Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/970cbbb8-8f8d-367f-8861-754c9b51e305.roa
File:                     970cbbb8-8f8d-367f-8861-754c9b51e305.roa (raw, json)
Hash identifier:          finGvoZH5hq0QGnzkj1r21imHsooZiwa74n8C4VNOUg=
Subject key identifier:   BA:A0:E9:3D:8C:B9:91:8A:70:6F:8E:4C:D7:9B:00:23:19:F2:76:55
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FF82296631BC6D9B7FA196480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/970cbbb8-8f8d-367f-8861-754c9b51e305.roa
Signing time:             Sat 19 Nov 2022 12:00:00 +0000
ROA not before:           Sat 19 Nov 2022 12:00:00 +0000
ROA not after:            Sun 25 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        18.48.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f8:22:96:63:1b:c6:d9:b7:fa:19:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 19 12:00:00 2022 GMT
            Not After : Dec 25 05:00:00 2022 GMT
        Subject: CN=f0c2c99c-fc75-4f44-ba1d-8126a5d4b1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3b:4e:89:c9:43:da:3f:6f:51:4b:c2:36:46:
                    fa:a6:77:d4:76:68:fc:52:16:cf:2f:d1:55:b3:6f:
                    99:ba:e9:fc:8e:d4:9e:6a:4f:a7:c8:c5:a1:36:f6:
                    32:20:cf:a7:25:f7:ac:45:fb:d7:35:a0:26:f5:fb:
                    53:07:6e:27:70:0b:b9:23:13:fb:c8:b3:ac:c2:b6:
                    9f:5f:b8:ad:ea:41:0f:26:be:a7:2f:60:0b:da:a6:
                    a8:d0:50:e4:69:d5:aa:31:62:17:01:97:b8:72:7b:
                    19:3c:8b:43:e7:75:8c:0e:26:b2:21:d5:42:8c:85:
                    2d:48:79:6a:15:62:6c:d8:ee:df:6f:06:7d:aa:59:
                    ce:aa:8b:31:2b:24:2f:7a:29:fe:d9:02:f4:38:b6:
                    fe:a3:b8:da:11:15:14:d9:17:71:22:a8:2b:1d:90:
                    42:c6:ed:16:85:fb:d3:d8:9c:1c:3d:ad:2f:cf:b3:
                    14:2c:fe:c2:be:24:6c:45:86:8d:3d:5f:83:12:7e:
                    92:9c:b4:0a:b6:24:d7:36:1e:e5:75:53:37:80:da:
                    68:53:a0:1b:d4:8c:9f:e7:87:df:81:16:58:89:24:
                    b6:28:af:9a:50:45:bd:d7:91:28:9f:a9:21:83:bb:
                    92:03:50:cd:04:84:72:b0:90:6e:9a:9c:f2:51:5f:
                    ca:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A0:E9:3D:8C:B9:91:8A:70:6F:8E:4C:D7:9B:00:23:19:F2:76:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/970cbbb8-8f8d-367f-8861-754c9b51e305.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.48.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:a0:f1:1a:41:f9:5f:03:dc:85:cd:35:6b:41:66:58:58:b2:
         d9:5d:26:fa:4e:cc:14:50:2b:db:0e:e9:03:e5:79:8a:3b:0c:
         a1:07:d5:96:0f:7c:f4:01:35:29:9d:0b:c2:26:2e:13:2c:b1:
         5f:a1:d0:07:f6:f4:a3:b6:bd:52:fc:ed:95:c3:06:62:4c:51:
         1c:2a:ae:0b:0f:ac:e1:b5:b4:17:30:20:e5:a9:6c:88:af:a1:
         d2:b4:5b:ab:ef:39:ed:83:cd:1f:af:d1:fa:e9:1e:e3:80:7a:
         d1:8a:03:7e:63:98:d4:76:fc:42:05:e3:e8:1e:92:ed:d6:76:
         1d:a1:06:3f:dc:fe:cc:0a:9f:42:3b:d4:7c:ad:9f:94:05:50:
         ee:b9:a3:14:40:5a:e2:c3:47:dd:53:0c:0d:5a:b6:22:1f:06:
         c2:6c:6c:64:11:cf:9a:fa:57:1b:d7:47:d8:9e:3b:4e:c2:73:
         68:73:7d:7c:a3:89:aa:cf:1f:84:6d:1b:ea:d7:df:4d:c4:b3:
         e0:e0:a2:98:f7:a2:31:05:82:73:fb:ab:d1:11:ac:ad:f1:2f:
         aa:8f:be:bd:48:21:6f:86:30:61:f6:04:73:96:37:75:4f:30:
         15:db:07:a9:8a:be:29:82:53:bc:a8:ec:ab:11:ea:ad:78:67:
         5a:ba:d9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----