Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f71a5753-c3ce-4ad0-85f6-68ca6fc451ef/14e3a78a-ee6d-339c-9f9f-570d3d7177d5.roa
File:                     14e3a78a-ee6d-339c-9f9f-570d3d7177d5.roa (raw, json)
Hash identifier:          4JRrf2UUTQWmdIZq1zhRRTAONQruejYEcLKQw2Hxe5E=
Subject key identifier:   FB:57:F8:A8:3A:E4:E0:77:43:90:F1:96:93:58:DF:6D:D3:58:0D:7F
Certificate issuer:       /CN=f71a5753-c3ce-4ad0-85f6-68ca6fc451ef
Certificate serial:       010D0C9F4328576D51CC73C042CFC173D87BF6E6
Authority key identifier: 04:C1:5B:51:3D:57:62:04:59:E9:B1:BA:8B:7D:17:28:85:42:89:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f71a5753-c3ce-4ad0-85f6-68ca6fc451ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f71a5753-c3ce-4ad0-85f6-68ca6fc451ef/14e3a78a-ee6d-339c-9f9f-570d3d7177d5.roa
Signing time:             Mon 10 Aug 2020 13:07:49 +0000
ROA not before:           Thu 25 Jun 2020 04:00:00 +0000
ROA not after:            Thu 13 Nov 2025 05:00:00 +0000
asID:                     206607
IP address blocks:        139.64.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:d8:7b:f6:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f71a5753-c3ce-4ad0-85f6-68ca6fc451ef
        Validity
            Not Before: Jun 25 04:00:00 2020 GMT
            Not After : Nov 13 05:00:00 2025 GMT
        Subject: CN=2313b681-6dd9-4e06-9657-3805ae8bddf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f9:1e:91:31:74:fd:b4:82:49:4c:9d:9a:ef:
                    ae:80:be:ba:e3:3a:78:a1:9c:79:7d:f2:51:ba:e7:
                    f9:75:57:c4:b3:70:67:0b:c8:86:e5:a9:01:7c:0a:
                    79:9f:39:57:62:37:f9:a9:ef:d1:8a:d0:ee:9e:72:
                    ad:10:78:57:2f:5b:f8:da:a6:61:3c:d1:f4:04:0b:
                    ea:10:34:a6:d6:47:72:2d:4b:26:6a:51:e7:0f:20:
                    a0:4f:1b:5f:ad:22:0e:e0:55:ed:29:27:40:be:99:
                    30:96:8c:be:ab:41:ba:af:cf:18:c0:1c:2e:e9:d6:
                    25:f4:82:1c:96:f6:2f:0a:5d:4c:8a:c0:51:61:3c:
                    36:bd:58:14:77:ae:21:75:a0:98:65:43:c1:44:4e:
                    6c:7b:34:6d:df:c6:c8:dd:4e:f5:c3:f0:4c:20:cd:
                    f6:1f:85:2b:c6:b3:b6:86:ee:54:ef:06:e0:eb:e7:
                    9a:4a:ad:44:1b:e7:2b:81:5a:f9:58:9e:91:58:13:
                    cd:1e:f8:0e:8a:cf:9f:8f:b3:70:d7:0c:0e:aa:11:
                    49:88:4e:3b:e5:66:58:4b:1c:05:56:3f:33:2f:c6:
                    47:77:9e:ee:f2:01:3b:63:9d:5e:85:68:0c:7f:bd:
                    5c:50:78:a1:a7:d0:4c:16:99:d3:45:b0:ce:d3:bf:
                    7f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:57:F8:A8:3A:E4:E0:77:43:90:F1:96:93:58:DF:6D:D3:58:0D:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f71a5753-c3ce-4ad0-85f6-68ca6fc451ef/14e3a78a-ee6d-339c-9f9f-570d3d7177d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f71a5753-c3ce-4ad0-85f6-68ca6fc451ef/f71a5753-c3ce-4ad0-85f6-68ca6fc451ef.crl

            X509v3 Authority Key Identifier:
                keyid:04:C1:5B:51:3D:57:62:04:59:E9:B1:BA:8B:7D:17:28:85:42:89:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f71a5753-c3ce-4ad0-85f6-68ca6fc451ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.64.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:d0:55:58:32:c1:d7:31:4d:10:f8:46:f4:bd:37:bd:85:30:
         e5:11:5d:12:0d:fa:97:35:91:60:6f:c3:7b:48:47:fe:47:f9:
         4c:ed:b5:81:5f:54:b5:0c:ed:13:e6:f9:00:0e:fe:6e:c4:b6:
         b1:49:e8:12:19:67:f1:4f:80:66:00:97:d7:bc:08:f6:1c:42:
         eb:b9:e0:b6:d1:e6:eb:4d:1a:45:72:11:a5:18:8b:29:75:e4:
         35:80:db:c7:a2:c5:f2:aa:35:fd:0f:2c:8e:82:6e:53:a8:36:
         83:3b:fa:e2:a2:94:57:06:88:dd:54:86:6d:1b:fe:12:33:a2:
         2b:0c:bc:8a:eb:6b:f0:13:00:07:fe:37:30:63:7a:c8:88:f5:
         4f:19:47:6b:de:e8:a5:a4:0e:af:9b:fa:0e:5e:25:38:dd:1e:
         59:71:fa:78:35:75:10:d0:a8:3b:24:83:a1:bd:70:65:ab:a1:
         6e:88:9c:00:7a:b0:c0:21:4c:44:31:47:2a:9f:a6:4d:e3:34:
         af:59:30:79:4a:fb:0b:aa:50:f2:b1:24:fc:c5:e6:21:d6:fd:
         93:82:47:1a:91:50:18:9f:2b:65:fc:b6:34:38:9d:1c:e7:47:
         b8:fe:91:00:80:03:ec:1d:79:5e:a3:c4:37:28:38:e3:04:88:
         75:68:3d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----