Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9ee2acae-2c3f-3e6f-a689-990aac92ddf0.roa
File:                     9ee2acae-2c3f-3e6f-a689-990aac92ddf0.roa (raw, json)
Hash identifier:          CXRJbKgdRGVOOTR3CC0WYqZ7PKr3GkLWAVsud5dOeN4=
Subject key identifier:   68:7B:6E:E1:BE:E1:E9:B0:22:A9:AE:B3:68:49:4F:07:AF:29:A3:1A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D3265C5D95BB4F5E527217CC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9ee2acae-2c3f-3e6f-a689-990aac92ddf0.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.100.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:32:65:c5:d9:5b:b4:f5:e5:27:21:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=a0409730-8000-4e51-a2e0-1cbf60ee11ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a6:91:1e:f3:90:27:d1:f0:d0:9a:c1:71:db:
                    2d:fb:1e:a0:18:73:65:84:32:38:c4:c1:1a:19:b1:
                    ae:de:9f:f6:95:41:d8:99:e9:6b:20:35:ca:ed:d5:
                    45:d4:68:7e:a7:3d:07:38:fb:ff:f9:2e:15:dc:6d:
                    fc:f3:05:32:fb:50:d5:0f:ef:86:75:59:49:48:2b:
                    22:4d:97:cd:13:d5:33:65:81:b0:11:16:7e:f5:c9:
                    d9:55:f2:8c:8e:aa:9e:c9:c2:e5:63:fe:4f:ae:d4:
                    e4:2e:53:cc:2b:fe:ea:ad:17:4a:6c:b7:e0:28:b0:
                    69:59:e3:30:00:65:08:06:de:92:12:56:b3:10:42:
                    b4:f1:f7:37:2b:19:c4:f2:9f:89:74:23:b9:1c:96:
                    d9:d3:7e:ef:91:b2:bc:6e:ae:0b:e0:46:c0:d1:fd:
                    2f:50:c4:a9:5f:52:de:ad:60:f2:e4:f3:ac:b4:c8:
                    46:1b:05:c1:1b:18:ed:eb:62:15:16:eb:47:58:13:
                    af:9d:4d:c2:6e:f5:eb:1e:c4:8e:bd:9e:31:b1:9b:
                    31:2f:0c:0e:cf:8d:2d:6c:68:e8:79:b8:a0:5b:ce:
                    b1:0f:ef:f6:d0:62:97:96:3c:22:0f:05:f1:d1:86:
                    99:fa:8b:3d:84:c4:a8:1f:20:41:81:36:2c:d8:0d:
                    0a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7B:6E:E1:BE:E1:E9:B0:22:A9:AE:B3:68:49:4F:07:AF:29:A3:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9ee2acae-2c3f-3e6f-a689-990aac92ddf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.100.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:87:a8:68:92:e5:bc:d7:9c:cf:0c:4a:65:d9:26:58:8c:98:
         85:05:8e:21:0f:6e:f2:7d:af:8b:49:77:21:71:27:45:45:cd:
         5c:eb:c4:00:b9:2a:c8:f6:20:80:ab:2d:a9:57:0a:70:b4:e1:
         20:2d:29:bb:7a:2b:7b:26:71:d3:bc:f2:d8:99:f5:d2:bd:3d:
         c2:07:e8:d3:11:9e:da:48:7f:ee:b4:51:35:5c:55:d2:55:95:
         f5:93:f2:c1:8b:9f:cc:16:bd:c9:94:df:a7:f3:fa:7d:f5:03:
         ea:1a:c4:e2:45:92:67:26:1a:22:61:c2:97:64:d2:5c:8b:a1:
         f8:a2:75:fc:68:ee:87:80:00:64:ef:a9:7f:74:f4:bd:1f:bf:
         1a:62:8b:3b:9c:41:04:f3:ee:01:8e:2c:21:14:1d:b4:25:d0:
         ed:4d:ea:08:62:12:e5:21:86:9d:a1:89:c7:62:4e:01:4e:bc:
         ca:14:ca:b2:ad:c3:63:62:17:f0:d2:20:9f:21:6b:28:b0:37:
         59:40:3f:db:1e:50:1c:8e:0f:66:2c:55:19:78:6b:a0:d6:59:
         e0:6f:ba:ff:97:35:c2:98:78:3b:60:fb:67:b1:4c:7b:69:ee:
         d1:16:48:e0:dc:62:09:bc:6f:2c:c9:82:ea:ee:aa:92:6c:5c:
         28:e0:c5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----