Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad/4e19e90a-02f5-34b5-b961-206d0f1b72a2.roa
File:                     4e19e90a-02f5-34b5-b961-206d0f1b72a2.roa (raw, json)
Hash identifier:          ML8yD/LoEHTpndygbsq2m6jGtRwsse4sx3COZbBLpiE=
Subject key identifier:   FD:72:48:7A:70:7D:2A:8C:E9:66:97:1E:F9:B1:31:CE:36:64:4C:A4
Certificate issuer:       /CN=53e1e100-f122-416c-8a32-e10c835a78ad
Certificate serial:       010D0C9F4328576D51CC73C042CFC17407189113
Authority key identifier: 9E:F4:3E:72:1D:5F:5A:FA:02:81:C2:75:34:75:40:1C:CD:C3:DE:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad/4e19e90a-02f5-34b5-b961-206d0f1b72a2.roa
Signing time:             Mon 20 Jul 2020 04:00:00 +0000
ROA not before:           Mon 20 Jul 2020 04:00:00 +0000
ROA not after:            Sat 31 Dec 2022 05:00:00 +0000
asID:                     12083
IP address blocks:        66.216.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:74:07:18:91:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e1e100-f122-416c-8a32-e10c835a78ad
        Validity
            Not Before: Jul 20 04:00:00 2020 GMT
            Not After : Dec 31 05:00:00 2022 GMT
        Subject: CN=a9ec641b-9098-43ef-a59d-7c72943d7f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:db:02:77:8a:04:65:64:7e:b3:77:43:a3:cd:
                    7f:4a:e0:87:2f:a1:a3:4d:95:24:39:96:5d:24:ff:
                    ed:bb:e4:f9:63:92:48:ee:47:53:2f:a5:40:bf:04:
                    ef:e4:92:7c:ff:a3:e1:3a:5b:37:61:bc:24:bd:01:
                    78:7f:92:fd:c6:28:e4:79:4c:96:f0:14:1d:85:94:
                    36:dc:88:c0:56:42:43:7f:7a:d1:2e:07:b9:a5:fa:
                    60:63:29:06:4a:68:4a:b3:99:48:94:07:02:21:ae:
                    8a:ad:b4:29:71:e5:1d:10:18:7f:35:1d:54:3a:39:
                    8a:86:b7:4a:87:6d:05:1b:73:6d:ae:d5:92:fa:71:
                    e1:2b:07:d0:34:72:b5:ef:41:19:2b:ba:ee:2e:bd:
                    39:3d:3a:60:eb:b1:fb:2d:f6:80:b1:a9:ee:47:b3:
                    31:af:04:f0:bf:dc:7b:7f:49:6a:33:44:27:fb:9c:
                    f1:ac:4b:2f:40:b3:4d:36:1b:e7:d9:6c:ed:c2:62:
                    5c:c7:99:66:2d:3f:35:3a:9b:9c:d6:c4:23:bc:79:
                    59:76:9a:fe:6c:27:1b:59:c5:bd:f2:c7:ae:7d:7d:
                    f2:8d:0b:43:dd:e7:90:3c:f8:1c:47:78:ff:dd:bb:
                    cb:2d:b1:a5:b4:ad:ba:3f:ed:92:38:44:25:23:c6:
                    17:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:72:48:7A:70:7D:2A:8C:E9:66:97:1E:F9:B1:31:CE:36:64:4C:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad/4e19e90a-02f5-34b5-b961-206d0f1b72a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad/53e1e100-f122-416c-8a32-e10c835a78ad.crl

            X509v3 Authority Key Identifier:
                keyid:9E:F4:3E:72:1D:5F:5A:FA:02:81:C2:75:34:75:40:1C:CD:C3:DE:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.216.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:88:b7:65:04:0e:0a:af:50:6b:e8:93:04:90:89:b5:82:be:
         0d:d0:0d:9b:73:08:03:b0:dc:05:21:04:fa:8a:35:1c:f7:58:
         16:1a:7e:9b:93:9e:d7:a2:ab:f8:ba:0d:8d:b5:56:07:b3:be:
         cd:3d:b1:82:98:04:61:98:57:54:bd:b9:53:8c:fd:1f:78:e7:
         d1:01:f9:c4:af:dd:c3:79:f4:88:14:03:49:f5:c8:8c:99:8b:
         83:84:3e:24:c2:aa:57:2a:02:56:51:d9:a2:61:90:95:09:a9:
         00:6e:1f:c6:0a:27:02:56:91:bd:4e:e5:df:d6:a1:ca:74:6d:
         4c:67:4d:d1:b9:cc:ba:b3:66:46:fa:3b:1a:02:c0:a4:7f:a2:
         b1:f5:ea:47:3f:df:55:d5:4b:82:9b:e2:77:5c:b6:33:51:0a:
         7f:0e:51:57:c2:98:cd:61:68:cf:52:d8:40:8d:08:c9:a7:6c:
         01:28:79:f8:c9:c7:46:ac:ce:7a:c7:c5:31:69:78:84:11:b8:
         6a:de:33:5a:69:ba:cd:dd:05:f5:17:29:11:13:a9:fb:ec:f2:
         3c:a9:fd:31:dd:02:b3:5f:16:a7:79:7b:dc:e8:d5:78:26:d7:
         07:a4:88:a6:80:7f:7e:f8:2c:fa:8d:a1:c2:ea:b4:55:ca:42:
         d2:4d:b4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----