Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7bd9126-96c2-4858-9752-76996d9d0936/957118e9-d934-38fc-8d05-ba6c1dd74415.roa
File:                     957118e9-d934-38fc-8d05-ba6c1dd74415.roa (raw, json)
Hash identifier:          bACJn8G7xAsUACibg8hC8+taHR5l3aJJjV32XrenBS4=
Subject key identifier:   A8:7E:F2:03:AD:FB:A7:F8:B1:5F:86:4C:CC:29:BF:C9:27:99:BB:D7
Certificate issuer:       /CN=a7bd9126-96c2-4858-9752-76996d9d0936
Certificate serial:       010D0C9F43285837D189B06B8B04691AE93983E0
Authority key identifier: 76:78:7A:6C:41:67:84:8F:26:00:A8:06:59:20:3B:8B:BB:B2:A4:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7bd9126-96c2-4858-9752-76996d9d0936.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7bd9126-96c2-4858-9752-76996d9d0936/957118e9-d934-38fc-8d05-ba6c1dd74415.roa
Signing time:             Tue 03 Nov 2020 05:00:00 +0000
ROA not before:           Tue 03 Nov 2020 05:00:00 +0000
ROA not after:            Wed 12 Jul 2023 04:00:00 +0000
asID:                     61317
IP address blocks:        172.86.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d1:89:b0:6b:8b:04:69:1a:e9:39:83:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7bd9126-96c2-4858-9752-76996d9d0936
        Validity
            Not Before: Nov  3 05:00:00 2020 GMT
            Not After : Jul 12 04:00:00 2023 GMT
        Subject: CN=d20e50ab-01d5-458f-adaf-afece13cad24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:79:3e:62:6a:df:27:c7:b6:73:19:ba:e1:49:
                    3d:3b:53:54:7e:01:e7:f3:31:1a:31:46:e3:46:16:
                    4e:23:da:06:52:01:7c:e2:43:99:d6:8a:34:5b:e9:
                    41:45:4a:7f:0a:f2:0a:c5:5f:86:ae:6f:76:5e:31:
                    5c:a7:d9:d1:12:ab:57:28:9b:dd:bd:c4:89:db:e9:
                    0f:ac:94:cf:c1:72:b0:d1:16:b9:3d:2c:48:35:6c:
                    41:ab:37:c5:b8:c2:04:04:8d:fc:37:be:d9:28:78:
                    3f:7f:16:af:e9:0a:f9:4f:f4:1f:e9:24:fd:f0:ab:
                    1e:c8:21:08:e3:20:a5:54:05:a0:25:dd:cd:ab:c1:
                    45:70:05:b3:e0:98:25:2c:d3:2d:ac:a2:72:07:22:
                    95:8d:d0:43:df:2d:c2:f8:5f:32:02:b7:87:60:e1:
                    61:5d:f5:34:47:74:15:36:1b:4e:4a:3c:14:ca:a9:
                    2d:9d:af:30:a3:84:a6:d7:3d:fb:22:6f:42:6c:e2:
                    b4:93:ad:18:fe:fa:fb:cb:e4:75:dc:c2:e7:7f:83:
                    54:6b:1b:ef:26:de:bd:fd:b5:31:ad:26:c8:22:34:
                    1c:8e:c6:9e:5e:2c:39:ac:44:39:db:78:fb:99:07:
                    5b:73:35:cd:90:5f:57:75:f0:bf:da:cd:b0:bb:11:
                    b3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7E:F2:03:AD:FB:A7:F8:B1:5F:86:4C:CC:29:BF:C9:27:99:BB:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7bd9126-96c2-4858-9752-76996d9d0936/957118e9-d934-38fc-8d05-ba6c1dd74415.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7bd9126-96c2-4858-9752-76996d9d0936/a7bd9126-96c2-4858-9752-76996d9d0936.crl

            X509v3 Authority Key Identifier:
                keyid:76:78:7A:6C:41:67:84:8F:26:00:A8:06:59:20:3B:8B:BB:B2:A4:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7bd9126-96c2-4858-9752-76996d9d0936.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.86.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:de:b0:b0:4e:af:82:2f:8c:04:66:8d:d8:16:4d:25:0d:2f:
         e4:09:33:88:9b:74:9f:02:66:02:99:f0:d5:1f:27:0c:40:66:
         bc:78:65:ce:3a:7b:ee:e1:21:07:23:2d:8b:27:f5:8b:c8:ff:
         6b:ee:32:e4:b2:f8:39:00:09:53:57:2e:c2:06:c9:05:b3:65:
         c7:06:1a:a0:0d:a9:0d:45:98:a3:61:dc:26:ed:2e:8f:db:19:
         52:38:12:2f:cb:f9:44:dd:a4:c2:39:2c:49:14:68:0f:db:ca:
         f5:03:bf:7b:6e:31:c5:04:36:7a:b4:0f:63:19:17:b2:05:a6:
         26:65:33:23:0a:b0:75:1c:5c:22:dc:03:0c:85:f5:65:e5:6d:
         ba:d4:cc:90:2c:8a:10:db:0b:49:7e:0c:65:6e:02:e9:2f:f9:
         e1:46:17:f6:8e:39:bd:b8:86:53:0f:5f:31:ce:fc:d8:b4:b7:
         e9:84:65:7f:e6:db:7b:9e:07:cc:be:ea:98:66:69:6c:9a:a8:
         46:a9:72:98:f7:fd:61:2d:a9:ff:63:a8:cf:d7:ba:b2:42:7b:
         33:14:b3:76:85:3c:5f:46:03:78:2b:f4:67:ff:e0:0b:23:a4:
         51:8b:79:be:e4:fd:c6:98:d7:c8:f5:1d:4e:9c:0f:3f:4d:92:
         36:a0:79:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----