Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e8a6e5c7-2892-3f24-b64e-ecec8804f98d.roa
File:                     e8a6e5c7-2892-3f24-b64e-ecec8804f98d.roa (raw, json)
Hash identifier:          52pMtV+6Rvt5VER052Gtfp/BhU7mz1EcBJQnb/pY+CY=
Subject key identifier:   BC:E5:99:89:94:D0:8C:1F:C0:6C:8D:49:91:EB:F6:D0:0C:51:2B:48
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D32401C1002ED894297381A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e8a6e5c7-2892-3f24-b64e-ecec8804f98d.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.35.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:32:40:1c:10:02:ed:89:42:97:38:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=7ba00d06-3eda-44df-a133-052215cc495c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:32:07:cf:b9:8d:92:63:c1:17:f7:a6:5f:29:
                    98:da:db:9c:69:c2:c7:8b:8e:97:8e:07:c5:13:3e:
                    3b:83:69:03:28:f9:3a:ac:a7:2f:da:f0:c6:c6:c0:
                    4c:b6:da:c5:7f:16:b0:a3:a7:0a:2c:db:a2:dc:18:
                    26:55:55:ad:93:ce:3e:cd:c0:bb:4d:6d:28:f9:98:
                    c0:4e:d4:07:b0:8e:79:b7:f8:50:02:23:43:31:91:
                    a5:4a:6b:dc:90:e3:2b:fe:78:99:a5:e8:b7:b4:22:
                    29:f6:8c:12:45:65:ce:85:8f:17:52:a1:f1:24:e0:
                    06:0e:0a:ff:db:37:74:2d:18:aa:93:8c:b0:af:f8:
                    1d:aa:35:8e:06:27:83:a8:a3:5c:61:0a:b9:41:79:
                    59:1c:fe:90:80:af:30:8e:8c:78:4f:d5:1a:f1:e0:
                    3a:87:64:c7:59:ec:6c:7b:f6:63:59:e8:71:78:fa:
                    1c:70:47:15:da:44:36:16:3b:6f:e0:39:9a:2c:12:
                    24:1b:d2:ef:63:b0:44:2d:33:fb:0c:90:07:e5:dd:
                    7e:40:66:de:3e:c5:bd:62:7f:6c:86:8a:17:09:96:
                    3b:52:6c:a9:94:d4:09:ae:87:6a:55:82:17:d0:9f:
                    39:6a:da:57:41:59:1a:71:96:64:84:45:26:e9:18:
                    1e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E5:99:89:94:D0:8C:1F:C0:6C:8D:49:91:EB:F6:D0:0C:51:2B:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e8a6e5c7-2892-3f24-b64e-ecec8804f98d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.35.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:42:7c:8d:19:2d:22:68:22:66:f7:a3:16:f1:b3:b0:30:4f:
         ec:97:59:d0:fa:56:d3:f5:58:47:31:cc:f0:eb:96:cd:2a:ff:
         d6:87:bb:08:84:44:1f:ec:f3:9e:ed:2a:ff:00:5f:50:f6:25:
         51:85:1a:4f:16:e7:a7:97:e7:fa:5e:4c:fc:b0:b9:32:c6:04:
         e8:f8:b2:79:af:45:b3:72:e9:cb:73:bd:32:4d:79:2d:c1:e2:
         e9:b3:d9:c7:bc:81:45:3b:21:52:88:62:ca:89:f4:76:7a:d6:
         ce:8c:e3:5b:f8:64:ca:aa:f0:de:2e:c7:19:48:f4:95:8d:01:
         2e:ee:e8:26:ed:b0:96:6a:78:da:5a:b2:33:d8:74:64:a3:33:
         5b:7e:13:e2:40:03:d8:96:56:2b:7d:63:21:bc:8c:a4:4b:86:
         69:f1:4c:92:71:76:cd:d3:70:00:fc:c8:9e:8c:6a:37:10:ee:
         49:e8:8e:3c:33:96:3d:47:f4:1e:c2:32:5f:b6:ba:cb:cd:a0:
         40:47:3d:23:40:49:0c:d9:82:cf:45:7f:a3:54:42:69:d6:55:
         92:bf:fb:dc:8e:ca:3b:89:83:80:42:76:ad:6d:44:46:38:3d:
         83:05:26:f3:f5:a1:24:50:ed:12:26:af:b8:d2:f2:62:0e:c0:
         22:3b:c0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----