Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d59e6a01-cde1-36b5-a4db-24b2873070ce.roa
File:                     d59e6a01-cde1-36b5-a4db-24b2873070ce.roa (raw, json)
Hash identifier:          4G4aHrsBMlH/UApvFoxvfZAJdJW5UwlDTIbi4RH8Qdw=
Subject key identifier:   DE:43:B6:68:DC:7A:82:BC:FC:7D:9B:70:94:8A:61:31:58:2C:90:FD
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584093F325D2AF6756F6C98D6040
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d59e6a01-cde1-36b5-a4db-24b2873070ce.roa
Signing time:             Sat 14 Jan 2023 12:00:00 +0000
ROA not before:           Sat 14 Jan 2023 12:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        18.123.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:93:f3:25:d2:af:67:56:f6:c9:8d:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 14 12:00:00 2023 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=81bc7b70-f6e7-4027-a31e-cffc0af2b1d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:47:04:53:f0:e8:05:90:ca:2c:5e:bc:47:
                    e6:fb:a2:4a:3b:38:01:87:ae:d4:39:34:a1:d7:29:
                    31:b6:67:00:10:5f:a5:e0:e0:79:25:ed:70:da:e0:
                    91:9f:ea:ba:13:67:7c:0f:56:01:29:de:d9:c2:a5:
                    6c:53:f7:1f:63:3d:34:f7:0d:b7:7f:d3:d8:f5:3e:
                    b7:b8:05:b5:d0:42:97:46:4d:11:24:bb:f3:19:42:
                    ca:1e:6f:fc:f4:c0:37:c2:68:e1:a4:54:06:0f:56:
                    6a:cb:5d:6e:9f:45:c4:52:0f:1e:ab:52:9d:63:df:
                    90:d6:40:8c:dc:7b:86:8e:83:c1:8e:19:0d:e9:39:
                    44:b4:39:90:c5:1a:0f:17:c6:bb:67:26:c1:a1:b4:
                    32:b6:e6:35:89:74:fa:fe:0a:2b:36:8a:eb:63:e4:
                    1f:57:a7:ee:af:47:84:e1:58:98:93:b7:5d:db:1d:
                    16:a3:09:9e:d3:7b:2a:dd:dd:f6:48:02:6e:40:7e:
                    62:ba:51:16:67:36:d1:3d:60:38:99:04:c9:5b:5d:
                    a7:d3:5f:11:c1:0a:a3:b6:87:f6:3b:30:9e:53:f4:
                    fe:83:e1:2e:fc:c0:59:2e:e9:cd:a6:d4:70:dc:4a:
                    44:3e:d0:a7:42:d9:19:d2:6c:c6:b6:ef:fc:01:fa:
                    e7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:43:B6:68:DC:7A:82:BC:FC:7D:9B:70:94:8A:61:31:58:2C:90:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d59e6a01-cde1-36b5-a4db-24b2873070ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.123.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:39:e9:b3:4c:76:d9:e6:d4:40:29:e4:63:c2:43:d6:94:65:
         db:90:ea:50:1d:a7:f0:04:08:2b:44:ce:2c:46:02:72:8b:93:
         c7:b1:04:dd:23:1a:ca:5f:62:77:9b:20:33:9f:34:eb:67:dd:
         15:20:a3:38:d4:c5:36:ad:41:a5:97:48:47:37:b4:ef:18:2a:
         eb:87:fe:4d:2f:9c:51:65:d1:5f:bc:63:3c:6a:9e:bf:51:27:
         e0:18:8c:49:f2:cb:97:d2:68:9d:4a:48:3d:f0:a6:ad:e1:cf:
         58:7f:2a:16:bc:66:e6:6d:6d:bb:49:bd:cc:ae:0d:30:c8:5d:
         c8:ab:81:84:73:f0:7f:73:67:51:a2:d8:48:53:02:a3:a9:2f:
         f3:be:63:55:83:2e:c1:d1:3d:a1:5c:62:aa:ea:ef:c3:b0:6b:
         a7:aa:5a:62:1a:b7:49:f0:37:e4:2b:42:ac:93:53:aa:b6:28:
         e8:5e:c1:ea:ea:9c:2d:22:16:03:ec:8a:bf:c5:04:84:15:10:
         2d:c8:ea:0b:23:2e:70:9d:37:4e:7e:13:6f:55:58:80:27:0b:
         0c:12:40:07:5a:40:e6:57:03:71:28:5b:81:e6:37:3d:fc:1f:
         5a:d2:8d:55:cd:18:6a:69:14:fa:b4:8a:62:08:a7:bf:b5:97:
         d7:87:10:84
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECT8yXSr2dW9smNYEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDExNDEyMDAwMFoXDTIzMDIxOTA1MDAwMFowLzEtMCsGA1UEAxMk
ODFiYzdiNzAtZjZlNy00MDI3LWEzMWUtY2ZmYzBhZjJiMWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4RHBFPw6AWQyixevEfm+6JKOzgBh67UOTSh
1ykxtmcAEF+l4OB5Je1w2uCRn+q6E2d8D1YBKd7ZwqVsU/cfYz009w23f9PY9T63
uAW10EKXRk0RJLvzGULKHm/89MA3wmjhpFQGD1Zqy11un0XEUg8eq1KdY9+Q1kCM
3HuGjoPBjhkN6TlEtDmQxRoPF8a7ZybBobQytuY1iXT6/gorNorrY+QfV6fur0eE
4ViYk7dd2x0Wowme03sq3d32SAJuQH5iulEWZzbRPWA4mQTJW12n018RwQqjtof2
OzCeU/T+g+Eu/MBZLunNptRw3EpEPtCnQtkZ0mzGtu/8Afrn4wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFN5DtmjceoK8/H2bcJSKYTFYLJD9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZDU5ZTZhMDEtY2RlMS0z
NmI1LWE0ZGItMjRiMjg3MzA3MGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEnswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAXznps0x22ebUQCnkY8JD1pRl25DqUB2n8AQIK0TOLEYCcouTx7EE3SMa
yl9id5sgM58062fdFSCjONTFNq1BpZdIRze07xgq64f+TS+cUWXRX7xjPGqev1En
4BiMSfLLl9JonUpIPfCmreHPWH8qFrxm5m1tu0m9zK4NMMhdyKuBhHPwf3NnUaLY
SFMCo6kv875jVYMuwdE9oVxiqurvw7Brp6paYhq3SfA35CtCrJNTqrYo6F7B6uqc
LSIWA+yKv8UEhBUQLcjqCyMucJ03Tn4Tb1VYgCcLDBJAB1pA5lcDcShbgeY3Pfwf
WtKNVc0YamkU+rSKYginv7WX14cQhA==
-----END CERTIFICATE-----