Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e532467b-978a-3300-b1de-bc6650b5ca5d.roa
File:                     e532467b-978a-3300-b1de-bc6650b5ca5d.roa (raw, json)
Hash identifier:          gkrskp/RmYJjIQLqQzGgDzUPioPYNVq0zZDW0C+gWXw=
Subject key identifier:   1F:AB:C5:72:5A:A0:55:69:53:89:94:A5:43:EC:16:77:94:1B:89:52
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F5B4DF6998E0C5F70E41B0600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e532467b-978a-3300-b1de-bc6650b5ca5d.roa
Signing time:             Sat 24 Sep 2022 12:00:00 +0000
ROA not before:           Sat 24 Sep 2022 12:00:00 +0000
ROA not after:            Sun 30 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.68.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5b:4d:f6:99:8e:0c:5f:70:e4:1b:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 24 12:00:00 2022 GMT
            Not After : Oct 30 04:00:00 2022 GMT
        Subject: CN=1c6b7cd8-c636-469a-a05b-b3f7cb837c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bd:d3:df:8b:03:3d:92:d7:38:35:c9:43:d6:
                    16:f5:ac:a6:8e:9d:bf:19:78:08:53:7c:3f:c1:15:
                    b4:b2:76:7b:e8:3b:a2:46:3b:3d:2b:70:b2:b7:70:
                    34:47:cb:2a:02:31:66:3c:50:bb:e0:86:94:56:88:
                    35:6c:33:72:07:d7:0b:d7:e9:00:df:74:bb:9a:a6:
                    f9:b2:f0:aa:a8:07:ba:26:d1:20:13:8f:1d:2c:d1:
                    7e:db:b0:1f:b9:35:53:0a:fb:7f:a2:34:09:47:f7:
                    76:3c:4e:ca:f4:b2:ae:09:58:65:d8:14:92:6c:09:
                    d4:de:d4:b9:65:ad:4d:42:8c:65:e2:33:04:72:86:
                    26:e0:f9:10:03:5d:c9:9a:ef:1f:a7:72:ab:2f:8f:
                    f9:f3:84:26:83:a8:08:44:e4:e8:ac:34:61:92:7d:
                    d0:38:fc:e8:27:08:08:a9:84:e0:c8:ac:e2:48:be:
                    2b:a9:26:a7:cf:14:8a:54:02:df:07:c8:4e:de:6f:
                    ab:7a:df:b1:af:36:1d:7d:14:e7:32:09:ad:8e:a3:
                    0c:5b:80:01:5b:e2:4d:e0:a9:d7:19:15:dc:59:cd:
                    b6:99:b4:05:02:81:3d:ec:be:66:87:46:56:95:6f:
                    b5:eb:73:7d:2b:03:36:2a:80:c6:e1:35:51:d1:71:
                    18:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AB:C5:72:5A:A0:55:69:53:89:94:A5:43:EC:16:77:94:1B:89:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e532467b-978a-3300-b1de-bc6650b5ca5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.68.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:67:5b:84:dd:3c:fc:ca:f9:8f:f0:60:46:22:a3:0e:1c:69:
         b0:b3:78:37:cb:23:43:4e:27:9d:16:1f:2a:b5:1d:1b:32:3e:
         37:6e:5e:69:e7:31:dc:c9:d2:48:25:76:9b:f2:15:44:c1:c7:
         4e:4a:5a:12:bb:0e:2e:2b:34:82:db:08:28:f8:fe:6e:e8:ce:
         28:99:a9:b8:e9:bb:31:5c:75:23:be:a2:c3:f1:29:13:f4:f6:
         f5:9d:70:7f:aa:05:36:a3:47:6b:df:7c:30:4d:a4:11:9b:89:
         a3:ce:c9:4b:27:3e:20:f7:b7:ca:8b:3f:a7:73:4d:92:01:cd:
         36:ca:0e:5d:52:c9:01:f6:f9:24:3e:f5:d8:b1:f9:bf:7c:d9:
         7f:da:48:c4:70:ea:98:c5:c3:9f:ec:ed:d4:ac:6c:26:83:47:
         ed:e1:7d:cb:4d:10:2b:3d:96:b5:e6:73:df:d7:30:f3:8e:4b:
         e7:8e:48:6b:30:5b:09:6e:46:ae:db:ee:d0:14:29:40:be:19:
         33:4e:37:04:7b:71:cc:1d:ad:66:40:cf:c4:20:2c:51:03:25:
         62:03:e1:37:b4:d0:05:b8:72:36:c9:ce:b7:13:67:a2:c9:93:
         c0:3a:76:26:85:f8:b3:21:7f:50:fc:37:3c:09:ad:c5:33:d8:
         69:5b:e4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----