Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bd40b8d4-3173-4741-b603-91d1e998969e/814ebbb9-f41d-379d-8640-d74759f88fe6.roa
File:                     814ebbb9-f41d-379d-8640-d74759f88fe6.roa (raw, json)
Hash identifier:          T/UPXourHEDWzm+lnKESNWRGUZluovJuBmMzeFA9jg8=
Subject key identifier:   AD:73:E8:AE:C9:8F:7B:2E:A2:04:35:93:C8:22:1E:B7:B9:0E:CC:4F
Certificate issuer:       /CN=bd40b8d4-3173-4741-b603-91d1e998969e
Certificate serial:       010D0C9F4328576D51CC73C042CFC14FB8D4244F
Authority key identifier: 81:02:BF:97:A6:20:73:24:2E:CB:C3:8A:7C:54:DF:69:E8:04:13:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bd40b8d4-3173-4741-b603-91d1e998969e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bd40b8d4-3173-4741-b603-91d1e998969e/814ebbb9-f41d-379d-8640-d74759f88fe6.roa
Signing time:             Thu 10 Sep 2015 19:55:54 +0000
ROA not before:           Thu 10 Sep 2015 04:00:00 +0000
ROA not after:            Wed 10 Sep 2025 04:00:00 +0000
asID:                     394226
IP address blocks:        192.206.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:4f:b8:d4:24:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd40b8d4-3173-4741-b603-91d1e998969e
        Validity
            Not Before: Sep 10 04:00:00 2015 GMT
            Not After : Sep 10 04:00:00 2025 GMT
        Subject: CN=243db80e-e35d-4ea2-ac6a-cd5b675a0a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:03:37:f9:11:2a:7f:2a:6d:9e:38:b4:ac:e0:
                    2e:5a:ba:78:51:74:ff:91:25:b8:94:ac:ea:b9:8f:
                    6d:4f:c1:56:47:da:57:95:cd:6c:da:7e:bd:28:99:
                    17:3a:f3:30:46:3b:f0:f7:05:a0:69:0b:69:5f:c1:
                    1d:d3:8e:65:9c:1f:13:be:d4:f1:fa:0b:80:14:68:
                    db:1f:4a:9c:eb:0f:08:af:75:7e:e6:23:40:ed:be:
                    20:3f:1e:15:b7:74:de:cf:2c:ce:1f:ed:7d:14:6a:
                    6f:ce:47:f6:69:46:a8:e4:63:20:b0:94:30:95:af:
                    b1:93:b8:af:82:26:af:3a:d7:c5:1f:7b:42:f3:5a:
                    c5:c9:15:f0:b7:dd:09:82:27:0d:71:52:77:11:36:
                    08:6c:50:fc:c2:1a:f0:31:ce:02:6a:0e:6d:a7:66:
                    b7:08:2a:6c:96:c4:cf:6b:f4:d5:d1:44:b2:e8:e8:
                    ef:a4:66:85:01:e9:41:b4:ba:11:6e:1b:b5:11:ce:
                    74:96:0e:29:ce:93:1a:34:ae:26:e1:57:ac:82:4a:
                    5b:9d:50:3d:c7:a8:f8:0b:f5:cb:7e:03:f6:eb:11:
                    ac:cf:1f:92:ae:f4:21:2d:51:e5:be:57:8f:e2:99:
                    4f:cd:7e:cc:55:a7:19:ff:f6:f5:81:3b:4e:b7:0e:
                    6c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:73:E8:AE:C9:8F:7B:2E:A2:04:35:93:C8:22:1E:B7:B9:0E:CC:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bd40b8d4-3173-4741-b603-91d1e998969e/814ebbb9-f41d-379d-8640-d74759f88fe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bd40b8d4-3173-4741-b603-91d1e998969e/bd40b8d4-3173-4741-b603-91d1e998969e.crl

            X509v3 Authority Key Identifier:
                keyid:81:02:BF:97:A6:20:73:24:2E:CB:C3:8A:7C:54:DF:69:E8:04:13:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bd40b8d4-3173-4741-b603-91d1e998969e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:be:20:37:8f:d3:40:0d:87:4f:aa:06:0f:56:70:da:c3:d0:
         61:f3:51:8e:5c:59:fa:b7:3a:be:e1:b2:6e:40:f1:5d:f2:51:
         9f:95:a7:0b:ea:7a:a0:5a:70:08:7a:ac:e9:0c:40:dc:ef:38:
         c0:72:6e:86:a7:2a:fb:9f:1d:2a:89:90:92:f3:6f:5d:3f:72:
         10:97:55:be:87:5f:16:be:16:71:7a:d3:34:87:a6:33:5b:e9:
         5d:e5:10:57:91:07:9c:e4:f4:df:e5:9f:ac:18:87:92:be:fc:
         f5:84:7f:ec:92:37:62:bd:a8:8d:ef:12:26:58:a7:95:00:7b:
         dc:c7:a7:0d:6a:26:52:34:a0:75:e2:aa:fa:a3:76:9d:8a:b8:
         6a:34:51:24:1f:ea:73:93:1c:4a:42:0c:1d:ee:5d:1e:a4:7d:
         21:b3:32:31:28:e9:d9:0f:de:41:40:91:45:c3:ac:9b:36:cb:
         3c:b0:d5:f3:33:44:e9:d2:21:32:ae:0c:fb:37:29:19:10:0e:
         a8:19:5d:9e:93:b2:eb:7e:9c:28:a3:05:a5:9a:36:02:fa:fd:
         7b:14:1c:3d:26:a0:c6:5c:10:a4:7c:da:15:1d:12:96:a5:eb:
         82:7e:85:64:93:24:b4:1b:6f:cd:bd:33:b6:ba:20:d7:a4:7c:
         8a:0b:f8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----