Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b4d13f1c-c52f-38dd-a12c-b0fbf9f6a7e4.roa
File:                     b4d13f1c-c52f-38dd-a12c-b0fbf9f6a7e4.roa (raw, json)
Hash identifier:          XGosJwrMjDSsNWXSGiazRDeWyZEgf2rNNXqme+1Unn8=
Subject key identifier:   ED:90:27:5E:39:7A:18:B5:C6:2D:CF:24:77:69:5F:5D:F7:15:96:68
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FE6D53C8F7015B2C9B66436C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b4d13f1c-c52f-38dd-a12c-b0fbf9f6a7e4.roa
Signing time:             Sun 13 Nov 2022 12:00:00 +0000
ROA not before:           Sun 13 Nov 2022 12:00:00 +0000
ROA not after:            Mon 19 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        40.180.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:e6:d5:3c:8f:70:15:b2:c9:b6:64:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 13 12:00:00 2022 GMT
            Not After : Dec 19 05:00:00 2022 GMT
        Subject: CN=e64d7729-8438-4c4b-a34d-6135c9c713e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fc:8a:15:ce:b4:1a:4e:83:06:87:73:a9:ff:
                    b0:bc:99:e9:d0:ec:12:3a:13:9a:17:b0:b0:17:d6:
                    09:73:dd:07:9d:2f:72:43:d4:c7:8f:f7:34:7c:3c:
                    c8:3b:df:a3:0e:b3:72:d9:d6:f0:e6:1a:70:eb:31:
                    11:b7:d1:2a:1a:ad:5a:04:45:d2:4f:31:65:62:75:
                    d8:41:b1:cc:30:58:69:cd:3e:90:32:fa:4f:f7:9f:
                    1f:ee:47:70:9d:72:da:da:70:71:2f:5a:c8:9e:75:
                    5b:61:8d:a2:14:e7:ff:c4:90:de:9b:7d:83:9a:25:
                    1c:a0:51:7b:e4:05:8c:a7:70:51:4d:69:25:b1:48:
                    01:99:13:13:9a:50:d3:4e:1b:70:f7:36:2f:12:03:
                    32:77:0e:2f:2f:97:02:55:85:90:71:5c:8e:8c:cc:
                    2d:00:97:0e:1b:64:f1:8b:9d:0f:35:ef:8c:af:8c:
                    d2:0d:77:90:c4:ed:ac:4b:fe:74:5d:ee:dc:51:f0:
                    88:1a:52:0d:77:27:bf:8b:95:7e:5c:1d:7d:22:a5:
                    20:2c:73:25:7f:30:60:fe:a9:d1:68:22:87:5b:d7:
                    44:eb:21:06:60:4b:9e:f5:69:6b:ed:87:78:1a:42:
                    a7:f6:bd:97:f1:78:1d:2d:1f:89:2e:e7:61:72:93:
                    07:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:90:27:5E:39:7A:18:B5:C6:2D:CF:24:77:69:5F:5D:F7:15:96:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b4d13f1c-c52f-38dd-a12c-b0fbf9f6a7e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.180.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:72:0d:59:41:9b:08:46:b3:b1:8d:1f:6f:c4:76:c4:62:4b:
         86:ce:c2:5a:35:7d:bd:1c:35:02:28:04:9e:05:fd:2d:a3:f2:
         ad:06:ce:70:ad:a7:59:3c:e7:3f:2e:50:47:f2:12:2f:d9:d3:
         19:ae:19:52:7a:0e:50:97:bc:d0:b1:46:9d:25:86:08:50:d6:
         f3:0e:09:f3:bb:51:6b:ce:42:3b:b9:07:0c:9e:ef:7e:7a:53:
         3b:31:c0:12:9c:cc:3a:6e:dc:59:4f:b1:2f:04:14:98:75:50:
         45:d6:6c:82:58:74:e9:a6:23:13:32:ca:f2:1f:ec:bb:8c:5d:
         0a:7a:ab:73:6d:be:19:4d:d7:0e:15:ee:85:e9:84:8a:ca:2a:
         82:dd:3e:8f:67:89:91:31:68:1c:2c:9d:ed:79:61:9d:37:dd:
         d0:8e:0c:bf:60:d3:6e:0c:17:5e:6f:d1:53:a1:cc:46:9a:ea:
         5e:31:ca:b4:1b:04:5e:c0:80:f3:ea:10:7f:6f:49:b1:4d:56:
         c4:7d:4a:d2:72:2d:60:a2:01:54:84:27:83:a5:d6:2a:a2:89:
         3c:48:14:c0:d8:be:38:f0:35:51:12:77:53:71:67:15:b1:be:
         44:3e:e2:f0:c8:de:12:2a:01:2f:79:da:2d:61:64:02:9e:71:
         f6:bb:8e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----