Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a9363a18-d6f9-3337-a7ba-43cf6b533bc8.roa
File:                     a9363a18-d6f9-3337-a7ba-43cf6b533bc8.roa (raw, json)
Hash identifier:          WrZ5yR5ni14Gkus7PX3k1T60J9QKVgwQVuzVG3lD9mc=
Subject key identifier:   D5:25:E9:3E:6F:03:17:48:48:5E:D5:7B:76:E2:74:BE:00:85:2C:DF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E4EA88995C35C26CCAC404440
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a9363a18-d6f9-3337-a7ba-43cf6b533bc8.roa
Signing time:             Mon 20 Jun 2022 12:00:00 +0000
ROA not before:           Mon 20 Jun 2022 12:00:00 +0000
ROA not after:            Tue 26 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        40.180.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:4e:a8:89:95:c3:5c:26:cc:ac:40:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 20 12:00:00 2022 GMT
            Not After : Jul 26 04:00:00 2022 GMT
        Subject: CN=a5c4cf4b-56ee-46f5-815c-0217117652f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d9:60:b7:17:0e:1c:89:42:70:f6:68:5a:70:
                    55:07:16:91:6b:05:17:2a:99:27:4c:59:65:20:75:
                    e9:ef:3a:f4:ae:de:29:94:e5:0a:2d:2b:dc:b4:9c:
                    ff:d0:46:5d:25:86:29:11:ab:be:3b:eb:4a:0e:18:
                    ec:5e:b5:69:fa:e1:eb:8c:79:28:96:37:e7:c7:93:
                    5c:64:19:bc:2e:8d:43:0c:f1:c1:36:07:79:34:7a:
                    1e:f5:ae:75:64:b5:9a:33:95:81:e7:86:d1:c0:87:
                    b7:ca:61:56:90:7b:6b:83:cd:86:45:9a:b1:ef:97:
                    04:ef:a5:0a:d1:6d:a8:2e:a8:1c:90:3b:79:50:fa:
                    56:bb:15:18:f9:3b:42:a4:54:6d:27:c9:f0:0e:c6:
                    58:10:17:2e:a9:be:49:c4:67:72:5a:4d:71:de:3b:
                    80:b7:78:26:5f:27:b2:20:d1:da:c4:26:c0:f9:4a:
                    2a:d4:35:61:76:42:8b:b6:df:5d:1b:69:c7:74:fc:
                    16:ee:a7:d2:03:80:1a:33:9c:55:f9:3f:e8:e4:57:
                    5d:0e:cb:87:ff:4f:73:f8:96:1d:62:2f:c9:dc:b5:
                    b7:29:8c:0f:b7:35:e5:93:96:00:13:04:bd:a9:26:
                    6d:b4:d5:8b:cb:3c:1c:b5:3f:a3:b7:e6:fb:b7:67:
                    6b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:25:E9:3E:6F:03:17:48:48:5E:D5:7B:76:E2:74:BE:00:85:2C:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a9363a18-d6f9-3337-a7ba-43cf6b533bc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.180.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:36:85:a5:31:66:91:b5:d9:90:81:c0:a6:e2:43:44:90:db:
         d2:b6:53:e9:ab:4a:dd:f4:e3:20:d9:6a:35:1b:5f:05:92:22:
         ad:c3:45:07:3c:d6:dd:1e:ac:20:cc:08:3b:91:7e:40:46:ac:
         20:d6:72:2f:dd:33:68:76:f2:2a:21:c9:35:36:ec:60:5f:64:
         d4:74:16:ea:c4:33:9e:db:82:ef:e6:23:6b:53:8c:e2:9d:d7:
         26:8e:63:19:d2:44:0a:32:32:ce:8f:32:73:50:10:4c:df:20:
         38:c2:9e:b0:cd:a2:c3:9c:53:b3:4d:10:7b:9e:9a:d8:74:53:
         b7:9c:1d:b1:f7:98:bc:fb:5d:6e:36:63:42:21:72:ea:2b:3e:
         e6:a6:f9:8a:44:e5:e8:1f:e7:c0:b3:c4:ac:94:c9:15:de:34:
         a7:f2:1a:5a:8a:9f:66:26:a9:60:ad:be:98:ca:6b:41:28:ec:
         df:d1:31:6d:b1:89:89:eb:99:81:ae:61:a2:79:f2:59:55:b7:
         ac:5c:34:e9:be:93:01:3e:1a:cf:e3:db:b0:b7:4c:0b:6f:7f:
         07:b7:bd:c2:c3:81:2d:37:4c:86:bc:c9:81:7a:2d:da:35:ba:
         6d:2c:07:14:58:c5:9b:6a:73:e2:94:e4:b4:47:27:a9:83:9f:
         fc:29:b3:f4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5OqImVw1wmzKxAREAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYyMDEyMDAwMFoXDTIyMDcyNjA0MDAwMFowLzEtMCsGA1UEAxMk
YTVjNGNmNGItNTZlZS00NmY1LTgxNWMtMDIxNzExNzY1MmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNlgtxcOHIlCcPZoWnBVBxaRawUXKpknTFll
IHXp7zr0rt4plOUKLSvctJz/0EZdJYYpEau+O+tKDhjsXrVp+uHrjHkoljfnx5Nc
ZBm8Lo1DDPHBNgd5NHoe9a51ZLWaM5WB54bRwIe3ymFWkHtrg82GRZqx75cE76UK
0W2oLqgckDt5UPpWuxUY+TtCpFRtJ8nwDsZYEBcuqb5JxGdyWk1x3juAt3gmXyey
INHaxCbA+Uoq1DVhdkKLtt9dG2nHdPwW7qfSA4AaM5xV+T/o5FddDsuH/09z+JYd
Yi/J3LW3KYwPtzXlk5YAEwS9qSZttNWLyzwctT+jt+b7t2dr0wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNUl6T5vAxdISF7Ve3bidL4AhSzfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYTkzNjNhMTgtZDZmOS0z
MzM3LWE3YmEtNDNjZjZiNTMzYmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKLQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAfDaFpTFmkbXZkIHApuJDRJDb0rZT6atK3fTjINlqNRtfBZIircNFBzzW
3R6sIMwIO5F+QEasINZyL90zaHbyKiHJNTbsYF9k1HQW6sQzntuC7+Yja1OM4p3X
Jo5jGdJECjIyzo8yc1AQTN8gOMKesM2iw5xTs00Qe56a2HRTt5wdsfeYvPtdbjZj
QiFy6is+5qb5ikTl6B/nwLPErJTJFd40p/IaWoqfZiapYK2+mMprQSjs39ExbbGJ
ieuZga5honnyWVW3rFw06b6TAT4az+PbsLdMC29/B7e9wsOBLTdMhrzJgXot2jW6
bSwHFFjFm2pz4pTktEcnqYOf/Cmz9A==
-----END CERTIFICATE-----