Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c1e778dc-8fc3-35d7-be33-4e5ab5a9a9bf.roa
File:                     c1e778dc-8fc3-35d7-be33-4e5ab5a9a9bf.roa (raw, json)
Hash identifier:          HDtpMu9aiDE27fpXONOjUWfUHC8Ig4g3Z4Nda8iVfeY=
Subject key identifier:   B7:8F:F4:46:36:D2:5B:A0:9C:80:C4:73:DB:E8:48:1B:96:50:11:8D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EE58E7D8A3A5E9B9C2FA7C200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c1e778dc-8fc3-35d7-be33-4e5ab5a9a9bf.roa
Signing time:             Sat 13 Aug 2022 12:00:00 +0000
ROA not before:           Sat 13 Aug 2022 12:00:00 +0000
ROA not after:            Sun 18 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.120.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e5:8e:7d:8a:3a:5e:9b:9c:2f:a7:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 13 12:00:00 2022 GMT
            Not After : Sep 18 04:00:00 2022 GMT
        Subject: CN=a9169113-530c-49e0-a622-f5bdc053aa2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:07:e8:c9:9e:1b:e1:5c:b8:ca:a7:3d:9e:66:
                    15:9d:b4:b2:09:67:e5:09:cb:ef:00:6e:5d:07:a5:
                    48:e9:ce:88:6c:3d:6d:6b:91:4c:74:06:85:13:ee:
                    44:d5:1e:6f:01:b2:3c:c3:79:40:20:47:f8:e3:b2:
                    90:29:10:8f:82:9c:f2:71:b1:bf:9e:00:d8:fb:a9:
                    cc:ed:4b:da:41:d8:1a:17:a0:b5:21:0a:4e:09:bd:
                    f4:81:d7:02:11:01:20:1f:5e:9e:6e:6e:a4:7a:ef:
                    4a:7e:5b:ca:1a:e3:87:78:0c:49:f1:1e:96:25:f2:
                    c2:93:91:ab:f2:93:b2:fd:fe:b4:cb:8a:7c:9c:9a:
                    0f:ed:83:da:31:a0:9d:c9:50:36:27:00:1d:de:9a:
                    86:8d:a0:5f:7b:5f:86:51:05:7e:98:39:45:d9:d3:
                    98:b6:d3:f6:c7:45:ae:d8:df:58:25:af:e0:b2:db:
                    bb:d1:36:9a:86:e3:23:68:e2:0d:f4:4f:de:bc:85:
                    b4:19:71:23:59:5c:2d:1c:03:82:b2:b9:ac:b7:2a:
                    c5:c0:51:89:5e:c6:90:ee:90:32:9d:8f:a4:82:24:
                    2a:2e:7a:46:79:c1:52:12:36:37:8e:ad:1e:c5:af:
                    6f:42:7a:87:e3:61:31:9e:42:dc:0f:d1:d9:33:55:
                    88:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8F:F4:46:36:D2:5B:A0:9C:80:C4:73:DB:E8:48:1B:96:50:11:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c1e778dc-8fc3-35d7-be33-4e5ab5a9a9bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.120.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:c2:8e:4a:c7:a7:02:c1:56:04:32:6a:b2:d4:42:08:7b:6b:
         1e:8f:2c:39:8e:9b:83:d1:db:e7:bd:7b:8b:b5:ee:b2:c4:d6:
         7a:fd:20:b9:1f:f3:01:9d:41:9b:92:cb:36:b7:c4:87:ed:1c:
         71:14:3d:8e:34:61:29:9a:01:48:78:10:a8:c3:d3:b3:ab:dd:
         54:ef:55:60:7e:fa:80:05:9a:fc:b4:8d:6e:1c:39:b8:e5:b5:
         28:e2:e1:d8:80:09:03:37:9e:09:59:59:16:5c:4c:20:3f:6e:
         92:8a:d3:91:98:c8:cc:ab:7b:6a:24:3d:c0:dc:01:42:c3:96:
         86:1d:b6:1d:f2:80:85:23:99:1d:12:a4:b9:ef:58:b8:72:d8:
         17:59:e5:d0:17:77:4d:29:92:76:f1:ec:e8:d4:53:57:8b:44:
         af:5a:39:85:c4:d9:74:98:d1:47:91:a4:92:39:e8:1c:0e:fb:
         bb:d1:38:38:29:80:d2:a3:89:f5:54:1e:a7:eb:db:e1:73:82:
         4e:93:bb:e9:2a:df:fe:72:90:e2:1a:89:cb:9e:30:5d:77:ba:
         e1:c6:7e:de:fb:63:ab:09:87:68:f4:8b:7b:81:fa:ba:58:e4:
         c6:2b:ab:88:2d:dd:a0:93:a3:de:81:8e:67:fa:04:3c:d4:b8:
         d2:e1:ad:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----