Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e9ad6825-2f02-3722-be80-a091c040c364.roa
File:                     e9ad6825-2f02-3722-be80-a091c040c364.roa (raw, json)
Hash identifier:          DrVsRd1HHSVvi6eu1GdlMI43kRVJN174VyFd5LqSWoU=
Subject key identifier:   71:04:E6:25:90:91:7D:C6:7E:0E:DC:6A:60:D2:E2:7B:08:CA:84:A7
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583C962DE696B0D6E10C7F833280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e9ad6825-2f02-3722-be80-a091c040c364.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        18.236.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:96:2d:e6:96:b0:d6:e1:0c:7f:83:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=0c795369-a9a0-4efc-92d0-9ceb43416e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c3:52:b5:0f:f8:57:24:8b:4f:92:58:14:ad:
                    fd:ed:f6:a8:cc:0e:f1:b4:8a:b2:67:a1:a6:1b:6b:
                    7b:0b:cd:30:39:09:79:c9:c6:85:06:ff:78:56:8a:
                    14:ef:56:e1:21:47:93:18:65:45:db:00:a7:59:10:
                    f7:f3:77:2b:e0:88:92:cd:8a:4c:b7:c4:76:b0:d4:
                    37:ed:8f:cd:5a:cf:ae:5d:a4:c2:41:f0:ec:b6:e6:
                    fc:b3:0e:96:10:b4:c0:b8:fd:b1:a2:fa:2d:30:5b:
                    09:50:2a:83:88:c8:60:fc:a0:1a:81:4a:44:48:c1:
                    ef:36:95:e7:b6:c3:17:f7:4b:f6:c2:05:20:0f:04:
                    b6:37:b6:d2:cc:94:74:b5:28:25:bd:4a:e2:a3:72:
                    f4:68:4e:b3:60:59:92:5f:69:fa:84:8a:a5:77:dd:
                    f7:76:11:91:e4:9f:bb:24:39:ff:52:0e:c4:6c:67:
                    b1:6b:a3:14:48:d0:72:7c:25:33:18:f0:d4:44:d1:
                    ed:71:1b:69:ec:39:e7:04:ca:f5:9c:e4:4e:02:81:
                    0e:77:31:f0:df:8e:8e:6b:0a:45:34:29:03:20:52:
                    50:57:f0:0b:1a:cc:29:8c:4e:10:b7:fb:9b:ee:52:
                    18:c7:cd:44:f5:7c:76:83:bc:d5:4f:35:59:56:80:
                    3b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:04:E6:25:90:91:7D:C6:7E:0E:DC:6A:60:D2:E2:7B:08:CA:84:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e9ad6825-2f02-3722-be80-a091c040c364.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.236.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:f4:c4:98:ff:c2:d9:e1:3c:75:51:42:e9:6a:47:75:ad:7a:
         7d:68:c6:c8:f1:16:0c:44:de:5d:e6:91:f4:8d:57:63:dc:bf:
         84:03:37:44:2d:96:8f:47:6e:86:1d:51:20:94:c1:35:e0:33:
         dd:22:2f:2e:b6:54:c4:bf:db:8d:97:4e:b9:ab:54:b0:43:38:
         fc:29:51:e8:5a:92:af:8e:95:c4:f6:4e:86:f6:3f:68:f7:f2:
         e5:fc:fb:38:35:4a:86:51:8c:07:91:96:e1:e0:53:67:6e:60:
         5e:87:cf:19:56:ba:a9:19:94:96:ed:9e:24:93:eb:5d:1c:39:
         24:df:90:a1:f1:fe:4c:06:58:4d:fb:7c:23:ec:25:5d:3a:da:
         d8:dd:ea:86:68:55:5a:c3:11:a8:73:3f:92:e9:44:59:05:7e:
         c0:5e:d5:34:4a:8a:e9:50:f1:f1:ab:3f:6e:20:84:66:3d:9d:
         1f:3b:e2:d0:74:b8:35:43:cf:5f:51:7a:e3:f2:99:e7:66:b2:
         65:2a:a8:f2:61:a2:6b:2e:6e:cd:6b:cd:37:fc:56:ae:af:9b:
         80:a8:8a:8f:ab:37:cb:07:ae:a2:c7:35:a9:ee:7f:7e:15:53:
         3e:11:b2:a8:41:5d:7d:6b:88:bd:54:6d:6a:f7:74:cd:ad:e4:
         12:82:02:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----