Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c003b936-3cb0-3e85-81b4-28301dba50c6.roa
File:                     c003b936-3cb0-3e85-81b4-28301dba50c6.roa (raw, json)
Hash identifier:          3q7FQROWDgOmJ8tzKRcqVQawgnzdM4amvd+AHsyL+ls=
Subject key identifier:   09:E8:79:1D:E8:09:62:A4:8C:8F:18:14:BC:DA:16:5F:B1:00:B6:EC
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F5B552BE8E27C2FB47EE59100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c003b936-3cb0-3e85-81b4-28301dba50c6.roa
Signing time:             Sat 24 Sep 2022 12:00:00 +0000
ROA not before:           Sat 24 Sep 2022 12:00:00 +0000
ROA not after:            Sun 30 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.57.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5b:55:2b:e8:e2:7c:2f:b4:7e:e5:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 24 12:00:00 2022 GMT
            Not After : Oct 30 04:00:00 2022 GMT
        Subject: CN=b7e50ca4-2f6a-4c56-8c9e-f647d3553428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:65:f0:e0:85:13:d1:70:62:7d:87:8b:53:32:
                    73:1a:f2:02:f7:aa:87:00:5c:29:ee:0b:87:27:93:
                    5b:ca:93:d2:11:69:0b:1a:64:41:f5:d2:33:3e:39:
                    45:33:ed:78:95:ac:a0:2c:da:8e:05:7c:ce:44:a5:
                    ad:35:3b:83:a2:c2:aa:82:2a:08:33:4e:45:96:52:
                    f4:14:3b:3a:8d:39:09:e6:b7:40:e2:12:ad:24:e2:
                    e3:28:36:e9:b5:b1:74:cc:4d:26:48:a4:1b:06:d9:
                    94:98:34:fc:d6:65:94:46:b6:4e:13:8f:d4:a4:3d:
                    dc:fb:3f:fd:8a:c7:c8:27:23:33:9f:eb:eb:7b:58:
                    15:c1:51:44:b5:65:b1:63:18:d2:8a:4b:a5:17:83:
                    97:a4:35:ba:af:73:ec:bf:38:1d:b9:4f:04:52:a2:
                    2d:2c:a2:08:a4:2d:2f:55:1b:98:15:e5:ee:9d:c1:
                    d4:38:0c:13:27:37:6f:8d:be:3c:36:42:34:cd:67:
                    2a:ec:c2:ff:30:63:28:c3:cb:1a:7c:94:11:6d:25:
                    54:ab:61:37:25:fa:d4:17:68:65:79:ff:5f:f9:e4:
                    51:e1:f6:8e:32:0e:d9:2d:9f:4c:cc:dd:7c:de:ca:
                    5c:dd:10:c9:da:64:97:40:29:bf:6c:e5:f0:d1:8a:
                    1e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E8:79:1D:E8:09:62:A4:8C:8F:18:14:BC:DA:16:5F:B1:00:B6:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c003b936-3cb0-3e85-81b4-28301dba50c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.57.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:7a:fb:6c:85:a1:1c:c3:cb:29:b2:41:5a:5b:f0:e0:6c:ea:
         01:10:ad:d2:fe:c3:55:53:ec:54:e4:f6:16:d1:bd:74:64:ad:
         17:1b:31:b5:88:6b:b7:ef:14:f9:bb:94:42:27:3d:63:7b:ea:
         f3:05:9f:3c:bb:42:74:48:b4:3f:b9:d3:69:2b:04:57:ab:aa:
         51:4f:94:5d:fc:bb:35:ae:0c:07:56:06:e1:2c:85:7e:0e:63:
         a1:f0:96:6b:85:88:41:d7:4d:71:a8:2a:cf:bb:60:3b:94:af:
         5d:dd:e9:b1:18:7e:2e:fb:4c:b0:f5:1e:12:78:44:e8:2e:17:
         77:0c:a9:b3:fd:2a:48:d0:75:f2:1b:3f:33:f6:87:55:7d:ab:
         a6:5f:07:da:0b:f5:05:c1:da:e5:81:14:02:d2:cd:ee:15:81:
         30:f3:de:c4:7a:2f:0c:b6:a2:e4:c5:ce:0a:d5:19:84:90:1a:
         40:ee:0d:cc:bd:79:ad:b3:a5:aa:5a:d2:ed:0f:ef:f5:67:a5:
         ad:5b:df:36:6e:26:94:68:26:36:fd:f5:cb:b1:95:e5:1c:9e:
         2f:44:8d:cd:bd:f1:58:20:40:18:2c:27:5f:ac:eb:fb:95:de:
         73:af:f9:e9:80:55:77:bc:30:41:85:b7:5b:86:3c:94:0f:b6:
         d0:e3:1b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----