Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cbf6e97c-3fb6-31ae-9e57-b0b829c74121.roa
File:                     cbf6e97c-3fb6-31ae-9e57-b0b829c74121.roa (raw, json)
Hash identifier:          K2+HX8+TVkK1PGcqp3nFWNYVQyJuiCsXDW1mASLeV2E=
Subject key identifier:   88:4B:69:7B:68:CA:9B:DC:9B:E2:C0:A6:55:5F:B2:3F:BC:8B:C3:92
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CE467D4B8C57570704B47CAB0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cbf6e97c-3fb6-31ae-9e57-b0b829c74121.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.246.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e4:67:d4:b8:c5:75:70:70:4b:47:ca:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=8cb35f79-d96a-45a3-8ec2-11eb4cd82d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:26:b6:27:60:62:71:8d:2f:1e:ad:79:96:02:
                    15:c7:37:c8:60:27:88:47:2d:0d:7d:b7:32:40:f7:
                    83:f6:3e:75:15:c6:7c:12:37:f3:88:0d:6f:ae:1d:
                    be:88:b5:43:f2:2e:69:26:73:dc:4d:e4:d1:59:93:
                    12:34:ef:a8:64:38:cc:24:04:97:db:2e:de:0a:b4:
                    ce:1e:f9:bd:a1:ca:62:a0:49:22:bd:dd:d6:74:cb:
                    58:7a:28:ca:ac:40:4a:d3:06:04:21:ff:e5:3e:83:
                    ad:2d:30:a3:d4:53:1f:fc:00:e5:84:1f:ab:6d:e7:
                    53:bf:f4:c4:f7:17:f7:0a:d6:ad:85:33:d8:41:ca:
                    ef:07:d7:06:9c:d5:b8:f7:f7:4d:75:de:66:7d:55:
                    99:97:34:19:5c:5a:fb:b9:a9:51:2e:80:9d:14:74:
                    d0:f3:52:72:0a:2c:a9:7d:50:25:8c:56:a5:21:e9:
                    bc:04:69:40:9a:1c:21:60:af:10:05:15:77:34:ce:
                    e8:4d:2d:9f:a2:b4:4a:fd:97:f1:74:70:32:45:1e:
                    a7:fe:68:6f:0a:8a:96:c0:53:c5:4c:1c:05:19:6d:
                    7f:9c:39:8e:c7:be:3a:c4:b4:98:ff:77:bd:96:74:
                    d4:88:b8:aa:64:df:96:bb:15:22:89:d5:41:cb:99:
                    cc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4B:69:7B:68:CA:9B:DC:9B:E2:C0:A6:55:5F:B2:3F:BC:8B:C3:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cbf6e97c-3fb6-31ae-9e57-b0b829c74121.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.246.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:c6:06:94:be:ea:66:6c:18:58:bd:e6:3c:30:8b:be:ab:28:
         84:3b:6d:23:14:ac:54:20:17:b9:38:9e:c7:e9:7e:b0:94:6f:
         2a:4b:7e:ea:6d:1d:71:ec:58:16:6d:ec:de:47:22:bb:61:cb:
         81:ae:02:7f:69:c3:1d:2a:0f:9b:fd:a8:37:fd:e5:1a:9a:66:
         a0:28:45:fc:d0:54:c1:55:6b:20:21:1f:c1:50:da:ed:7f:9d:
         b9:5a:b5:e2:bf:dd:f6:cd:c3:ce:83:18:06:4f:dd:43:b5:27:
         02:ae:b0:db:c5:a8:26:88:ca:5f:64:46:9b:5d:4b:8f:3a:76:
         4e:96:10:e0:a8:5d:d9:b4:e5:60:4f:ff:1c:e6:05:f7:9b:b9:
         ed:c9:69:f8:1e:24:18:d6:d2:e2:55:cb:42:a5:ca:af:c8:6f:
         57:d4:4e:04:e9:9c:e3:58:c6:a7:52:e1:c2:7b:d9:05:71:f9:
         59:c7:07:12:71:e7:a7:8e:0c:02:52:8b:fd:13:7b:27:dc:81:
         4e:30:11:d8:ba:e6:16:02:2f:d5:68:6d:63:1e:d3:31:21:a5:
         07:c9:83:15:e5:32:11:3b:89:c6:f8:2b:0d:a5:80:de:c2:39:
         50:3d:92:b9:d3:42:c3:1c:cf:af:d8:bc:cc:95:44:cc:1b:80:
         28:d0:fb:44
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzkZ9S4xXVwcEtHyrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIxMTA1MDAwMFoXDTIyMDMxODA0MDAwMFowLzEtMCsGA1UEAxMk
OGNiMzVmNzktZDk2YS00NWEzLThlYzItMTFlYjRjZDgyZDBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCa2J2BicY0vHq15lgIVxzfIYCeIRy0Nfbcy
QPeD9j51FcZ8EjfziA1vrh2+iLVD8i5pJnPcTeTRWZMSNO+oZDjMJASX2y7eCrTO
Hvm9ocpioEkivd3WdMtYeijKrEBK0wYEIf/lPoOtLTCj1FMf/ADlhB+rbedTv/TE
9xf3CtathTPYQcrvB9cGnNW49/dNdd5mfVWZlzQZXFr7ualRLoCdFHTQ81JyCiyp
fVAljFalIem8BGlAmhwhYK8QBRV3NM7oTS2forRK/ZfxdHAyRR6n/mhvCoqWwFPF
TBwFGW1/nDmOx746xLSY/3e9lnTUiLiqZN+WuxUiidVBy5nMQQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIhLaXtoypvcm+LAplVfsj+8i8OSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvY2JmNmU5N2MtM2ZiNi0z
MWFlLTllNTctYjBiODI5Yzc0MTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEvYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMsYGlL7qZmwYWL3mPDCLvqsohDttIxSsVCAXuTiex+l+sJRvKkt+6m0d
cexYFm3s3kciu2HLga4Cf2nDHSoPm/2oN/3lGppmoChF/NBUwVVrICEfwVDa7X+d
uVq14r/d9s3DzoMYBk/dQ7UnAq6w28WoJojKX2RGm11Ljzp2TpYQ4Khd2bTlYE//
HOYF95u57clp+B4kGNbS4lXLQqXKr8hvV9ROBOmc41jGp1LhwnvZBXH5WccHEnHn
p44MAlKL/RN7J9yBTjAR2LrmFgIv1WhtYx7TMSGlB8mDFeUyETuJxvgrDaWA3sI5
UD2SudNCwxzPr9i8zJVEzBuAKND7RA==
-----END CERTIFICATE-----