Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e430d672-e931-34aa-9b9c-83a1ad2463ee.roa
File:                     e430d672-e931-34aa-9b9c-83a1ad2463ee.roa (raw, json)
Hash identifier:          9HBV9cdq6++gII3c1vreJE4/iTwa/MZG5+syMn+Bp20=
Subject key identifier:   34:35:FC:4A:42:A6:42:A8:4F:67:D1:AF:22:7B:90:3F:9A:F3:28:0E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DA5613CD121BA77D32C1CDFC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e430d672-e931-34aa-9b9c-83a1ad2463ee.roa
Signing time:             Wed 20 Apr 2022 12:00:00 +0000
ROA not before:           Wed 20 Apr 2022 12:00:00 +0000
ROA not after:            Thu 26 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        40.165.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a5:61:3c:d1:21:ba:77:d3:2c:1c:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 20 12:00:00 2022 GMT
            Not After : May 26 04:00:00 2022 GMT
        Subject: CN=d36d23af-fcae-43b0-b675-c85152aeef3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c8:db:7b:ae:88:6a:bc:38:b3:d4:51:dc:53:
                    16:27:db:93:13:31:fc:4c:9d:54:18:0d:51:38:19:
                    4d:56:51:99:c6:d6:7e:22:6a:a8:49:59:4b:79:2b:
                    95:d6:71:ac:95:b6:94:89:0f:6d:8a:7e:c6:58:3a:
                    05:63:c8:8c:0e:d2:37:5d:29:0f:ed:05:85:a9:4d:
                    a1:fa:74:3b:79:d3:e4:c3:21:1c:cd:8b:4a:bc:ec:
                    6d:83:fe:b0:4c:88:6d:79:1d:dc:fe:a6:e4:89:71:
                    f9:32:82:a1:33:15:32:c8:10:8d:8d:ed:2d:20:4c:
                    00:9f:dd:80:eb:74:6b:8f:b4:fc:e2:fa:8d:55:fa:
                    35:f6:b2:da:3f:96:2e:56:67:46:d1:2d:06:a1:e8:
                    8c:c3:3d:23:e8:31:45:dc:36:bd:64:2a:b0:ec:31:
                    9d:11:50:4e:52:2f:49:b7:c0:c2:b2:75:8c:fb:5e:
                    07:0b:ae:83:1a:93:e4:f1:de:b6:3c:db:79:1c:31:
                    3d:9c:f1:92:75:62:73:e9:a4:32:86:70:f0:7f:17:
                    99:c0:dc:ea:15:8d:df:4c:4e:a2:81:9d:bc:c4:3a:
                    c0:b6:3d:73:14:80:b4:94:84:8a:5c:59:3b:0b:b2:
                    11:ee:f4:1d:f7:d3:cc:e5:13:5c:61:d6:e3:0b:39:
                    ec:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:35:FC:4A:42:A6:42:A8:4F:67:D1:AF:22:7B:90:3F:9A:F3:28:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e430d672-e931-34aa-9b9c-83a1ad2463ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.165.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:3c:10:fe:5f:ca:b2:dd:4b:c1:2a:dd:a4:56:ed:66:b8:bc:
         84:f2:67:6d:93:c6:0c:29:92:96:11:3d:ea:fb:3f:49:46:17:
         80:09:c1:e6:1f:91:f0:a9:40:6b:43:92:c6:96:63:58:40:42:
         06:7a:3a:21:c4:d1:1c:9b:bf:38:83:ee:ef:27:a7:4d:ef:33:
         70:50:d5:29:e0:49:92:b6:e9:60:af:9d:45:19:dd:16:b7:ec:
         ae:de:5d:be:62:f0:d0:7a:9f:6b:44:28:be:1e:fb:cd:70:0d:
         bc:d9:ef:20:4e:56:59:4a:da:7c:00:24:22:2a:20:63:77:5b:
         94:a8:6d:76:0b:0a:99:06:ab:63:94:58:9f:dd:95:32:f7:04:
         1d:d8:8d:d3:a9:9b:81:11:fa:9d:b1:28:46:7a:8d:a9:97:72:
         57:c9:e6:e0:cf:09:0c:a7:83:ac:1c:d9:64:0f:23:8d:62:b8:
         8f:72:45:8f:d1:1b:0f:dc:f4:0f:20:cb:28:5e:bf:f3:94:07:
         99:d6:2d:a8:b6:2f:4d:32:d5:6c:72:30:f3:4b:b5:78:0a:13:
         ba:09:51:5f:f5:c8:36:9b:7c:d1:e1:c1:63:ed:08:11:a1:52:
         4e:bd:92:b9:9b:f8:13:bd:47:10:7f:d1:b7:26:d6:5f:b4:5e:
         b4:ce:d6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----