Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a78c8d8e-d862-3d76-879a-fbf4a9712ca5.roa
File:                     a78c8d8e-d862-3d76-879a-fbf4a9712ca5.roa (raw, json)
Hash identifier:          ZfiqXXqNmQsMpBKHKfsuWmbOU1AQS2Di+qKcPeYnD14=
Subject key identifier:   18:53:94:3A:64:5D:9F:AE:AC:8F:DB:1C:78:94:92:59:1A:E4:BE:0F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FF8C68E47AC40D660D2A4F8E0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a78c8d8e-d862-3d76-879a-fbf4a9712ca5.roa
Signing time:             Sat 19 Nov 2022 12:00:00 +0000
ROA not before:           Sat 19 Nov 2022 12:00:00 +0000
ROA not after:            Sun 25 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        18.231.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f8:c6:8e:47:ac:40:d6:60:d2:a4:f8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 19 12:00:00 2022 GMT
            Not After : Dec 25 05:00:00 2022 GMT
        Subject: CN=cd92a0a3-4ba9-4f55-8cf4-faa08bb7fd7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:13:d0:94:67:93:a0:5c:28:7e:72:cf:60:b6:
                    6b:cc:9a:45:38:cb:71:7d:77:4c:7d:ed:d0:e1:22:
                    07:74:d7:8f:d4:8a:5e:92:43:62:5d:0d:60:3d:5d:
                    9a:ca:70:13:67:f3:c3:59:1b:f8:2b:69:8e:bf:26:
                    a8:d8:20:73:ac:4c:9d:69:b1:5e:3c:84:10:5c:6d:
                    e8:c1:72:2e:26:1a:a6:65:ec:7c:dd:2f:5a:31:a8:
                    ff:ae:55:e7:e9:46:e5:ae:72:27:5f:14:00:39:c0:
                    e0:dd:db:5d:fb:82:4a:85:e9:ee:3f:6c:d6:43:dd:
                    bb:14:55:ba:65:49:f2:6e:da:e0:09:7d:0d:af:0d:
                    9f:65:a9:60:61:33:2a:2b:9f:f9:63:b1:f9:9c:d4:
                    92:8c:e6:d8:41:cf:6b:ac:7b:fd:71:dc:2d:84:d4:
                    02:c3:35:13:90:f5:4d:2b:3b:44:69:ec:8e:bc:03:
                    15:25:f4:ad:21:21:9c:ba:b9:4d:d8:95:97:ab:f4:
                    ba:c1:02:de:19:a5:a6:68:56:7d:d3:de:74:03:f2:
                    a7:45:06:55:85:ad:d5:0d:5a:1e:88:db:35:45:c7:
                    db:be:39:7b:d4:4e:da:9e:45:e0:b1:08:08:7d:1e:
                    30:45:bb:5d:26:71:46:a2:ef:c4:7e:fe:fe:3c:7f:
                    37:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:53:94:3A:64:5D:9F:AE:AC:8F:DB:1C:78:94:92:59:1A:E4:BE:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a78c8d8e-d862-3d76-879a-fbf4a9712ca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.231.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:c2:09:2a:8c:83:40:67:6c:81:44:e6:87:3d:bb:ab:de:5c:
         6e:e8:ce:50:fa:15:91:f6:81:bb:69:55:ba:9a:81:1a:9d:70:
         19:f2:b9:44:ce:4d:d9:88:02:c7:f4:2b:2e:82:66:cc:c7:8b:
         5c:2c:09:89:43:7b:11:95:c8:b7:27:10:76:73:dc:29:ae:3c:
         8d:a8:c3:f6:cb:33:af:5f:d7:67:8f:c2:c4:eb:3d:b3:14:f5:
         c9:45:4d:52:a6:03:7b:2e:7c:a2:10:f0:58:10:8c:5e:5f:9f:
         67:18:62:66:fd:a1:01:59:7f:ed:e3:5f:85:14:7c:69:17:a0:
         78:0c:c9:f8:1f:b2:3c:83:9f:8c:ad:07:58:76:7d:7e:21:e2:
         d3:b7:34:51:3d:f0:52:96:c6:ec:cc:cc:b4:d6:af:b8:b7:47:
         1f:6c:fd:c5:66:5d:59:14:b8:16:fc:36:9b:96:e8:93:22:56:
         ce:f6:c4:e8:b6:00:cd:45:a6:15:97:71:be:54:20:2b:58:28:
         46:3c:cb:ef:b2:ce:f0:84:29:af:69:bb:23:50:6f:6c:75:48:
         39:6d:99:1e:58:1d:a6:a3:f4:57:29:4a:fb:96:51:43:9e:40:
         c2:78:e8:5f:54:d9:73:1c:0c:06:c5:b5:f4:ea:82:90:c8:c3:
         08:d0:bf:4c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/4xo5HrEDWYNKk+OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTExOTEyMDAwMFoXDTIyMTIyNTA1MDAwMFowLzEtMCsGA1UEAxMk
Y2Q5MmEwYTMtNGJhOS00ZjU1LThjZjQtZmFhMDhiYjdmZDdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhPQlGeToFwofnLPYLZrzJpFOMtxfXdMfe3Q
4SIHdNeP1IpekkNiXQ1gPV2aynATZ/PDWRv4K2mOvyao2CBzrEydabFePIQQXG3o
wXIuJhqmZex83S9aMaj/rlXn6UblrnInXxQAOcDg3dtd+4JKhenuP2zWQ927FFW6
ZUnybtrgCX0Nrw2fZalgYTMqK5/5Y7H5nNSSjObYQc9rrHv9cdwthNQCwzUTkPVN
KztEaeyOvAMVJfStISGcurlN2JWXq/S6wQLeGaWmaFZ90950A/KnRQZVha3VDVoe
iNs1Rcfbvjl71E7ankXgsQgIfR4wRbtdJnFGou/Efv7+PH83fwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBhTlDpkXZ+urI/bHHiUklka5L4PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYTc4YzhkOGUtZDg2Mi0z
ZDc2LTg3OWEtZmJmNGE5NzEyY2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEucwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAhcIJKoyDQGdsgUTmhz27q95cbujOUPoVkfaBu2lVupqBGp1wGfK5RM5N
2YgCx/QrLoJmzMeLXCwJiUN7EZXItycQdnPcKa48jajD9sszr1/XZ4/CxOs9sxT1
yUVNUqYDey58ohDwWBCMXl+fZxhiZv2hAVl/7eNfhRR8aRegeAzJ+B+yPIOfjK0H
WHZ9fiHi07c0UT3wUpbG7MzMtNavuLdHH2z9xWZdWRS4Fvw2m5bokyJWzvbE6LYA
zUWmFZdxvlQgK1goRjzL77LO8IQpr2m7I1BvbHVIOW2ZHlgdpqP0VylK+5ZRQ55A
wnjoX1TZcxwMBsW19OqCkMjDCNC/TA==
-----END CERTIFICATE-----