Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9ef42f42-f9ed-3872-a89e-b46c1a4f5e12.roa
File:                     9ef42f42-f9ed-3872-a89e-b46c1a4f5e12.roa (raw, json)
Hash identifier:          XJfGxAA8K7eYxzStiy6yOk+A7WgVJjcLA9Oi1aeiE38=
Subject key identifier:   72:A9:00:AE:EB:C7:A4:F2:92:F2:D8:FB:58:6A:78:11:5C:99:B4:81
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FF4EFCBBDAA1460BE4516F5C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9ef42f42-f9ed-3872-a89e-b46c1a4f5e12.roa
Signing time:             Fri 18 Nov 2022 12:00:00 +0000
ROA not before:           Fri 18 Nov 2022 12:00:00 +0000
ROA not after:            Sat 24 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        18.172.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f4:ef:cb:bd:aa:14:60:be:45:16:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 18 12:00:00 2022 GMT
            Not After : Dec 24 05:00:00 2022 GMT
        Subject: CN=94f9f8fc-c797-4e8f-b5eb-3db22e65d121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d2:09:9c:0d:6b:57:6b:9a:84:5d:1a:0f:96:
                    80:94:08:7b:5f:f3:50:05:a2:6f:45:07:25:fc:dc:
                    34:bd:2c:f8:9a:7f:7b:dc:9c:d6:f5:a8:27:4a:a7:
                    bf:c5:81:bf:75:8e:63:e0:d2:ca:e7:17:c3:25:03:
                    36:92:32:78:65:35:4d:66:71:2a:c3:ec:cc:ae:95:
                    11:5a:5b:7c:45:4c:0c:23:f8:47:f8:e1:90:17:14:
                    a6:32:ef:3c:e9:1b:6f:48:f6:d0:08:bc:40:b2:d5:
                    5a:fc:f6:7a:20:73:7a:86:84:52:13:3a:af:69:ac:
                    0d:eb:66:fd:56:ac:2b:de:4b:c4:b6:3a:25:f5:5c:
                    6d:92:75:93:8b:0b:f6:9c:36:3d:b8:9a:33:de:c6:
                    a5:94:eb:49:c5:5c:d0:a0:93:69:43:c1:dd:35:c3:
                    72:7c:c8:7a:6e:0e:4c:1e:1c:f8:7d:73:67:73:19:
                    49:8d:ee:70:bb:44:66:8e:05:7a:57:46:ca:c5:ea:
                    4f:67:76:aa:a5:f9:7a:ce:76:14:31:db:e6:41:ec:
                    58:a6:0a:2c:70:8d:1c:47:89:f3:a6:c7:90:e6:b0:
                    a2:57:0c:9c:f5:67:0f:e0:5d:46:b4:59:40:ba:47:
                    1c:d3:b2:3f:c0:18:b3:40:20:db:bc:70:b9:71:48:
                    4e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A9:00:AE:EB:C7:A4:F2:92:F2:D8:FB:58:6A:78:11:5C:99:B4:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9ef42f42-f9ed-3872-a89e-b46c1a4f5e12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.172.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:78:b9:93:be:a8:24:d7:7a:6d:35:78:50:f5:f1:e3:4f:ef:
         9d:e4:75:cc:7c:92:a3:8b:03:0f:83:eb:47:64:e3:83:6d:c5:
         4d:fb:0c:a1:a8:1a:d7:02:c0:1b:97:f9:be:02:38:23:6d:19:
         3c:86:6a:94:4f:f8:8f:0c:ef:aa:97:74:29:34:41:5e:24:80:
         68:9f:b0:d3:4c:9c:79:0a:28:f7:6a:14:fd:50:07:09:55:ba:
         ab:f3:90:90:99:bf:d0:ac:95:5d:01:a9:52:a2:57:a5:d8:52:
         67:c4:f4:dd:f0:da:86:2d:a6:e8:58:de:eb:11:c7:8b:53:98:
         eb:10:fa:74:47:f9:8d:06:f1:3b:0e:90:63:c2:e1:f5:a5:14:
         84:da:f6:35:37:7f:54:b3:93:6d:5b:d6:21:36:46:3d:70:41:
         73:11:04:47:50:7e:0b:d6:d4:b1:a0:68:16:da:68:f3:f5:ed:
         dc:31:1e:ce:52:21:1d:10:a1:22:b8:41:2c:de:64:71:8c:6a:
         02:35:d2:d3:9a:8a:52:61:78:49:f1:c6:5b:53:ee:7a:d9:46:
         33:f8:40:6f:56:a8:ba:8d:07:97:ce:71:bb:67:8d:eb:db:36:
         d0:a4:2a:05:26:b0:5f:64:13:61:e5:15:94:c9:86:9d:c8:b6:
         67:98:07:97
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/078u9qhRgvkUW9cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTExODEyMDAwMFoXDTIyMTIyNDA1MDAwMFowLzEtMCsGA1UEAxMk
OTRmOWY4ZmMtYzc5Ny00ZThmLWI1ZWItM2RiMjJlNjVkMTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtIJnA1rV2uahF0aD5aAlAh7X/NQBaJvRQcl
/Nw0vSz4mn973JzW9agnSqe/xYG/dY5j4NLK5xfDJQM2kjJ4ZTVNZnEqw+zMrpUR
Wlt8RUwMI/hH+OGQFxSmMu886RtvSPbQCLxAstVa/PZ6IHN6hoRSEzqvaawN62b9
Vqwr3kvEtjol9VxtknWTiwv2nDY9uJoz3sallOtJxVzQoJNpQ8HdNcNyfMh6bg5M
Hhz4fXNncxlJje5wu0RmjgV6V0bKxepPZ3aqpfl6znYUMdvmQexYpgoscI0cR4nz
pseQ5rCiVwyc9WcP4F1GtFlAukcc07I/wBizQCDbvHC5cUhOPwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHKpAK7rx6TykvLY+1hqeBFcmbSBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOWVmNDJmNDItZjllZC0z
ODcyLWE4OWUtYjQ2YzFhNGY1ZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEqwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAtXi5k76oJNd6bTV4UPXx40/vneR1zHySo4sDD4PrR2Tjg23FTfsMoaga
1wLAG5f5vgI4I20ZPIZqlE/4jwzvqpd0KTRBXiSAaJ+w00yceQoo92oU/VAHCVW6
q/OQkJm/0KyVXQGpUqJXpdhSZ8T03fDahi2m6Fje6xHHi1OY6xD6dEf5jQbxOw6Q
Y8Lh9aUUhNr2NTd/VLOTbVvWITZGPXBBcxEER1B+C9bUsaBoFtpo8/Xt3DEezlIh
HRChIrhBLN5kcYxqAjXS05qKUmF4SfHGW1PuetlGM/hAb1aouo0Hl85xu2eN69s2
0KQqBSawX2QTYeUVlMmGnci2Z5gHlw==
-----END CERTIFICATE-----