Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c4ea1b9a-ff81-38f9-a11e-40cfe116242c.roa
File:                     c4ea1b9a-ff81-38f9-a11e-40cfe116242c.roa (raw, json)
Hash identifier:          GW/FYhhsSAn04EhrZRikYurQGhHWFQkY6IkBmVGWRl0=
Subject key identifier:   FD:4F:FB:5F:A9:EC:C6:AF:15:04:23:E1:89:EF:61:69:C9:D5:5F:10
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FF5507FA8402B50B3D06BEB40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c4ea1b9a-ff81-38f9-a11e-40cfe116242c.roa
Signing time:             Fri 18 Nov 2022 12:00:00 +0000
ROA not before:           Fri 18 Nov 2022 12:00:00 +0000
ROA not after:            Sat 24 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        18.238.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f5:50:7f:a8:40:2b:50:b3:d0:6b:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 18 12:00:00 2022 GMT
            Not After : Dec 24 05:00:00 2022 GMT
        Subject: CN=bb9a6710-08f7-4a0e-804f-dfb8a23496da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:45:5b:59:53:5e:6c:bf:bd:95:6d:78:18:9c:
                    96:dc:a1:f1:37:99:25:a8:7e:7e:be:cf:d2:ae:d8:
                    8c:77:12:a1:1e:f6:ff:07:9c:0f:66:0f:ba:55:ee:
                    39:a8:b6:59:5d:33:0f:93:33:ba:90:a8:83:1b:e9:
                    38:97:4b:73:49:34:bf:a7:83:66:0f:0e:b5:6d:1f:
                    d0:0c:da:a9:1f:3f:fd:ad:fd:ab:93:56:97:b0:54:
                    d7:63:9f:f8:6c:93:17:3e:2d:9b:c6:14:d1:49:bb:
                    60:50:67:24:b1:35:aa:19:8a:3e:9b:ff:01:70:ee:
                    99:18:a3:18:7b:6a:27:e0:87:c8:8f:16:2c:1c:df:
                    ba:c1:b0:dd:bb:d4:18:d8:49:38:3e:0c:6b:8d:fd:
                    0f:2e:29:6d:ec:d9:e2:cc:96:8d:5a:6a:ee:61:fd:
                    97:39:c5:76:97:e0:ef:e9:b4:ab:9d:e5:99:b9:af:
                    86:fa:c8:87:1d:a3:5c:1c:81:01:27:16:d7:81:5c:
                    64:8f:2a:b2:11:68:8f:1f:81:43:f6:7d:a6:46:17:
                    45:51:5f:d2:0b:59:7d:85:6c:93:fd:a2:ff:8f:ad:
                    d6:88:7e:ec:d9:2b:e8:5f:b2:c1:de:c1:0f:9a:11:
                    d8:77:dd:43:b7:80:1d:fe:03:b6:0a:86:6b:88:1b:
                    3f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4F:FB:5F:A9:EC:C6:AF:15:04:23:E1:89:EF:61:69:C9:D5:5F:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c4ea1b9a-ff81-38f9-a11e-40cfe116242c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.238.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:2e:d8:ae:76:ac:27:42:90:20:a5:8f:1b:10:52:30:71:53:
         0b:5b:46:06:53:08:4a:4d:3e:13:94:ba:3b:b6:52:79:b7:7f:
         d4:71:8c:e6:94:f3:72:9d:25:c7:6c:9b:aa:b0:9e:6c:64:38:
         cc:53:fd:69:35:cb:d0:19:5e:89:17:bf:65:f3:7c:ef:82:c9:
         ca:e2:0e:1b:81:b6:b9:93:00:96:89:54:56:6a:7b:de:83:84:
         35:c6:c8:fb:f7:06:3d:5c:28:12:3e:20:9e:83:a6:3e:6f:c7:
         1f:cc:fe:73:69:a2:72:b9:97:63:62:d8:01:6f:13:dc:e5:c8:
         3c:86:e0:20:54:1d:42:ae:66:1d:40:84:5c:27:e8:3f:c3:c0:
         40:f2:7f:56:db:e6:bc:4f:a1:fa:65:a5:b5:5a:7f:d4:60:45:
         57:41:77:80:e0:6c:dd:90:52:c8:6f:d8:b9:71:6d:a6:a4:e3:
         06:4b:f0:10:01:5c:3c:51:ef:2a:3e:9b:c7:03:7a:80:88:1f:
         d2:c9:c4:8e:3a:bf:24:52:dd:dd:ec:68:2c:ca:2b:59:54:f1:
         2a:85:93:62:ee:5b:d7:13:0b:b3:88:8f:58:cd:df:27:e8:ae:
         54:4f:cb:d9:ca:49:71:93:1f:ff:4b:53:2d:6e:f8:82:89:dd:
         db:83:06:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----