Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/db835a58-1148-3659-a837-88ab51469050.roa
File:                     db835a58-1148-3659-a837-88ab51469050.roa (raw, json)
Hash identifier:          42V/DIxcXP8hWNhXChHxD8dlTRx7PGqOM5wGVj7VO8c=
Subject key identifier:   12:04:14:FA:2D:1A:B6:80:20:C5:5F:97:63:C8:E9:CD:6B:A9:67:0C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E979EDDBD74421E83E3987BE0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/db835a58-1148-3659-a837-88ab51469050.roa
Signing time:             Sat 16 Jul 2022 12:00:00 +0000
ROA not before:           Sat 16 Jul 2022 12:00:00 +0000
ROA not after:            Sun 21 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.88.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:97:9e:dd:bd:74:42:1e:83:e3:98:7b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 16 12:00:00 2022 GMT
            Not After : Aug 21 04:00:00 2022 GMT
        Subject: CN=97abb83f-9261-4de6-bab5-fe278331ccf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:68:93:d3:41:5e:0b:a0:f4:b7:73:9b:bb:e9:
                    0a:49:f5:cc:3c:16:44:aa:f7:02:0e:a5:34:09:c1:
                    83:97:3d:5b:f0:83:2b:24:73:d2:f5:83:fb:0e:a2:
                    51:ab:6a:b2:77:e8:95:db:99:e5:ad:ef:70:46:d1:
                    7d:6a:88:a2:00:09:a9:b2:49:a7:5b:7f:4a:c6:9a:
                    b1:96:47:7c:33:1e:9f:2c:f2:8b:be:3f:e6:bd:ff:
                    60:a1:ca:07:96:bf:e3:b2:53:14:ef:27:c1:ec:b6:
                    b1:3a:29:bc:98:61:93:5d:dc:d8:58:fb:fa:ba:0f:
                    86:ce:b0:56:96:42:17:55:49:8c:74:f0:fc:e1:b8:
                    c2:e6:9d:1e:b8:cb:3d:b7:c0:64:f2:86:ae:9f:4b:
                    49:2a:57:90:d4:fd:47:a6:7c:55:3c:59:69:19:ed:
                    ad:31:9e:7c:18:86:bf:97:11:b3:2c:ab:81:8b:67:
                    7f:4c:74:b7:67:b9:e0:35:5d:ad:ff:18:0d:74:6b:
                    ca:7a:4e:b0:e6:15:43:67:e4:6c:52:7b:89:6b:10:
                    7a:fd:16:17:ea:5e:48:5f:15:15:98:56:a8:c7:70:
                    0b:4c:7e:fb:22:9e:3e:0b:bf:85:26:84:8d:b2:c5:
                    bc:aa:d9:4d:82:35:56:17:90:9d:77:65:94:27:bb:
                    39:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:04:14:FA:2D:1A:B6:80:20:C5:5F:97:63:C8:E9:CD:6B:A9:67:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/db835a58-1148-3659-a837-88ab51469050.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.88.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:79:46:94:cf:02:67:08:f0:da:4d:90:a1:77:96:d0:9d:6b:
         0a:f6:5f:c9:6a:3b:7d:e0:d5:30:6e:c1:8c:47:3c:43:9c:e0:
         95:b5:f9:3e:d2:6c:46:b9:ab:31:39:fe:1d:ed:62:c1:49:7d:
         1f:51:b7:37:e6:ba:93:9b:4f:66:30:48:5b:8b:e6:8e:22:28:
         ab:a3:d4:67:42:82:b5:8a:07:39:31:ae:98:35:5e:3f:8a:1d:
         dd:45:11:30:f7:04:c2:44:f1:6d:05:91:92:f0:f8:05:00:06:
         fc:8f:b5:e8:ac:d8:ba:04:66:56:53:47:69:38:90:f3:d9:dc:
         f5:b7:99:26:87:38:2a:ef:9b:38:b1:fc:5e:9d:1f:3f:47:68:
         68:eb:16:09:1f:c6:81:a5:cd:83:a1:d8:f6:6e:45:68:46:67:
         e4:a0:0c:c5:eb:ed:fd:68:4c:ac:bf:04:8a:e6:f6:c4:e4:e9:
         27:40:fd:bb:da:8d:b6:e1:8a:43:37:31:01:00:f5:72:6e:60:
         62:60:f8:06:e6:09:a0:25:3d:23:94:fb:8d:39:b2:f9:2f:7a:
         22:0e:be:e2:9a:80:ff:e0:74:9a:d3:7f:8d:ad:2d:d9:24:d2:
         ee:8e:69:40:39:2e:f1:ce:da:9b:91:9a:ea:52:fc:72:f7:cc:
         ec:88:98:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----