Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a1fd2c09-0103-30d3-9237-962054d81deb.roa
File:                     a1fd2c09-0103-30d3-9237-962054d81deb.roa (raw, json)
Hash identifier:          jHFn0oQmJAE7YEhvkCm7edzWRiq8UgpKDjs16xG1jco=
Subject key identifier:   05:62:14:E8:4A:BF:49:25:1E:0E:4F:9A:DA:38:4D:89:0E:2F:9A:B9
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840948056B5A16227F3A8F86D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a1fd2c09-0103-30d3-9237-962054d81deb.roa
Signing time:             Sat 14 Jan 2023 12:00:00 +0000
ROA not before:           Sat 14 Jan 2023 12:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        18.95.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:94:80:56:b5:a1:62:27:f3:a8:f8:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 14 12:00:00 2023 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=24d1abd2-782a-4e5c-9e0b-fb579ecd5bec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:eb:cd:3c:6c:68:7e:18:b3:b2:15:1d:d4:b0:
                    01:7c:35:83:d7:e6:25:2b:e6:97:28:c6:d7:34:8a:
                    77:be:af:e0:b8:6b:1f:96:a4:37:5c:e1:aa:c7:09:
                    88:6c:64:49:91:7b:49:75:ef:5d:d6:a5:0f:f4:f3:
                    68:de:d4:86:bf:b3:ba:65:a6:77:69:73:96:1b:b1:
                    95:61:7e:e6:e7:e2:19:66:90:c6:8e:fd:7f:68:cd:
                    db:d5:c2:48:1c:54:de:63:c4:35:8e:42:95:6f:e9:
                    6b:4e:bb:fd:1a:3e:e1:9c:b1:c3:bd:4a:85:b3:63:
                    0e:71:45:34:20:9b:bf:06:9f:ae:4d:e3:4e:fe:8c:
                    a0:f8:49:d9:66:6f:39:f5:8d:34:7a:b4:7e:c4:81:
                    5d:be:01:78:7e:26:30:31:9b:28:27:3c:bd:9b:2e:
                    58:64:45:c4:3d:51:36:0f:4e:7a:ac:d4:22:55:47:
                    8e:a6:95:69:82:ea:95:9b:f5:6a:6a:71:af:fa:09:
                    46:f0:0c:6a:4d:5b:90:75:24:98:a1:33:12:a1:c3:
                    44:3d:26:92:aa:6a:81:1f:f0:ec:87:e3:06:c8:85:
                    0c:b6:34:13:79:ce:bf:19:c6:27:3a:1d:54:bc:1f:
                    69:33:d9:69:b6:6c:93:3d:76:9b:a7:29:0f:66:a9:
                    d4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:62:14:E8:4A:BF:49:25:1E:0E:4F:9A:DA:38:4D:89:0E:2F:9A:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a1fd2c09-0103-30d3-9237-962054d81deb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.95.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:5f:47:ae:36:02:06:07:0a:63:24:21:74:08:fb:0f:ca:45:
         d0:5f:52:26:e1:81:00:3b:61:1a:3d:7a:3f:02:07:ae:43:61:
         5b:d3:14:27:b7:bc:49:f7:78:e9:f5:9a:58:0f:63:9a:58:3f:
         8a:39:db:d0:24:be:8f:f1:d7:d3:5c:b6:07:c3:c1:74:6d:d2:
         c4:2f:2f:37:77:3c:73:71:d8:48:90:19:22:6d:ec:2d:32:1e:
         a1:9c:84:c9:46:31:e8:ab:b3:9c:1d:19:a8:2e:01:7d:a2:5d:
         f3:33:35:e6:72:48:81:34:ab:d9:38:4e:1b:b1:0d:bc:64:2f:
         07:6e:96:3e:92:3d:0a:0e:34:cf:b0:3b:e3:de:b0:55:2b:6a:
         86:c9:a0:7d:8a:a7:86:cd:b7:d3:af:90:a3:9e:cb:90:2b:75:
         9f:2b:c6:14:b4:9a:a8:1a:05:27:b8:9e:bc:4b:fc:ef:2e:93:
         7f:72:0b:fd:dc:a5:29:7b:eb:70:57:a2:42:b0:95:20:77:16:
         25:04:d4:95:01:d4:5e:88:91:51:b6:0c:41:e1:a8:69:93:bc:
         ed:d1:da:d8:ac:bf:e6:8a:55:f4:98:87:8e:e8:0c:cd:6c:6c:
         23:3e:0f:02:0b:6f:c5:a9:fc:f6:a1:53:ab:48:4c:17:4e:c6:
         fb:b8:61:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----