Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb4b4e2b-f025-340e-9848-5bb086e467d6.roa
File:                     cb4b4e2b-f025-340e-9848-5bb086e467d6.roa (raw, json)
Hash identifier:          rrwll19M+vlVxZ1lsoW0HTo5erRmIvBiIk6uGdP2dSU=
Subject key identifier:   AB:A3:4F:25:3A:F4:D4:2C:A1:6C:F7:04:9D:A6:52:35:32:88:DA:91
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584064C7EA1F564AA2C18DB1AC40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb4b4e2b-f025-340e-9848-5bb086e467d6.roa
Signing time:             Wed 28 Dec 2022 12:00:00 +0000
ROA not before:           Wed 28 Dec 2022 12:00:00 +0000
ROA not after:            Thu 02 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        40.166.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:64:c7:ea:1f:56:4a:a2:c1:8d:b1:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 28 12:00:00 2022 GMT
            Not After : Feb  2 05:00:00 2023 GMT
        Subject: CN=6ed246ed-7843-4aa9-a6a5-44846f8874a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c2:8f:ed:2b:17:14:d0:a1:2e:66:7b:0f:cb:
                    0c:7b:4a:83:5b:6e:46:47:67:98:ea:7d:5a:90:dc:
                    7f:cf:02:10:79:7d:67:e4:44:1b:e0:d3:61:f2:4a:
                    08:ed:d1:8b:9b:b7:df:98:3d:77:69:33:58:23:c7:
                    90:67:3a:3b:ea:d1:34:0f:b8:03:fe:3c:4c:8a:1c:
                    79:63:10:5d:fd:a4:3b:00:98:f3:11:5a:e1:5e:43:
                    41:c8:b7:49:47:32:70:3b:ad:e6:9a:c0:35:a5:ac:
                    d8:64:77:0a:e7:0c:b5:0a:e8:6d:de:be:d0:e6:d5:
                    89:73:a3:89:50:5d:db:8d:b4:46:8d:d1:07:ba:d4:
                    0a:c2:21:c9:05:7d:3f:3b:9b:4f:43:8f:64:29:32:
                    77:02:38:48:38:7e:85:ac:e7:78:c5:84:f3:69:69:
                    e3:ca:7a:e7:73:1e:57:f1:b3:66:76:6f:02:2e:ba:
                    73:70:d1:a7:ac:db:48:25:2a:a6:00:bd:1d:f0:f6:
                    3b:3b:0f:41:01:19:cf:08:ee:59:7d:5a:b9:30:50:
                    5c:af:a8:94:dc:da:e5:f0:56:18:53:4d:bb:4c:91:
                    6f:c4:f9:23:b7:30:f5:25:77:00:71:5b:11:ce:e4:
                    53:60:32:00:c2:62:44:9d:4d:15:96:6e:b8:8d:09:
                    73:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A3:4F:25:3A:F4:D4:2C:A1:6C:F7:04:9D:A6:52:35:32:88:DA:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb4b4e2b-f025-340e-9848-5bb086e467d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.166.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:03:21:20:23:4a:27:d2:b4:8f:4f:00:52:19:7c:97:79:fb:
         7b:f6:e1:8d:75:c5:49:21:c6:2a:e5:a8:88:92:fb:fb:27:5a:
         44:e8:df:3b:9b:b8:9c:c7:96:9c:64:69:de:d5:44:96:e2:18:
         11:66:fb:70:39:c1:a0:86:2e:22:02:10:a9:a0:5a:08:98:d8:
         32:99:52:07:d1:c1:e3:74:2a:d8:c7:65:9f:b8:2b:d1:12:3d:
         3f:44:b0:12:bd:a5:d3:cd:5a:f9:6e:97:10:7e:60:ca:07:32:
         3b:b5:d7:fd:2b:c3:14:ac:a0:b9:a5:f0:00:3f:5d:e7:f3:13:
         2a:d6:37:1d:21:bc:f2:78:70:c9:40:52:31:9d:c7:c9:e7:30:
         46:8b:97:f7:14:8e:d5:fa:06:5a:0e:81:e6:b1:fa:07:6f:98:
         bd:a6:1b:32:2d:99:55:c1:a8:d0:b6:55:e1:82:cd:6f:5d:c5:
         a5:ac:33:71:97:39:50:19:75:a8:f4:4f:ff:df:a9:b9:0a:74:
         b8:98:34:82:00:de:1b:b4:8b:16:e1:90:ac:e0:e6:04:ac:76:
         7c:1c:eb:7d:4f:bb:c9:a2:a4:5f:90:34:e3:93:2f:fe:0b:6f:
         41:a2:9b:d6:0b:9e:32:9a:b3:9c:cf:34:36:ae:0d:d9:fe:1a:
         11:73:90:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----