Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bc2c5252-0b2d-3b92-b936-459c66677703.roa
File:                     bc2c5252-0b2d-3b92-b936-459c66677703.roa (raw, json)
Hash identifier:          apQu1cD6w/D5QJxQ4kfuMiERndOO3jEjnsEuGRmqnhw=
Subject key identifier:   54:6B:3C:EB:C7:3C:76:58:24:2A:C6:12:DE:1B:30:C5:69:6A:74:4A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E975BE1637D0F74BECCBAE450
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bc2c5252-0b2d-3b92-b936-459c66677703.roa
Signing time:             Sat 16 Jul 2022 12:00:00 +0000
ROA not before:           Sat 16 Jul 2022 12:00:00 +0000
ROA not after:            Sun 21 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.96.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:97:5b:e1:63:7d:0f:74:be:cc:ba:e4:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 16 12:00:00 2022 GMT
            Not After : Aug 21 04:00:00 2022 GMT
        Subject: CN=3445150a-f4be-4573-8b5a-83b26d7e8a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c9:c0:54:c3:e2:f6:2a:87:16:e6:d0:82:58:
                    2f:16:c1:9b:b8:cd:39:8a:38:02:da:da:e1:c3:d2:
                    63:69:21:a1:de:ed:b5:50:2b:3e:ae:bd:3e:ac:7c:
                    38:69:3f:e3:f8:e3:d7:9e:70:1b:09:e6:6d:3f:5b:
                    dd:5d:8f:0c:03:6f:ee:4e:e8:e4:3f:59:f7:7d:18:
                    71:34:69:f8:22:02:b2:aa:ff:d5:db:75:a6:c0:ff:
                    e1:df:cf:06:93:13:86:c0:8d:3b:21:98:e4:71:c7:
                    e5:d9:81:12:83:87:91:78:7a:3c:7c:8b:d6:07:dd:
                    ce:db:ce:96:7a:5e:fc:95:0d:35:2f:8f:ea:b6:0d:
                    cf:16:ce:a0:64:50:f1:f6:6b:13:76:b6:fc:80:b5:
                    d0:23:b3:b5:38:6b:5d:9d:5b:00:ec:90:db:da:de:
                    e1:58:5f:44:6d:12:ac:09:31:bb:b3:e4:1c:80:85:
                    e8:34:a6:7c:b0:59:80:0b:16:30:45:2e:6b:67:51:
                    3e:d8:67:ba:be:8b:2e:c1:82:61:9c:72:c6:b1:1f:
                    10:40:b4:25:f1:62:1b:bc:04:bb:ba:59:a9:94:3a:
                    ae:42:ad:e2:15:72:46:4f:e6:08:80:0d:01:1e:e7:
                    a1:ed:a9:bd:be:b7:39:ee:83:15:14:db:86:33:85:
                    6a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6B:3C:EB:C7:3C:76:58:24:2A:C6:12:DE:1B:30:C5:69:6A:74:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bc2c5252-0b2d-3b92-b936-459c66677703.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.96.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:63:83:f2:61:70:6e:2a:b2:a0:93:c1:ad:58:07:ef:47:d6:
         06:77:ad:cf:00:8d:1f:75:6d:ef:d8:f2:8f:de:e6:92:3b:21:
         ac:b7:e9:d8:cf:e2:0f:ff:31:95:13:76:80:d8:29:a2:95:48:
         49:f1:e0:b3:2b:4a:7c:a5:73:45:45:2e:ff:15:6d:6e:06:53:
         7b:cd:79:c2:f7:c0:69:86:e6:0e:3f:c8:fe:47:f7:64:45:3f:
         74:4c:79:eb:4d:4e:d5:dd:0b:7c:79:a9:7c:5b:6b:f3:75:fc:
         16:00:92:8f:62:b8:0b:22:65:4a:6f:73:a3:9a:6d:2c:03:c9:
         48:dc:f2:74:6b:d3:2d:06:13:2c:12:97:ec:6a:49:e3:e1:4d:
         19:2c:03:f1:36:a2:ae:14:f5:7c:ea:6e:5f:b0:9b:6d:79:66:
         90:19:d9:00:7e:aa:ec:30:61:3d:ae:3e:93:da:f9:fc:87:8e:
         b9:f1:e7:6e:18:dc:76:2d:41:52:6a:c7:2b:9b:04:b6:5e:d5:
         69:52:68:1a:da:f7:b8:c6:3f:5d:07:00:ee:fb:32:eb:8c:13:
         88:0e:4a:77:7a:9e:09:38:c3:61:67:a7:27:b1:c6:69:45:96:
         54:b0:cf:94:77:b9:03:1a:76:1e:6d:d9:e4:bd:15:50:5d:85:
         9d:e3:d7:c6
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6XW+FjfQ90vsy65FAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcxNjEyMDAwMFoXDTIyMDgyMTA0MDAwMFowLzEtMCsGA1UEAxMk
MzQ0NTE1MGEtZjRiZS00NTczLThiNWEtODNiMjZkN2U4YTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcnAVMPi9iqHFubQglgvFsGbuM05ijgC2trh
w9JjaSGh3u21UCs+rr0+rHw4aT/j+OPXnnAbCeZtP1vdXY8MA2/uTujkP1n3fRhx
NGn4IgKyqv/V23WmwP/h388GkxOGwI07IZjkccfl2YESg4eReHo8fIvWB93O286W
el78lQ01L4/qtg3PFs6gZFDx9msTdrb8gLXQI7O1OGtdnVsA7JDb2t7hWF9EbRKs
CTG7s+QcgIXoNKZ8sFmACxYwRS5rZ1E+2Ge6vosuwYJhnHLGsR8QQLQl8WIbvAS7
ulmplDquQq3iFXJGT+YIgA0BHueh7am9vrc57oMVFNuGM4VqqwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFRrPOvHPHZYJCrGEt4bMMVpanRKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYmMyYzUyNTItMGIyZC0z
YjkyLWI5MzYtNDU5YzY2Njc3NzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEmAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAFGOD8mFwbiqyoJPBrVgH70fWBnetzwCNH3Vt79jyj97mkjshrLfp2M/i
D/8xlRN2gNgpopVISfHgsytKfKVzRUUu/xVtbgZTe815wvfAaYbmDj/I/kf3ZEU/
dEx5601O1d0LfHmpfFtr83X8FgCSj2K4CyJlSm9zo5ptLAPJSNzydGvTLQYTLBKX
7GpJ4+FNGSwD8TairhT1fOpuX7CbbXlmkBnZAH6q7DBhPa4+k9r5/IeOufHnbhjc
di1BUmrHK5sEtl7VaVJoGtr3uMY/XQcA7vsy64wTiA5Kd3qeCTjDYWenJ7HGaUWW
VLDPlHe5Axp2Hm3Z5L0VUF2FnePXxg==
-----END CERTIFICATE-----