Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad/ff57630e-5620-307d-b4a6-3418f056a6e2.roa
File:                     ff57630e-5620-307d-b4a6-3418f056a6e2.roa (raw, json)
Hash identifier:          CL1DqYWxKG/GGT4wkEdQuEA1c/ltwDN2pj92E9GHGbg=
Subject key identifier:   20:C9:30:64:E4:6C:FD:33:F3:50:8B:0E:19:3C:9E:68:D6:5E:31:F2
Certificate issuer:       /CN=53e1e100-f122-416c-8a32-e10c835a78ad
Certificate serial:       010D0C9F4328576D51CC73C042CFC1740719F125
Authority key identifier: 9E:F4:3E:72:1D:5F:5A:FA:02:81:C2:75:34:75:40:1C:CD:C3:DE:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad/ff57630e-5620-307d-b4a6-3418f056a6e2.roa
Signing time:             Mon 20 Jul 2020 04:00:00 +0000
ROA not before:           Mon 20 Jul 2020 04:00:00 +0000
ROA not after:            Sat 31 Dec 2022 05:00:00 +0000
asID:                     12083
IP address blocks:        69.1.0.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:74:07:19:f1:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e1e100-f122-416c-8a32-e10c835a78ad
        Validity
            Not Before: Jul 20 04:00:00 2020 GMT
            Not After : Dec 31 05:00:00 2022 GMT
        Subject: CN=616f2c6e-5133-46d0-b4c6-5d6d5eb31bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:65:cb:21:8e:72:b6:e0:2b:ea:de:0d:36:6a:
                    39:0d:30:72:1e:a1:09:4d:41:d9:3f:94:65:55:06:
                    62:36:1d:e7:f1:21:69:ea:77:16:21:21:c3:9a:b2:
                    70:03:ea:37:8d:87:15:2e:a5:3f:6f:f1:b5:da:f5:
                    94:2d:41:2e:d5:49:39:d3:9e:07:47:ac:c3:44:4a:
                    e2:a6:7f:ee:26:91:4d:2a:fc:ea:90:b3:db:3e:02:
                    db:d9:6c:9c:c2:2a:37:35:68:ab:14:6e:94:13:9b:
                    ab:66:5d:9f:7c:6e:89:3c:49:d2:8b:02:1c:56:af:
                    6e:54:84:bc:71:64:7a:e5:6e:2f:97:e5:f8:7a:4b:
                    5a:3e:b3:40:70:9c:58:3c:24:e1:e2:64:ed:83:36:
                    86:e5:4f:7e:ad:1c:50:69:2b:68:3c:1b:12:ba:2c:
                    9a:79:c3:38:c1:3d:7d:a6:56:66:f5:bf:af:eb:d5:
                    55:4c:ba:28:2f:6b:c3:8e:50:e0:ef:66:07:5e:89:
                    62:dc:5f:18:3e:69:9c:c9:48:e2:8a:99:16:61:03:
                    e4:c6:ed:bf:b0:e7:84:f1:33:d4:fb:2b:ed:7a:79:
                    44:c0:6f:06:ab:14:ef:06:69:ac:92:1e:95:f1:ed:
                    40:8c:6e:2e:a1:78:6c:e6:5c:50:a9:2a:51:57:fd:
                    94:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C9:30:64:E4:6C:FD:33:F3:50:8B:0E:19:3C:9E:68:D6:5E:31:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad/ff57630e-5620-307d-b4a6-3418f056a6e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad/53e1e100-f122-416c-8a32-e10c835a78ad.crl

            X509v3 Authority Key Identifier:
                keyid:9E:F4:3E:72:1D:5F:5A:FA:02:81:C2:75:34:75:40:1C:CD:C3:DE:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:2b:e8:e3:53:7b:65:d7:ce:85:d1:12:b6:48:10:14:d7:6c:
         6c:e2:05:83:db:a6:b9:17:b9:b5:d6:ac:f2:04:c1:94:85:fa:
         1e:71:99:16:cc:8f:5a:19:4d:01:25:50:b4:0a:a2:b0:e8:ea:
         00:ab:90:4c:27:01:b4:f7:64:ef:3a:9f:a5:a8:ec:09:03:64:
         0e:dc:b4:73:34:9a:c0:d0:2f:52:10:94:10:7f:c9:cc:30:2a:
         86:6f:01:f1:f9:56:0d:33:49:d0:e9:96:3b:99:0d:1e:21:c4:
         27:2a:53:d4:c7:64:74:7f:93:bf:fa:e2:a4:30:6a:d0:fc:e7:
         e6:ba:e8:47:a4:25:30:b8:1c:1a:63:d4:46:c7:59:e9:66:16:
         36:3b:b8:d7:e9:86:d2:d1:cd:7f:cb:f2:12:f5:cd:b2:95:46:
         3f:6d:f1:71:86:32:6d:6a:0e:88:98:86:e1:66:76:e5:c7:7c:
         de:2f:d6:10:04:1f:a5:72:6d:b2:a5:20:e7:b4:b4:7f:3c:61:
         f8:be:ea:50:cb:55:4f:ae:0b:89:c1:83:a4:01:28:cb:66:07:
         04:60:ad:a1:af:ff:1c:1f:b3:49:eb:d0:15:48:96:13:b7:13:
         a9:c5:e1:85:04:8d:f6:40:f5:15:02:d9:f8:99:bf:e3:5c:9c:
         7a:86:bc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----