Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e637dac3-dac4-3d35-bdb3-9eee3773364c.roa
File:                     e637dac3-dac4-3d35-bdb3-9eee3773364c.roa (raw, json)
Hash identifier:          eDdofIzx0UQBRSZv0OT82lx5UPd8rom8z3LOgzgCBgY=
Subject key identifier:   FF:C3:81:15:A8:71:85:37:41:98:DC:12:BC:FF:10:52:34:00:80:C2
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DAC79A6F23E27E1177F0E97C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e637dac3-dac4-3d35-bdb3-9eee3773364c.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.111.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ac:79:a6:f2:3e:27:e1:17:7f:0e:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=a2799d1f-50db-4f1f-b6d2-6f8d7c958984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:00:4d:d4:c1:eb:a1:e5:c4:1e:44:26:73:29:
                    42:20:c5:a8:5c:0c:f5:d0:0f:ae:0c:41:4d:ee:d2:
                    7b:ba:70:53:6d:72:df:35:06:60:cc:70:a9:f5:62:
                    09:9d:67:94:f5:c8:a2:bf:17:f7:1b:63:5d:f8:72:
                    33:88:93:03:46:04:00:6d:77:de:2d:a4:df:56:07:
                    d9:2c:8f:38:16:30:60:bb:29:fc:48:f2:28:66:1e:
                    b1:cc:a6:66:e2:34:cb:bc:8e:0f:8c:33:01:9f:ab:
                    04:f1:f5:dd:4d:8b:c2:e6:85:34:76:6b:3c:bf:24:
                    e5:ab:08:89:70:e4:a2:d0:d9:7f:03:6d:01:9e:f4:
                    37:92:d3:2b:94:43:3d:3d:35:af:93:ed:07:6f:5d:
                    39:70:6f:66:e0:e7:48:e3:b7:f3:1d:89:f4:ad:5c:
                    1d:1f:8d:b7:9c:62:2a:a3:2d:77:8e:93:c4:c5:60:
                    ff:94:d7:64:23:f1:c0:c4:a4:20:52:d5:f3:7b:43:
                    5b:c3:bd:3f:47:cd:a8:05:8c:55:1a:d0:ed:c6:b4:
                    1c:a6:9f:f8:00:88:b5:2c:2f:02:ed:22:dd:51:1e:
                    79:93:03:d6:ef:46:23:a0:0f:28:08:35:3d:3e:20:
                    c3:07:22:2d:47:e3:d9:ab:6e:a9:39:c4:37:2a:68:
                    1b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C3:81:15:A8:71:85:37:41:98:DC:12:BC:FF:10:52:34:00:80:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e637dac3-dac4-3d35-bdb3-9eee3773364c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.111.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:65:ee:e5:8b:d6:82:f6:df:90:01:1c:de:2d:c8:d3:53:27:
         4b:b6:e2:2a:7e:07:17:b5:df:69:ef:16:c4:2f:7d:b5:a7:f3:
         12:7d:72:a3:e0:92:f7:b7:26:ba:9c:36:1b:48:8e:1b:e2:00:
         e8:35:7c:af:d0:9c:2a:e5:54:81:a0:97:43:78:3b:35:7a:08:
         80:c7:17:d5:24:f0:a8:6b:01:dc:2a:e9:38:48:26:7a:27:84:
         ad:6b:64:6c:e5:05:89:b6:39:b7:fb:dc:89:05:7c:59:8a:3c:
         0f:46:3f:49:08:62:3a:0c:ad:c4:67:c1:c7:56:3c:87:fc:da:
         2e:23:03:ef:e3:db:6b:d7:88:2f:16:49:db:98:dc:50:94:64:
         0a:f5:22:4e:2a:94:26:0b:dc:6d:d0:16:09:af:da:34:d0:ff:
         01:da:17:f3:44:fe:9f:11:b3:e3:c2:7e:29:ae:f4:15:53:02:
         11:c9:c7:56:62:a0:77:07:93:20:ef:d1:7d:1c:bb:bf:76:70:
         c9:95:df:bf:cb:08:49:98:68:fd:cf:ae:11:6b:ab:3d:1e:2e:
         b4:fa:b4:d8:2c:33:02:ee:fb:ad:44:d9:77:76:93:a1:32:d0:
         a1:b2:ab:56:ae:76:14:05:e9:61:ad:80:e7:b7:e7:16:6c:b5:
         75:4b:39:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----