Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d3dae632-fd44-33e6-9b2c-c7bd8b0ac544.roa
File:                     d3dae632-fd44-33e6-9b2c-c7bd8b0ac544.roa (raw, json)
Hash identifier:          F485hVgn9eNgTyNtksKUNxgWJw8onyMBZ05aCajRXvo=
Subject key identifier:   F2:72:AE:87:EB:10:96:1E:5C:5B:29:A5:3C:1A:42:D5:3E:B2:C6:1A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EE570B76D52C035BC8BC18580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d3dae632-fd44-33e6-9b2c-c7bd8b0ac544.roa
Signing time:             Sat 13 Aug 2022 12:00:00 +0000
ROA not before:           Sat 13 Aug 2022 12:00:00 +0000
ROA not after:            Sun 18 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.137.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e5:70:b7:6d:52:c0:35:bc:8b:c1:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 13 12:00:00 2022 GMT
            Not After : Sep 18 04:00:00 2022 GMT
        Subject: CN=28359849-0f80-4aaf-a55d-4ebf0607d0de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c5:f0:bb:c3:65:d8:d5:4c:5d:5b:04:71:cc:
                    f4:e6:4c:e3:38:17:ea:3e:b9:a3:e2:c7:a2:ad:36:
                    c5:3b:37:c1:60:f8:5a:c6:29:77:a2:06:5a:2e:78:
                    ee:9d:9c:80:01:b2:95:29:b7:29:30:12:64:c9:d3:
                    fc:34:ed:b5:24:70:f1:5c:39:c4:7b:cb:e1:f4:14:
                    85:8a:b6:06:35:14:79:df:23:ec:6a:00:fe:dc:06:
                    18:6a:cb:ec:c7:bf:ee:35:5b:9d:48:db:8e:00:9e:
                    71:fb:89:5a:3b:b2:44:cf:95:b8:d7:ed:b8:18:73:
                    0c:22:bf:ad:71:a3:dd:4a:8a:93:ea:d7:65:c5:83:
                    fb:dd:be:4a:e3:57:3f:81:85:e0:e7:87:db:71:4c:
                    c5:5b:ba:3e:21:d8:a7:81:9d:f7:3f:32:67:22:fc:
                    c9:be:5f:80:2a:9c:79:e7:2d:be:42:9a:96:a7:92:
                    23:0d:64:6b:8c:b8:d6:90:d8:c7:a1:99:eb:1e:29:
                    33:01:03:ba:b9:9c:da:99:48:2b:ce:a0:0b:4a:20:
                    e9:fd:67:b9:3a:2e:4c:2a:c9:4a:eb:ed:37:86:4d:
                    f7:54:75:fe:be:7d:b7:5f:ab:ad:bb:2b:47:ea:2e:
                    0a:9b:61:b6:1b:86:6e:ca:c2:9b:c2:7b:cc:eb:35:
                    61:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:72:AE:87:EB:10:96:1E:5C:5B:29:A5:3C:1A:42:D5:3E:B2:C6:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d3dae632-fd44-33e6-9b2c-c7bd8b0ac544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.137.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:4d:d5:22:a5:56:45:a0:2c:3b:eb:c9:fb:da:38:d7:50:f5:
         27:5e:40:c0:37:d2:e4:7f:93:4d:42:46:40:ca:c2:51:aa:47:
         8d:79:f7:e4:d6:44:d9:0b:ed:f6:b2:cc:ae:20:fe:05:db:54:
         2e:8c:63:25:5f:75:41:04:57:7a:f5:f9:ba:9a:fa:fd:77:be:
         e7:4d:4f:c8:f3:16:b5:dc:e2:6d:a6:65:6c:ee:fe:e8:94:d9:
         8a:1d:4b:60:a0:8e:ad:bf:38:f4:f5:6c:22:56:4e:95:27:58:
         75:90:c0:cb:cb:3b:39:63:3b:bf:66:2b:44:0a:3e:7f:f1:99:
         b1:a4:27:f6:14:50:f4:fe:55:41:d2:a0:18:42:6b:30:6a:83:
         d4:c5:67:ed:9e:d5:2a:10:1d:f6:7f:65:cc:26:42:88:5d:e2:
         95:fa:b7:71:22:9f:22:05:c7:9d:c4:ce:26:1a:20:ed:a6:e3:
         23:21:cc:fa:c4:d3:dd:d5:67:b4:89:ac:3e:93:3e:72:3f:50:
         67:b2:ec:0e:b2:ef:e4:6d:e5:08:19:18:aa:c7:21:cb:97:de:
         f3:42:d9:2a:0c:43:04:8c:e6:6e:fb:42:e3:4c:86:fc:82:64:
         25:01:95:bc:b3:85:58:75:c6:9d:14:9a:19:dc:d9:c2:a1:7e:
         a9:46:f9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----