Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e114fc5-a47d-445b-97b0-2c531b89892f/3334d992-42dc-3f89-8132-c2a9b0e44402.roa
File:                     3334d992-42dc-3f89-8132-c2a9b0e44402.roa (raw, json)
Hash identifier:          ZMc4Np6+wu9P6TZb3XqxofIYfYi4SQOgMViFcGzvlOg=
Subject key identifier:   CF:AD:70:31:E1:66:7C:72:70:4D:E3:9E:88:6E:38:50:D4:9A:9B:78
Certificate issuer:       /CN=7e114fc5-a47d-445b-97b0-2c531b89892f
Certificate serial:       010D0C9F4328576D51CC73C042CFC173784F7139
Authority key identifier: E9:CF:22:E6:60:35:A2:63:46:ED:34:87:D3:7E:50:F0:D3:42:D2:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e114fc5-a47d-445b-97b0-2c531b89892f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e114fc5-a47d-445b-97b0-2c531b89892f/3334d992-42dc-3f89-8132-c2a9b0e44402.roa
Signing time:             Wed 22 Jul 2020 20:55:39 +0000
ROA not before:           Wed 22 Jul 2020 04:00:00 +0000
ROA not after:            Tue 25 Oct 2022 04:00:00 +0000
asID:                     396982
IP address blocks:        155.184.0.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:78:4f:71:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e114fc5-a47d-445b-97b0-2c531b89892f
        Validity
            Not Before: Jul 22 04:00:00 2020 GMT
            Not After : Oct 25 04:00:00 2022 GMT
        Subject: CN=221235d0-8439-4eee-b018-ceeaa59762c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:53:91:64:98:ff:3b:72:45:4e:b7:ee:a5:bd:
                    bd:84:78:72:6c:52:08:6b:97:fc:d9:83:ff:e0:0f:
                    dd:50:bf:b4:c3:54:3f:86:1f:84:f4:e6:63:84:5c:
                    f7:82:95:73:9b:3a:7a:db:04:36:89:65:45:f2:e5:
                    07:e3:43:e6:81:cc:11:d4:95:db:f6:f3:da:45:a2:
                    16:73:87:46:ae:f2:e6:19:fb:f1:ca:28:6e:36:93:
                    7c:71:72:4e:7f:81:58:60:52:7b:90:00:b0:f9:53:
                    d3:f0:2c:a5:a8:d9:8d:c8:8e:03:8c:ea:0b:35:d3:
                    23:6d:4b:cb:a8:45:8d:e3:68:dd:41:f1:8b:97:2d:
                    16:98:7d:08:fa:19:34:ee:dc:6c:7e:7a:25:0d:58:
                    e0:42:ad:bb:47:2a:6f:0b:4c:7f:26:3d:a1:1a:22:
                    00:a6:fc:d2:96:9f:76:4a:f2:0b:5a:9e:b5:5a:89:
                    01:01:8a:9d:99:93:80:a5:d6:50:4f:00:ca:17:bd:
                    bc:f2:49:23:51:ae:7b:57:2c:19:43:ab:79:6b:3b:
                    1a:d6:af:4c:d6:75:8f:d2:cc:bf:82:b8:a2:cb:5a:
                    09:6a:78:ad:bd:cf:c2:9c:79:ab:60:60:d5:90:75:
                    09:f7:1a:83:01:19:f6:cf:c0:5e:68:9e:7d:8d:9f:
                    74:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:AD:70:31:E1:66:7C:72:70:4D:E3:9E:88:6E:38:50:D4:9A:9B:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e114fc5-a47d-445b-97b0-2c531b89892f/3334d992-42dc-3f89-8132-c2a9b0e44402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e114fc5-a47d-445b-97b0-2c531b89892f/7e114fc5-a47d-445b-97b0-2c531b89892f.crl

            X509v3 Authority Key Identifier:
                keyid:E9:CF:22:E6:60:35:A2:63:46:ED:34:87:D3:7E:50:F0:D3:42:D2:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e114fc5-a47d-445b-97b0-2c531b89892f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.184.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:c7:25:6f:16:f4:bb:28:26:34:6c:43:32:d9:da:f2:db:cf:
         37:e9:0e:9e:22:72:48:e9:7a:1d:a0:b6:fd:74:a5:f0:ee:ac:
         4e:5f:51:65:17:ef:00:ee:77:75:eb:ff:af:e7:92:61:da:5f:
         d8:4b:9b:f4:9d:8a:b5:67:98:3c:9e:15:ab:e8:63:8e:8c:24:
         cf:bd:44:ba:80:27:cd:e1:d8:61:20:52:97:bc:a6:18:98:26:
         38:64:74:8f:e5:7f:01:a9:60:71:b5:10:94:d3:25:95:6d:5d:
         55:b5:50:55:db:1b:7c:f0:0d:75:c0:73:67:01:53:44:f3:1b:
         67:d8:6a:f9:fa:a4:79:c0:02:54:cf:b3:ae:20:e8:08:8d:77:
         95:a6:4c:c1:0d:47:68:f6:36:5d:8c:1c:94:19:81:b8:ff:e9:
         c6:8b:0f:36:10:4d:f8:8f:c8:03:2e:32:f9:78:af:35:cd:82:
         0a:d3:d3:94:81:b9:0b:15:89:03:9f:6f:ad:a4:60:5a:4e:0e:
         db:f6:e2:33:1d:7e:71:16:d1:b0:d4:e0:76:05:92:5b:b1:c2:
         2c:eb:74:5b:45:a6:28:5a:92:fe:cb:b5:58:4b:ae:69:ef:7c:
         10:11:2b:4c:a8:cf:f4:f8:13:ce:d5:16:c1:13:70:13:56:d8:
         b5:3a:0c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----