Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9d73757e-8900-3425-b5e1-1574d397329d.roa
File:                     9d73757e-8900-3425-b5e1-1574d397329d.roa (raw, json)
Hash identifier:          Lbb1p5qrYZTmgXXNElSIzldz0VYmRBMaJKYn7tmwBTQ=
Subject key identifier:   CF:81:66:34:D5:32:40:49:0C:2B:46:5F:EA:32:ED:0F:17:A9:06:59
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D3240CE8CA2B798A3CAED3580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9d73757e-8900-3425-b5e1-1574d397329d.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.41.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:32:40:ce:8c:a2:b7:98:a3:ca:ed:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=154c0069-f661-465f-a62a-7dc40df603d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:7e:a7:24:aa:af:6f:97:bf:80:5b:c9:bf:
                    3a:fb:e5:6f:a1:11:f3:71:95:52:a4:a4:0a:df:39:
                    2b:e9:1f:57:7c:50:59:a9:33:d3:82:ce:21:d4:f1:
                    24:76:a3:07:b5:4d:3e:07:96:73:d7:5d:72:e7:68:
                    a0:92:e6:0c:ad:d8:6c:f5:9d:2c:5e:b2:36:f6:14:
                    91:c1:58:ca:89:1c:48:a5:e3:71:6f:af:b7:92:af:
                    c7:74:fe:eb:3f:0d:5a:d8:95:9b:47:98:65:d7:97:
                    70:22:5e:6d:4b:62:0e:8c:f9:f9:27:6b:40:e1:09:
                    ef:6e:1b:f2:58:ac:e3:94:15:c9:90:c2:6b:79:3c:
                    2c:ad:70:89:04:ee:6b:52:1e:77:73:f3:92:a4:d0:
                    2c:5b:b1:6d:9d:5b:ae:54:44:9b:ca:0a:5b:04:3c:
                    0c:4b:26:ac:36:e5:d8:96:46:9d:ee:b6:b3:56:9e:
                    6b:66:ff:88:bb:d7:8a:2d:26:c9:f4:fc:69:a9:4d:
                    07:80:dd:f8:b5:47:92:90:2c:f3:6e:8d:e4:0a:da:
                    6f:47:64:e9:8d:46:14:c4:16:65:a5:9f:a2:8a:13:
                    84:47:62:da:91:01:e7:30:98:7d:fe:ab:3c:61:1c:
                    ea:1d:42:f3:f7:c1:f5:8d:69:1e:a1:cf:a8:f9:86:
                    2b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:81:66:34:D5:32:40:49:0C:2B:46:5F:EA:32:ED:0F:17:A9:06:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9d73757e-8900-3425-b5e1-1574d397329d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.41.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:2d:c2:82:60:90:50:28:03:04:fb:4b:e0:79:97:81:9c:83:
         84:f2:c4:b7:80:41:eb:28:20:fe:72:10:8f:96:ed:a3:fd:4f:
         7a:43:8a:1a:19:b4:44:f9:76:21:16:21:37:ee:36:70:c7:b1:
         90:55:ec:ec:39:08:9b:7e:c5:92:10:8f:79:c0:b6:99:8a:77:
         97:c4:94:83:fb:0b:cd:27:49:13:fe:55:71:0e:30:4b:7b:f7:
         57:63:d0:50:9e:2a:c5:6b:82:4e:7e:b1:33:2a:7f:47:12:7d:
         03:01:fc:fd:d5:7b:6e:9b:6c:35:4e:16:90:2d:d7:d1:4f:cf:
         90:54:0a:98:2a:16:91:d4:4f:35:3d:4d:bf:28:2e:cb:46:af:
         82:b3:d9:1e:46:61:33:9b:0d:13:57:5d:59:32:11:5a:89:0d:
         3c:9d:98:ef:bb:57:01:f8:cd:c2:af:38:d2:b5:14:51:f9:67:
         f8:d4:31:f1:a6:c1:99:38:02:c9:8c:6e:8e:e5:ba:96:77:72:
         73:3a:57:7a:2d:f9:44:20:5b:c9:ab:0c:de:f0:90:66:1b:d1:
         27:0b:87:68:72:b3:1f:23:c6:ee:c8:2b:0c:94:55:9e:51:ca:
         ce:a7:0a:6f:19:e7:8c:89:a3:0a:5f:65:b3:fe:13:b8:45:4c:
         b9:ca:58:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----