Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d6c3aad0-9ed4-3f25-a014-7f47ad5398e9.roa
File:                     d6c3aad0-9ed4-3f25-a014-7f47ad5398e9.roa (raw, json)
Hash identifier:          gh6ntpIOU3PScBODkkg7gCAmbP77EumANd3L0pgMw4s=
Subject key identifier:   FC:E8:0B:88:3C:C6:0D:5D:03:35:E9:B1:74:02:0C:23:A0:19:0B:B4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D32A846C924F5E66177E7E6C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d6c3aad0-9ed4-3f25-a014-7f47ad5398e9.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.208.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:32:a8:46:c9:24:f5:e6:61:77:e7:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=c34b0a2e-8b33-4121-927f-fd928d8a2c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ea:54:c7:45:bb:bb:d8:f1:b5:bb:e4:58:de:
                    b2:9b:81:fc:de:d9:b1:5a:b0:ce:7d:95:20:84:cb:
                    82:5e:a1:c8:2a:b9:20:85:1c:0e:cc:8b:c0:e3:98:
                    7f:58:26:fc:07:18:02:fe:78:5d:4c:82:1e:4b:78:
                    4f:7d:56:45:21:c4:c5:b7:a0:d9:42:22:f0:52:6a:
                    8b:38:e0:56:11:bc:93:9d:d0:cb:54:a2:59:73:1e:
                    b1:a7:a4:c8:15:ba:ed:ef:0e:14:ef:5f:50:b8:31:
                    4a:a4:fd:ec:1c:7a:d9:c4:4b:48:aa:b0:e0:5e:1c:
                    4c:c3:1e:60:5c:b0:7d:8c:44:95:1a:15:0c:f3:9c:
                    19:46:ca:b7:3e:47:d5:53:14:dc:ed:d4:88:b4:61:
                    7b:72:bd:dc:45:a2:b3:18:ee:08:78:b3:5e:a1:9e:
                    aa:b6:a4:77:0c:23:16:c4:66:0d:15:6c:15:56:23:
                    9a:f2:25:c2:f6:7c:2f:39:e3:40:6f:f6:6a:47:3a:
                    d1:15:cc:d8:39:1a:79:e0:f7:e6:de:31:7d:3a:0f:
                    b2:0c:34:50:b6:16:7f:04:e4:2d:3e:6e:1e:3c:36:
                    27:42:97:7d:80:6b:37:7c:94:e5:7f:54:ca:bc:a4:
                    97:fd:48:9c:b9:3f:13:c8:f6:e1:07:46:50:67:df:
                    92:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E8:0B:88:3C:C6:0D:5D:03:35:E9:B1:74:02:0C:23:A0:19:0B:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d6c3aad0-9ed4-3f25-a014-7f47ad5398e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.208.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:94:4b:02:43:22:f5:b3:c8:fd:f5:c9:60:10:2e:42:ac:73:
         83:7c:85:73:95:2a:37:9b:4b:f8:61:61:73:5c:e1:41:cb:13:
         32:79:74:48:51:15:b8:41:22:e6:1a:83:5b:39:1b:59:d2:3a:
         f9:b2:12:06:7b:9e:8e:af:4c:fa:da:f1:93:50:94:58:f4:69:
         0c:26:55:ad:9c:88:74:73:fc:73:e8:aa:43:4a:0a:62:90:64:
         fb:92:85:1b:66:f6:af:ef:e9:3c:21:ec:1d:a5:c7:91:c5:34:
         e8:ba:c9:c3:3e:32:ab:d9:e9:9e:8e:c8:ed:8e:da:82:0a:67:
         17:b6:0e:3c:6f:3e:d2:e2:ae:a9:cb:51:d6:86:ad:40:1e:d5:
         b0:72:2d:dd:2d:25:4a:06:79:19:1d:c7:d0:27:4d:44:66:4b:
         73:97:65:eb:db:cc:2f:51:81:49:aa:99:62:c9:74:df:71:1d:
         8c:9f:44:f5:87:1f:03:f1:70:3c:31:19:a8:19:87:9a:a5:bd:
         4e:4d:6c:6c:6a:e4:d9:b4:26:7f:e1:94:21:52:e3:cb:2a:ce:
         91:e0:18:f8:4c:c7:c9:d7:a9:0a:ba:8f:59:6e:1d:9e:f4:f2:
         80:05:08:0e:4e:64:ae:89:7a:58:af:46:06:71:01:36:8d:38:
         a0:8a:f7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----