Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/db67735b-f235-3547-9c78-e47a5bd3e311.roa
File:                     db67735b-f235-3547-9c78-e47a5bd3e311.roa (raw, json)
Hash identifier:          yENmpBVuSQ6B1Kly8lwRYvB7E4mQRkiFweNdMC2opWM=
Subject key identifier:   12:07:03:C8:98:41:B8:71:2E:0A:ED:B0:CF:96:F6:6E:72:59:66:E2
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FF8050FB790A16C0408BC35C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/db67735b-f235-3547-9c78-e47a5bd3e311.roa
Signing time:             Sat 19 Nov 2022 12:00:00 +0000
ROA not before:           Sat 19 Nov 2022 12:00:00 +0000
ROA not after:            Sun 25 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        18.116.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f8:05:0f:b7:90:a1:6c:04:08:bc:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 19 12:00:00 2022 GMT
            Not After : Dec 25 05:00:00 2022 GMT
        Subject: CN=b7e39c98-6183-417e-89a7-405d91c732bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c1:33:f4:80:24:9b:10:50:9a:34:b9:52:f8:
                    c9:e2:9f:71:25:17:7b:2e:ba:41:84:5b:04:eb:57:
                    19:ea:e5:6b:77:3f:8c:00:72:24:ab:7e:7e:51:ec:
                    8f:d0:42:af:8b:72:9b:29:e1:89:4e:6d:6b:82:3f:
                    c8:ab:36:7f:b5:33:56:3d:b7:d6:b0:e1:93:bc:52:
                    a1:47:d1:83:21:f7:8e:37:53:14:16:1e:96:f9:be:
                    15:f4:8b:70:96:4a:52:4e:05:f4:9a:8c:54:dd:ac:
                    71:e4:4c:3c:b8:16:35:48:f6:b0:ea:f5:c8:b1:ca:
                    0f:69:62:7f:5c:33:d6:f0:42:0b:78:5c:e5:cf:c7:
                    54:c3:78:18:c4:fc:8a:a8:c5:86:c4:df:9a:80:3f:
                    e9:f0:9e:56:d3:f9:79:52:6e:bd:05:8f:1d:1e:fa:
                    78:47:41:4a:53:2d:b1:46:45:dd:51:d2:df:8f:d2:
                    68:e9:2a:68:74:3b:a8:43:08:c9:75:39:ca:f9:43:
                    62:df:54:40:99:1c:e9:11:44:65:0b:fa:bf:65:00:
                    01:5c:8d:8a:2d:a1:7d:79:5f:49:20:71:f7:d1:c5:
                    40:54:b4:b7:db:d1:07:6f:26:91:25:15:3d:42:24:
                    bb:88:94:9c:3f:3d:31:df:e5:8b:90:a7:63:a5:b6:
                    62:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:07:03:C8:98:41:B8:71:2E:0A:ED:B0:CF:96:F6:6E:72:59:66:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/db67735b-f235-3547-9c78-e47a5bd3e311.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.116.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:8d:46:2f:8d:d5:b2:e5:37:bc:98:d3:b8:63:b6:b8:0c:ea:
         fb:a3:33:87:59:46:51:e6:3e:09:50:f2:b2:72:8b:bc:bf:d6:
         cc:e7:26:4a:a1:c6:1e:b8:1a:fb:75:b9:37:4b:b2:11:21:17:
         77:7e:23:02:af:1c:18:64:5e:c9:d1:fa:d7:ef:a9:26:24:38:
         4d:0f:a8:ee:fc:dc:f6:fd:3e:14:01:a9:69:3e:1e:2d:75:06:
         36:4a:3d:e8:65:a8:43:cb:ce:e4:a8:a4:7f:eb:1b:ec:02:4b:
         25:db:b6:e1:60:ba:cf:60:fb:0a:6b:6f:8a:6d:b6:65:0c:87:
         e6:9b:f4:2e:30:71:fb:43:df:bc:51:a0:ad:ca:5a:23:7d:25:
         6a:fd:cf:19:48:77:7e:15:52:6c:a6:37:cf:fe:d4:45:01:e2:
         42:ee:62:c0:ec:b3:a9:cc:33:26:ad:9b:e6:98:a7:e3:45:7f:
         ad:09:55:ba:b8:4c:e1:c8:ab:2c:87:62:ae:11:01:01:c3:64:
         fe:d7:4f:79:76:b2:87:fa:ba:3c:46:9c:45:90:01:f0:9c:f5:
         41:4b:36:e1:ac:e7:08:7d:4e:e1:9d:88:e3:24:ec:16:67:69:
         b9:25:7f:39:0b:58:66:63:20:16:63:75:12:3e:91:62:2a:80:
         0a:e3:8c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----