Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/638b3e1b-c44c-371e-a5ec-f09014d45c0f.roa
File:                     638b3e1b-c44c-371e-a5ec-f09014d45c0f.roa (raw, json)
Hash identifier:          B8VNZxZPeKzoHhzkD+wRa1jLXM7wEPCQMjOVOuZtxxY=
Subject key identifier:   79:52:D6:EB:C0:E8:2C:99:61:F4:16:52:09:27:6A:51:80:F2:FA:C9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858404B98CD8750D518B442622600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/638b3e1b-c44c-371e-a5ec-f09014d45c0f.roa
Signing time:             Mon 19 Dec 2022 16:54:08 +0000
ROA not before:           Mon 19 Dec 2022 16:54:08 +0000
ROA not after:            Tue 24 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        40.168.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:4b:98:cd:87:50:d5:18:b4:42:62:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 19 16:54:08 2022 GMT
            Not After : Jan 24 05:00:00 2023 GMT
        Subject: CN=354e4072-2f46-423c-95d0-3c833f770d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:10:8f:c5:99:5c:39:51:49:ae:0f:dc:ac:3b:
                    3c:2f:63:6e:21:49:b7:89:8d:9e:59:fa:c2:b3:64:
                    70:47:81:7c:6b:2e:01:99:31:c5:df:3c:8b:72:47:
                    c9:35:4e:84:2a:98:0c:51:95:18:fb:1d:7e:47:0a:
                    3c:4e:f0:6a:2e:84:1c:9e:3e:57:df:50:b1:df:fb:
                    22:c3:ad:02:21:c5:17:76:ce:cf:6a:3e:88:c6:21:
                    7c:06:1a:2d:e3:65:60:e2:b7:98:54:97:e8:52:ca:
                    e6:3b:8e:b4:11:a7:d8:56:64:b4:2f:29:c0:e0:44:
                    98:98:04:9a:93:53:7a:a2:38:7c:0c:b7:bb:84:cd:
                    68:23:3c:a0:d6:af:c6:72:4d:da:a3:da:e7:26:d0:
                    d1:d0:c7:70:5e:bf:7e:d6:4f:98:67:6f:bf:db:da:
                    fd:60:7e:f4:01:3e:46:48:1e:50:a0:86:85:cb:7d:
                    ef:1f:9b:0f:10:fc:21:53:c0:5d:57:ed:90:e1:38:
                    82:c0:76:35:25:b5:56:a3:7a:4c:91:0a:22:ab:ff:
                    45:8d:b7:6a:03:bb:74:3d:3b:35:2a:7c:b2:45:2e:
                    a0:74:7b:f1:d4:ac:fe:83:80:73:b7:5b:6f:9d:5f:
                    e4:85:b8:30:9d:ed:58:e7:aa:8f:da:d7:d8:00:f9:
                    91:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:52:D6:EB:C0:E8:2C:99:61:F4:16:52:09:27:6A:51:80:F2:FA:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/638b3e1b-c44c-371e-a5ec-f09014d45c0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.168.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:c3:9e:8c:3c:ad:be:94:b5:b1:23:a4:be:eb:57:04:a4:c3:
         55:d8:4a:b3:2a:e1:f0:f1:01:38:db:7e:2b:49:9e:b3:96:d6:
         c1:8b:e9:55:e9:25:98:43:8d:3f:90:fd:70:0f:19:af:38:6d:
         1a:93:81:8e:a2:7c:83:d4:76:2a:02:2e:18:f5:00:a1:d3:2a:
         10:77:6b:66:5b:bb:32:df:6b:82:a4:c6:f7:98:06:cb:c8:20:
         68:0c:9b:46:e6:dc:d1:e7:e6:d3:fc:95:b1:b6:ca:41:d1:27:
         09:97:db:15:de:51:b9:57:af:01:eb:cb:54:93:30:7a:6f:cf:
         18:75:05:04:f5:90:ed:ce:2a:40:15:8f:f9:88:09:0d:c5:11:
         e2:29:64:6b:ad:90:9d:7f:08:3a:1d:36:7e:5c:27:9e:99:ba:
         b8:fa:77:42:72:29:e2:69:e1:ae:d5:97:78:36:4d:fe:62:de:
         60:25:d3:f3:11:41:5a:75:ae:ab:cb:05:be:d6:75:d7:2b:6d:
         3b:cb:27:6f:31:76:52:06:f8:0f:1b:92:3b:74:0c:a9:e2:bd:
         cf:07:ad:2c:ab:a2:24:c3:d9:f8:4e:cc:09:45:74:a7:f4:4b:
         4a:d4:56:c5:1a:99:d0:ac:48:ce:80:98:ed:34:35:f7:bb:68:
         e5:24:ed:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----