Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a9cdd1b6-a9be-3247-898b-c11d55ac4f4c.roa
File:                     a9cdd1b6-a9be-3247-898b-c11d55ac4f4c.roa (raw, json)
Hash identifier:          X40LhxAa4djETMsIyS8uFUWZntZwBtv1IeNbV+iFwrU=
Subject key identifier:   74:B9:AE:CB:1D:61:A1:68:54:D4:6D:FD:BD:0A:3B:03:92:31:8E:90
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E976ABAE214C2271898B44B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a9cdd1b6-a9be-3247-898b-c11d55ac4f4c.roa
Signing time:             Sat 16 Jul 2022 12:00:00 +0000
ROA not before:           Sat 16 Jul 2022 12:00:00 +0000
ROA not after:            Sun 21 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.92.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:97:6a:ba:e2:14:c2:27:18:98:b4:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 16 12:00:00 2022 GMT
            Not After : Aug 21 04:00:00 2022 GMT
        Subject: CN=84742b6a-c26a-4f3d-8c4d-e9b0503e370b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:06:54:bd:f5:a8:0f:77:3b:96:0a:a4:af:3f:
                    ff:ea:f0:4f:e9:84:b0:36:77:14:63:f8:1c:75:7a:
                    63:54:0e:b8:e0:3d:f0:1c:a5:4e:09:6f:1d:46:46:
                    0c:b5:1a:cc:7c:20:37:38:e1:e6:35:8e:42:5c:1d:
                    38:33:47:31:17:d6:52:bb:15:39:e0:7c:42:5e:ca:
                    5b:7d:35:bb:80:61:fd:0b:3d:4a:23:c1:d1:00:a1:
                    d2:21:8f:b1:36:63:44:1c:cb:3d:b3:ea:be:30:57:
                    e1:74:e1:3d:06:6c:f3:bd:9d:4f:a8:da:27:df:2f:
                    5b:99:a1:33:a0:07:dc:30:db:7b:7d:75:9b:a7:1a:
                    5f:d1:14:8f:6b:c8:87:f1:5f:f5:cb:bc:d9:38:6c:
                    49:63:6e:7f:a2:8b:b8:df:46:c8:69:77:4f:3e:1a:
                    ec:1e:cb:d6:38:3a:f5:13:b7:1c:f1:72:37:73:37:
                    ac:26:2b:32:72:3a:5c:6b:1c:59:e8:08:d0:f8:10:
                    6e:b5:ed:3a:80:06:89:ea:18:8a:8d:1d:66:57:86:
                    dc:ad:a6:14:4b:b2:76:0a:d0:fa:68:26:38:08:5c:
                    cf:98:d4:f9:83:c5:51:84:78:99:86:e7:a7:4e:8e:
                    8d:44:94:79:16:7b:00:5e:4c:c1:49:8b:9c:e3:28:
                    b9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B9:AE:CB:1D:61:A1:68:54:D4:6D:FD:BD:0A:3B:03:92:31:8E:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a9cdd1b6-a9be-3247-898b-c11d55ac4f4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.92.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:28:5f:10:23:53:ff:cf:f6:7e:01:8b:3a:b4:14:a0:37:7f:
         22:bd:b4:ec:ab:71:03:28:4d:0e:1b:fa:03:ef:59:9b:e6:c5:
         83:b4:cd:ff:7b:54:b1:5a:44:d0:56:9f:96:03:9f:98:39:f8:
         f9:74:0d:66:5d:92:1c:40:1d:1a:80:9f:1e:d6:26:02:e0:aa:
         8a:4a:a8:ad:ae:cd:19:ed:18:15:5b:01:f3:43:23:58:61:2d:
         8b:56:40:86:45:32:f0:50:62:ee:f8:7d:27:bc:c2:a3:43:1d:
         16:68:97:12:13:e7:07:43:0f:a3:5c:0d:ec:9f:e6:e3:05:05:
         de:f6:86:07:cc:af:fc:0e:19:c4:bf:3b:ab:cc:e0:8b:76:87:
         75:6f:44:38:91:bc:45:d9:2a:ab:2a:15:75:ed:63:38:f7:61:
         d5:15:9e:1b:7b:a2:4f:5e:d4:ea:09:19:4c:31:ee:a6:66:cc:
         99:74:76:d0:08:09:16:dd:aa:f3:2c:47:17:6f:a0:fa:49:75:
         6e:b3:7c:f4:3b:f6:c0:7d:bd:80:8c:f8:13:50:49:7d:e3:d2:
         ec:8b:8f:fe:fc:4b:b0:1d:8a:a0:89:d9:aa:15:6c:3a:86:cb:
         51:4b:97:27:3e:04:7c:6c:6b:b7:1a:a3:58:04:96:d1:18:73:
         00:c1:67:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----