Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bdad5b60-82f2-36fc-8784-59f8b07a6b9d.roa
File:                     bdad5b60-82f2-36fc-8784-59f8b07a6b9d.roa (raw, json)
Hash identifier:          HXkwlget2a/QydnATOAnFx7atTJ1RtSZryGVozOl/iM=
Subject key identifier:   40:A8:D6:9E:4D:6A:E5:11:C7:1A:B1:9B:9F:98:6B:72:57:56:F2:21
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F56815BD4CCA413AE82B4CBA0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bdad5b60-82f2-36fc-8784-59f8b07a6b9d.roa
Signing time:             Thu 22 Sep 2022 12:00:00 +0000
ROA not before:           Thu 22 Sep 2022 12:00:00 +0000
ROA not after:            Fri 28 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.36.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:56:81:5b:d4:cc:a4:13:ae:82:b4:cb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 22 12:00:00 2022 GMT
            Not After : Oct 28 04:00:00 2022 GMT
        Subject: CN=1f592fa4-6b03-4f97-8e86-eb2d4b4d262e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:60:c4:d8:c7:c9:05:4c:0f:07:20:3b:6c:51:
                    f0:cc:52:14:a6:bb:02:72:1e:19:78:70:54:82:40:
                    57:5e:e5:52:a5:4f:1b:ee:9f:39:57:2c:ae:0c:00:
                    04:c3:72:b7:57:58:d9:9f:5a:c7:98:5f:ca:55:89:
                    27:d2:b9:c6:43:b4:77:bd:13:ca:07:b2:98:24:2a:
                    a8:f4:12:6b:f5:f0:f9:50:d1:aa:bf:b7:98:85:4a:
                    81:a5:c6:97:9e:7e:75:91:53:f9:89:21:af:4b:ef:
                    53:34:1e:03:08:13:07:15:40:9f:ea:17:43:d3:88:
                    e1:e9:bd:b3:d6:64:09:8e:82:0b:8c:27:a9:92:48:
                    4e:39:9b:24:5f:a8:6f:a7:e3:73:76:33:46:b2:c4:
                    7b:18:a7:cd:1f:71:71:9c:56:47:62:e9:27:15:35:
                    ef:f5:89:58:7a:a3:3c:24:46:0a:28:21:93:86:09:
                    37:54:c4:3d:53:e8:ac:2a:b4:48:07:7b:cd:da:49:
                    df:2c:27:bc:dc:ce:f2:8d:cb:60:da:f5:52:0e:7c:
                    20:b8:9c:83:d6:5b:98:74:7e:7f:f6:a8:4b:3e:45:
                    70:aa:c5:7d:d9:d1:98:64:f6:e9:6c:d2:c6:69:f9:
                    76:8c:7a:f9:65:4c:b1:87:6c:26:62:b9:78:a0:02:
                    03:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A8:D6:9E:4D:6A:E5:11:C7:1A:B1:9B:9F:98:6B:72:57:56:F2:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bdad5b60-82f2-36fc-8784-59f8b07a6b9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.36.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:b1:9c:a7:25:34:63:69:4c:6f:43:31:71:ae:7a:3d:9c:e8:
         73:05:09:78:7c:70:0a:cf:84:21:b0:9f:b2:0d:8d:36:6f:a4:
         00:26:49:19:3b:fe:cd:52:0a:1b:93:51:07:dd:51:b5:7d:c2:
         2b:4f:64:4b:5c:f8:85:c4:55:e9:84:e7:29:5d:8c:78:00:9a:
         04:e9:56:47:d1:16:08:0d:50:5a:e0:39:30:69:81:90:4d:10:
         5f:f4:7b:5b:72:7d:30:6a:c3:8f:96:7d:72:0e:0c:63:af:99:
         6a:f3:6a:a6:b3:85:e4:3e:dd:26:0f:8a:12:3d:db:94:81:a2:
         39:69:6d:8a:2a:b2:39:9f:b9:0d:93:02:ed:76:2f:cb:ee:3a:
         57:b7:b6:21:b3:06:16:53:08:93:ec:d9:a0:28:2d:5b:5c:8b:
         37:7f:8d:db:0b:ae:9a:a2:86:35:f6:b6:19:88:7f:a1:41:95:
         dc:46:80:ac:1c:66:4b:58:da:5e:c1:e8:ef:74:fd:1b:c8:bd:
         c4:15:8b:31:46:3d:31:94:cf:49:aa:53:5a:e8:d9:2f:6e:c5:
         fa:12:de:ee:e3:30:14:4d:b7:5f:65:f9:89:75:5d:14:47:2a:
         26:be:eb:72:09:62:89:09:b0:ef:b1:8d:66:69:48:16:a3:ef:
         4e:ee:aa:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----