8oOww31IbF4sI8oIZQleVvwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEV6eU6sSZEHEqy21UeKY5KaZmPiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOTJlZDA2MmQtNWZkNC0z
YWRkLWE2M2UtZGM3ZTYxNDhmZjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEkAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAm8H2yFZzFx9JQgQM3p3x0aezQFOyCOhNV83mNCgTR2jUxa8TEwMFzQuo
F9wNnhKbyciTeL9ND/aGbyjM/473i36m9DF8MsjdXqxUkVWShv166naM3EAbs7WX
kfK/nDTLqUbnAUecg0YA7j/IEHs8iz1EBt6KbJbdwqrmMoUrXjdrtgyf7WKFIXfw
EXmD+AmDVzjgVlOguxszeISz3rHbYC6SeP4CA+pXANlLSRR0ggI/89Mt/mjjwov1
lIH5oxjwe94xVG20ht3uAaaP3KFMRbxPSkoMNKgp1Gfzk2EWWImGURjCmgclV/UL
JE+WpDr664j3a1q1zX452pKoDwJzaA==
-----END CERTIFICATE-----