Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e78dad03-2786-375d-bea6-4725a7fc833a.roa
File:                     e78dad03-2786-375d-bea6-4725a7fc833a.roa (raw, json)
Hash identifier:          XkEhReD9PD4JF0J5IMxqkCkz56ctOaPeKFL0HE2nx8Q=
Subject key identifier:   98:26:14:A2:3B:18:98:DA:6D:02:24:38:DE:BD:74:32:69:D7:DE:A9
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E978FF54A04D39EC68B46E7C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e78dad03-2786-375d-bea6-4725a7fc833a.roa
Signing time:             Sat 16 Jul 2022 12:00:00 +0000
ROA not before:           Sat 16 Jul 2022 12:00:00 +0000
ROA not after:            Sun 21 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.86.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:97:8f:f5:4a:04:d3:9e:c6:8b:46:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 16 12:00:00 2022 GMT
            Not After : Aug 21 04:00:00 2022 GMT
        Subject: CN=b3d263d0-9cdb-48c4-8acc-35a4910dea48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e0:93:97:0d:5d:37:3a:ce:a1:a7:29:66:4b:
                    74:96:ac:f6:27:38:7e:0f:44:3d:08:5b:51:4b:69:
                    1d:3d:36:cc:6b:0d:11:f3:82:3d:d3:5b:89:ac:77:
                    85:21:db:1f:53:c2:60:b9:c7:23:2b:dc:4f:cb:9e:
                    9d:33:f6:9f:fa:a9:75:0b:da:c8:1c:5b:69:05:6b:
                    56:4b:40:f3:5e:39:ca:c3:b5:a4:67:2a:40:85:72:
                    9d:39:ec:81:dc:25:dd:d6:9e:73:4b:95:ef:1a:a8:
                    6d:ee:cc:8e:c2:f4:aa:35:0a:1e:78:c4:e6:21:9a:
                    aa:42:4e:2a:25:5f:a4:17:1f:23:9a:bc:6f:df:8a:
                    01:27:5a:72:58:5b:7b:6c:25:c9:bd:dc:7f:f2:dd:
                    f5:68:0c:b6:81:e2:ef:70:74:d0:a3:7b:72:4b:21:
                    cd:53:f1:b9:83:8d:4b:a3:72:5b:18:1f:9a:89:c8:
                    31:b6:60:89:ca:ef:ec:fe:45:c0:97:8a:8d:c8:d7:
                    f7:79:50:46:6b:4b:6d:af:8a:40:49:39:d2:e3:45:
                    20:45:13:61:d4:b4:4c:43:43:8c:e8:dd:c4:b3:e6:
                    37:e2:58:d8:40:ba:df:45:7f:34:7c:e3:d2:da:5a:
                    25:70:b7:ab:01:43:3c:db:b9:b8:58:aa:8a:aa:db:
                    08:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:26:14:A2:3B:18:98:DA:6D:02:24:38:DE:BD:74:32:69:D7:DE:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e78dad03-2786-375d-bea6-4725a7fc833a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.86.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:a0:87:e5:d9:ff:78:3d:d9:29:cc:1a:41:e2:53:7b:bb:4d:
         3f:7f:7e:9f:b8:14:40:a7:d7:91:b7:fc:1c:01:04:f7:9a:e5:
         91:5c:8b:b6:dc:f2:48:83:87:c8:bf:ad:18:ab:e1:26:16:9e:
         29:1e:c7:35:c1:05:9e:39:ed:1f:74:7a:24:3f:a3:89:4b:f8:
         d6:d2:51:04:7a:e6:fb:48:53:73:b1:0b:1c:c9:5b:09:e6:c9:
         ca:b1:ec:fb:e1:a1:79:33:4e:75:2a:51:80:9a:b9:85:72:71:
         fe:96:e6:5d:c5:a8:5e:4d:ec:d6:1e:b6:67:3b:6a:47:56:b2:
         2b:a3:27:50:3c:7a:dc:b1:d0:f1:12:b4:69:53:b0:88:6d:29:
         f4:c8:0b:ca:9e:90:2c:7b:65:4b:cc:4d:f9:c1:44:f1:62:b6:
         e9:ff:9c:13:46:c2:97:7b:21:a8:cb:31:a5:e6:8c:17:6c:ab:
         03:14:b8:f9:18:a1:5a:9a:ed:70:d1:91:98:81:c8:f6:07:58:
         9e:66:ce:6c:83:22:af:31:c8:87:d7:ac:02:f4:ea:36:30:b8:
         f3:2c:c0:a9:2d:b3:1b:bf:11:27:96:31:c3:34:06:e0:22:55:
         6a:87:15:61:d2:6a:09:eb:7d:2c:06:98:96:dc:08:b0:31:45:
         93:8a:af:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----