Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7bd9126-96c2-4858-9752-76996d9d0936/327ad3f9-155d-3360-8733-d9248c92199e.roa
File:                     327ad3f9-155d-3360-8733-d9248c92199e.roa (raw, json)
Hash identifier:          74Qm38sYqcCjjqb0abD8vWQJnC2XSof8Vlovitlr5UE=
Subject key identifier:   13:49:E1:F5:62:33:C3:3C:BB:43:AF:8A:4F:E5:C4:65:C2:24:CB:71
Certificate issuer:       /CN=a7bd9126-96c2-4858-9752-76996d9d0936
Certificate serial:       010D0C9F4328583CD193579A3C8486473B6B56C0
Authority key identifier: 76:78:7A:6C:41:67:84:8F:26:00:A8:06:59:20:3B:8B:BB:B2:A4:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7bd9126-96c2-4858-9752-76996d9d0936.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7bd9126-96c2-4858-9752-76996d9d0936/327ad3f9-155d-3360-8733-d9248c92199e.roa
Signing time:             Mon 02 Nov 2020 05:00:00 +0000
ROA not before:           Mon 02 Nov 2020 05:00:00 +0000
ROA not after:            Thu 09 May 2024 04:00:00 +0000
asID:                     61317
IP address blocks:        172.86.156.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:d1:93:57:9a:3c:84:86:47:3b:6b:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7bd9126-96c2-4858-9752-76996d9d0936
        Validity
            Not Before: Nov  2 05:00:00 2020 GMT
            Not After : May  9 04:00:00 2024 GMT
        Subject: CN=c9f8b80a-9e46-4921-af70-83fee9432847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f6:17:74:c1:aa:c1:5b:8e:5f:fa:7f:a2:c4:
                    9e:b8:8f:95:52:01:31:45:81:44:bd:21:66:e1:d4:
                    0b:98:39:fa:ba:78:4d:65:9d:62:5a:a0:fe:be:fa:
                    82:3d:2a:bf:53:e7:7f:b9:f0:af:01:b6:be:e0:b4:
                    d4:d5:95:f1:37:ac:01:ef:f3:cb:12:37:1a:ee:a9:
                    3a:fc:36:a0:b6:c0:3b:01:3e:d0:6d:0c:c9:a9:be:
                    70:48:7b:0b:13:24:e3:c6:f4:a1:64:d9:e4:2f:b2:
                    97:9b:16:a7:44:d9:13:96:22:ff:b0:ef:65:b4:4c:
                    4b:c4:cf:fb:3a:da:5e:ae:df:13:c5:9f:ee:a1:d9:
                    00:7d:a1:81:6e:dc:ca:fa:04:ea:a4:17:48:f7:21:
                    a2:92:e6:a9:ba:e3:96:0a:85:28:48:94:51:3a:38:
                    5a:56:e3:45:4c:f3:fa:b9:1d:cc:3c:cb:89:ae:9f:
                    58:35:fa:25:69:14:37:cc:8b:db:e3:c3:38:62:ec:
                    5f:f1:b4:5f:c3:4c:83:14:54:8e:9f:74:72:20:55:
                    31:62:25:5b:b0:ec:4b:ef:44:2c:84:32:80:97:67:
                    7a:95:a9:4d:35:40:84:8a:ab:a2:5e:76:3c:de:26:
                    f1:d5:15:16:b4:f1:c8:f9:62:56:1f:9c:21:38:0a:
                    b1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:49:E1:F5:62:33:C3:3C:BB:43:AF:8A:4F:E5:C4:65:C2:24:CB:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7bd9126-96c2-4858-9752-76996d9d0936/327ad3f9-155d-3360-8733-d9248c92199e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7bd9126-96c2-4858-9752-76996d9d0936/a7bd9126-96c2-4858-9752-76996d9d0936.crl

            X509v3 Authority Key Identifier:
                keyid:76:78:7A:6C:41:67:84:8F:26:00:A8:06:59:20:3B:8B:BB:B2:A4:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7bd9126-96c2-4858-9752-76996d9d0936.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.86.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:aa:d9:46:b2:2d:d3:40:df:8e:6a:6a:b2:cf:ed:f2:a7:ea:
         d5:c3:b3:31:f5:c2:49:10:c5:50:1b:bf:f7:af:5f:9f:51:bc:
         25:13:5f:76:ae:86:35:92:21:f3:9a:f6:62:66:ef:e2:25:30:
         fa:7b:b7:f3:9e:10:91:ef:e3:c8:52:68:f9:84:47:79:b6:f1:
         bb:1f:6b:32:6f:0d:51:37:25:dc:3b:1b:42:b4:6b:02:fd:c3:
         24:89:9c:cd:f8:61:4a:81:2b:94:68:c5:7c:75:01:3d:0f:49:
         2e:a5:50:5b:3f:e3:a9:2c:1d:38:60:8d:86:79:4c:69:02:28:
         56:0e:2e:73:4c:b9:a5:04:c7:46:d3:58:18:d7:6c:e6:55:89:
         7f:ac:06:00:c8:90:0a:6a:dc:81:13:b2:e0:89:97:25:8a:a8:
         da:78:2b:eb:e5:0e:98:dc:7e:2f:a6:5a:51:a3:8c:61:70:3a:
         29:66:a5:a0:45:70:1f:ab:63:b8:04:e6:18:6f:84:3b:24:66:
         36:14:15:e0:c5:b6:fb:f1:c9:eb:1b:26:92:62:5f:25:d4:a6:
         e3:9c:6c:6d:e5:62:8e:fd:9b:5f:54:5b:1f:d9:e0:15:e8:0d:
         51:b7:ee:b2:5c:80:ad:00:80:7e:42:8e:49:f2:79:29:e1:65:
         53:90:ee:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----