Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f18b1416-2ee3-3374-b4a1-f141bc43232d.roa
File:                     f18b1416-2ee3-3374-b4a1-f141bc43232d.roa (raw, json)
Hash identifier:          qg5Xrx/84ja7jKrER+ca/uioJIlxCbJxClqwLLXH2yI=
Subject key identifier:   DB:77:3C:00:3B:28:42:8C:01:3A:98:8A:07:77:8A:26:23:18:9D:C2
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858403534882DEFA30C51E4513E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f18b1416-2ee3-3374-b4a1-f141bc43232d.roa
Signing time:             Sun 11 Dec 2022 12:00:00 +0000
ROA not before:           Sun 11 Dec 2022 12:00:00 +0000
ROA not after:            Mon 16 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        40.180.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:35:34:88:2d:ef:a3:0c:51:e4:51:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 11 12:00:00 2022 GMT
            Not After : Jan 16 05:00:00 2023 GMT
        Subject: CN=e1763692-8594-4d08-a914-36db6cff3164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9c:2c:1b:41:d3:41:5d:75:24:d1:49:b6:74:
                    7e:ec:bf:2f:cf:07:6d:df:71:1e:43:7d:a0:f0:cb:
                    38:16:4a:b4:30:d7:4c:63:46:b0:6e:d4:53:9c:a4:
                    7c:28:05:af:aa:ab:ad:ab:2b:c4:ba:42:12:eb:c8:
                    ad:6d:79:e7:a7:20:d4:b2:66:3a:d4:80:97:65:b1:
                    bc:1e:e5:e8:fd:ad:9b:99:ab:1f:d7:9b:59:44:40:
                    4b:7e:15:46:ff:34:16:af:db:52:ca:10:98:d8:55:
                    4c:c8:69:79:4d:de:e8:1d:5e:90:00:88:1c:cd:32:
                    65:1c:61:71:2b:cc:70:d4:57:55:16:d4:fe:f1:66:
                    f4:ed:26:e3:e7:41:62:22:bd:fc:d1:3b:44:00:9b:
                    3c:cb:f3:a2:77:ce:08:97:30:de:79:3d:0d:96:0c:
                    44:bb:b3:e1:fb:ef:de:69:c1:60:d9:ab:35:3d:11:
                    de:0e:9b:5c:c1:03:ef:5b:98:74:0d:e0:5c:0f:b8:
                    f0:f5:72:c6:91:41:79:24:78:fb:59:12:60:da:07:
                    c3:65:8a:df:7e:51:6e:ef:29:da:a9:e9:5b:77:90:
                    91:1b:5e:95:d7:69:b9:81:b7:cc:96:28:25:58:b1:
                    f2:fc:de:21:d6:af:8b:b4:e5:ec:59:8e:51:75:11:
                    9a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:77:3C:00:3B:28:42:8C:01:3A:98:8A:07:77:8A:26:23:18:9D:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f18b1416-2ee3-3374-b4a1-f141bc43232d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.180.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:f0:90:df:a7:b7:70:2d:97:c7:f0:35:40:12:ad:9a:0d:9b:
         70:13:0f:dc:84:73:19:52:71:83:19:05:e5:e0:8e:ac:0b:49:
         1a:44:dc:f7:18:fe:3c:95:de:3a:58:4c:0f:09:39:15:bf:03:
         db:b6:c6:d5:8e:9b:32:e8:c7:97:8b:07:57:81:aa:be:31:c3:
         bd:f5:7c:14:93:58:a0:f9:9d:59:9d:fe:bb:d9:61:6b:c9:3e:
         de:27:09:db:d0:dc:c2:61:b2:36:7c:44:58:ed:3a:62:0e:ee:
         17:9f:a3:51:8f:4f:86:5f:ff:f3:cd:a1:94:47:20:38:58:36:
         ec:5b:f5:fe:e5:cd:b4:a4:58:29:ea:a0:27:f8:7e:59:fc:fd:
         87:c3:2c:fc:b4:98:3b:63:2c:99:f6:c2:3a:81:58:43:ea:a6:
         27:72:c4:3c:ab:0e:31:79:13:b6:a0:d9:ea:cb:cc:f1:38:0e:
         60:b8:d9:e1:af:58:96:dc:72:d6:86:53:25:97:56:57:32:91:
         ac:e0:0d:3d:22:4a:9e:5c:92:af:5b:ee:75:8b:91:d7:d8:54:
         58:a3:07:90:9e:ab:28:bf:2a:7e:c4:d0:a9:74:dd:85:ba:88:
         38:5a:08:c6:a2:b6:6c:44:8c:83:bd:ac:ca:1e:af:b5:cb:d5:
         09:f1:03:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----