Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d9e4099d-5018-3a4d-9992-f1b9231785eb.roa
File:                     d9e4099d-5018-3a4d-9992-f1b9231785eb.roa (raw, json)
Hash identifier:          jJzTvtfgQpf8ULDa71GN3O1YTDzk7FIGlorcl9o6nis=
Subject key identifier:   45:9A:D9:30:AE:4C:06:79:40:D0:0D:10:53:9B:31:81:F2:76:E0:5C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FF81B7B683DE8AC7E2CEE5E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d9e4099d-5018-3a4d-9992-f1b9231785eb.roa
Signing time:             Sat 19 Nov 2022 12:00:00 +0000
ROA not before:           Sat 19 Nov 2022 12:00:00 +0000
ROA not after:            Sun 25 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        18.108.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f8:1b:7b:68:3d:e8:ac:7e:2c:ee:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 19 12:00:00 2022 GMT
            Not After : Dec 25 05:00:00 2022 GMT
        Subject: CN=7dee945f-de27-42bc-ac2d-cdbbccce2a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:66:e0:6d:3b:bd:00:fa:33:a3:d9:04:03:b1:
                    34:db:86:07:cb:00:d1:d6:22:c4:0d:17:3a:92:f2:
                    87:e4:89:d9:21:30:bf:01:27:ca:ea:73:95:e3:c1:
                    28:d3:2c:aa:0a:7d:3d:98:0c:9f:ed:c5:4a:7d:f6:
                    e3:40:05:57:07:15:d4:50:65:d0:03:5a:91:2b:23:
                    14:f0:62:90:2f:fa:95:b8:da:35:b8:9b:2d:72:f0:
                    8b:cd:41:35:d9:b3:58:29:4b:0e:ee:18:c7:51:d8:
                    0d:22:a8:8e:b8:77:70:d8:d2:9a:48:0e:ed:f9:96:
                    41:89:33:c7:3d:c9:ae:1c:b0:62:ac:5b:6b:f9:e6:
                    08:5d:40:b2:57:18:cd:03:5b:aa:98:63:06:a8:1a:
                    cc:a4:a9:3a:0f:93:15:b1:c2:c8:0a:ad:d8:62:7f:
                    29:c1:0b:1b:ae:8f:5a:d9:fc:53:2d:2a:5d:c4:92:
                    ce:85:12:87:5d:24:5c:76:14:02:ce:74:05:5a:d7:
                    92:c4:34:5a:b9:72:d9:9d:86:65:fb:d0:09:cf:32:
                    a3:a2:34:d7:a8:dd:df:c5:a4:3e:0b:b5:fe:94:a3:
                    a3:4c:c1:a2:aa:12:cd:ee:5e:68:62:8a:cd:26:b8:
                    87:bc:02:14:c8:62:09:3c:67:50:13:92:7c:1c:6d:
                    e5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9A:D9:30:AE:4C:06:79:40:D0:0D:10:53:9B:31:81:F2:76:E0:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d9e4099d-5018-3a4d-9992-f1b9231785eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.108.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:4d:13:73:fc:96:1b:80:b4:e6:a0:91:b0:e7:31:37:69:b3:
         81:de:61:c3:ff:20:27:94:a9:9e:b3:7e:33:64:ed:ab:67:eb:
         6e:6c:8b:b9:cc:39:18:4c:31:8f:96:14:a8:f9:31:61:3b:27:
         40:3f:8a:d6:c2:75:e4:08:f9:3f:be:68:b4:2a:f0:5b:04:5c:
         d9:d9:e2:6d:31:d6:0a:15:a6:62:c7:17:16:6b:a1:48:2b:e3:
         bc:70:cb:7d:28:b0:0e:54:12:bc:5b:53:c5:b9:ca:4e:5d:e3:
         68:b1:47:b3:40:2c:e7:53:13:73:16:6b:71:46:3c:ff:e7:f0:
         2f:5c:3c:83:88:d5:66:e3:20:ae:14:a0:a0:e8:05:9c:57:12:
         37:96:d8:68:88:2b:73:24:ec:03:10:f1:cf:ba:27:d2:00:0d:
         55:8e:69:07:95:44:c3:10:ec:a8:e9:9f:26:fc:dc:9a:ad:73:
         a9:6d:23:b3:f1:68:ec:21:8b:68:7c:20:19:c5:b7:1a:b4:80:
         05:ae:f0:a2:7b:10:a5:da:c8:a9:09:11:32:62:fa:9a:f8:2f:
         4a:d8:a9:8a:21:36:47:a5:87:2e:8f:75:d7:e7:66:e7:1f:3b:
         94:1d:05:a5:95:81:47:2e:3d:8a:82:f5:a0:2b:07:d5:31:04:
         33:22:fb:d9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/4G3toPeisfizuXoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTExOTEyMDAwMFoXDTIyMTIyNTA1MDAwMFowLzEtMCsGA1UEAxMk
N2RlZTk0NWYtZGUyNy00MmJjLWFjMmQtY2RiYmNjY2UyYTE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2bgbTu9APozo9kEA7E024YHywDR1iLEDRc6
kvKH5InZITC/ASfK6nOV48Eo0yyqCn09mAyf7cVKffbjQAVXBxXUUGXQA1qRKyMU
8GKQL/qVuNo1uJstcvCLzUE12bNYKUsO7hjHUdgNIqiOuHdw2NKaSA7t+ZZBiTPH
PcmuHLBirFtr+eYIXUCyVxjNA1uqmGMGqBrMpKk6D5MVscLICq3YYn8pwQsbro9a
2fxTLSpdxJLOhRKHXSRcdhQCznQFWteSxDRauXLZnYZl+9AJzzKjojTXqN3fxaQ+
C7X+lKOjTMGiqhLN7l5oYorNJriHvAIUyGIJPGdQE5J8HG3lrwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEWa2TCuTAZ5QNANEFObMYHyduBcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZDllNDA5OWQtNTAxOC0z
YTRkLTk5OTItZjFiOTIzMTc4NWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEmwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEANE0Tc/yWG4C05qCRsOcxN2mzgd5hw/8gJ5SpnrN+M2Ttq2frbmyLucw5
GEwxj5YUqPkxYTsnQD+K1sJ15Aj5P75otCrwWwRc2dnibTHWChWmYscXFmuhSCvj
vHDLfSiwDlQSvFtTxbnKTl3jaLFHs0As51MTcxZrcUY8/+fwL1w8g4jVZuMgrhSg
oOgFnFcSN5bYaIgrcyTsAxDxz7on0gANVY5pB5VEwxDsqOmfJvzcmq1zqW0js/Fo
7CGLaHwgGcW3GrSABa7wonsQpdrIqQkRMmL6mvgvStipiiE2R6WHLo911+dm5x87
lB0FpZWBRy49ioL1oCsH1TEEMyL72Q==
-----END CERTIFICATE-----