Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7bd9126-96c2-4858-9752-76996d9d0936/43883d30-8a13-308d-adf1-7cb71c295db8.roa
File:                     43883d30-8a13-308d-adf1-7cb71c295db8.roa (raw, json)
Hash identifier:          3/o9AHa+mwdn7iucDMhc1roaGfuWrl3EQqXBsyr1fNE=
Subject key identifier:   4C:B7:B6:EE:D3:B3:28:ED:DF:3F:FE:FA:D6:99:10:6A:A5:E8:9E:2C
Certificate issuer:       /CN=a7bd9126-96c2-4858-9752-76996d9d0936
Certificate serial:       010D0C9F4328583817E97EDC6B443801FF69C6C0
Authority key identifier: 76:78:7A:6C:41:67:84:8F:26:00:A8:06:59:20:3B:8B:BB:B2:A4:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7bd9126-96c2-4858-9752-76996d9d0936.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7bd9126-96c2-4858-9752-76996d9d0936/43883d30-8a13-308d-adf1-7cb71c295db8.roa
Signing time:             Mon 02 Nov 2020 05:00:00 +0000
ROA not before:           Mon 02 Nov 2020 05:00:00 +0000
ROA not after:            Thu 03 Mar 2022 05:00:00 +0000
asID:                     61317
IP address blocks:        172.86.144.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:17:e9:7e:dc:6b:44:38:01:ff:69:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7bd9126-96c2-4858-9752-76996d9d0936
        Validity
            Not Before: Nov  2 05:00:00 2020 GMT
            Not After : Mar  3 05:00:00 2022 GMT
        Subject: CN=1ff8573b-1ddd-4c83-8ae8-1d8b43ce071b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:05:0b:b1:f1:bd:f4:ea:44:d9:e9:dc:65:f7:
                    42:22:ef:e1:2a:26:65:ed:1d:b9:fd:a9:1b:d7:ac:
                    7a:6f:74:94:3b:2a:c4:7c:d3:cc:25:86:23:fa:4c:
                    1b:51:04:c5:d6:6e:3b:f1:76:8d:27:56:6b:21:1f:
                    ec:92:8e:b7:05:a1:22:ee:f1:50:66:ce:66:d4:ac:
                    3b:a2:b1:dc:68:9d:3d:2f:21:80:86:ea:44:a2:ff:
                    04:bf:2c:2c:1d:87:57:29:b5:28:63:cf:ea:0e:72:
                    ee:15:6d:38:5f:e5:c5:51:ef:75:27:5d:85:52:25:
                    f2:3d:b0:b1:2d:a0:db:1b:68:4a:94:70:23:b7:52:
                    1f:c1:22:5e:e9:aa:9f:a9:98:38:19:88:f2:35:80:
                    28:63:1b:9d:b0:bf:e5:98:4c:c7:94:a7:6e:ba:30:
                    4e:e1:eb:7f:7c:b2:81:64:e3:ae:64:4b:56:ea:01:
                    a5:7e:34:03:02:7d:5e:df:f6:aa:ad:f8:05:df:90:
                    ae:2d:33:77:77:91:ba:13:cd:71:98:08:ae:0b:00:
                    6b:d7:2b:17:c8:c0:72:30:19:54:cf:94:95:88:23:
                    ea:74:25:4b:92:85:fc:71:cd:a8:c3:eb:9d:a2:91:
                    41:10:16:95:a8:b7:ca:ca:eb:85:d4:4f:d0:21:a7:
                    b9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B7:B6:EE:D3:B3:28:ED:DF:3F:FE:FA:D6:99:10:6A:A5:E8:9E:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7bd9126-96c2-4858-9752-76996d9d0936/43883d30-8a13-308d-adf1-7cb71c295db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7bd9126-96c2-4858-9752-76996d9d0936/a7bd9126-96c2-4858-9752-76996d9d0936.crl

            X509v3 Authority Key Identifier:
                keyid:76:78:7A:6C:41:67:84:8F:26:00:A8:06:59:20:3B:8B:BB:B2:A4:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7bd9126-96c2-4858-9752-76996d9d0936.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.86.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:5b:30:a3:af:99:38:18:07:7f:bd:50:10:af:e2:32:c0:6c:
         9c:7c:5d:4e:5e:05:73:1b:4a:b1:c3:90:23:6c:00:e1:c6:e4:
         84:b9:13:6f:4a:06:18:f7:1c:00:f2:1b:90:10:df:2d:51:e0:
         16:54:8b:6c:58:84:a1:67:ed:4d:8a:99:0d:87:88:28:aa:9e:
         dd:af:2d:47:6e:c6:96:f0:1d:10:96:0f:ea:ec:bf:e6:7f:04:
         fe:3f:4b:6e:c3:d2:3f:0d:87:5c:b2:3f:42:46:fe:70:a2:31:
         26:6b:86:2f:59:f6:14:98:ae:ad:49:c8:c8:81:79:04:db:72:
         dc:bc:d3:38:74:33:6c:35:61:5c:9c:af:21:53:87:ae:24:88:
         73:30:c0:c6:2d:42:09:2c:02:4b:31:84:d8:16:c8:d2:9d:aa:
         8f:0f:c3:2d:24:a6:99:26:2d:18:03:9f:53:19:4f:2c:d9:e8:
         de:0b:e7:a0:ba:5a:40:bb:99:51:9d:e5:43:8e:83:18:5e:be:
         72:85:f3:e4:6e:05:9f:cd:14:82:fa:fd:2d:24:8f:14:c5:8c:
         79:2c:93:b2:ff:00:79:32:ee:0f:87:9e:ee:6f:84:67:d2:94:
         97:e4:1d:26:f2:22:c1:21:db:f7:11:1d:a7:d3:48:6e:ee:c2:
         95:fc:d9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----