Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190/74644b1a-27ea-3237-991e-bad361acde1a.roa
File:                     74644b1a-27ea-3237-991e-bad361acde1a.roa (raw, json)
Hash identifier:          kz0czhEeF9Xzxd0EivslmRK+TUSg9xFyZJCiKZtDBl4=
Subject key identifier:   8A:48:7C:EF:F2:87:4E:A5:79:3D:60:8E:B8:1F:CE:3E:76:CD:41:1D
Certificate issuer:       /CN=8a69f9d3-746f-47a4-971f-36ee3a52a190
Certificate serial:       010D0C9F4328576D51CC73C042CFC16B6FF16479
Authority key identifier: 16:B3:E8:A9:FC:0C:22:F4:68:BE:86:8C:B0:69:47:3E:55:3A:B0:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190/74644b1a-27ea-3237-991e-bad361acde1a.roa
Signing time:             Wed 19 Jun 2019 13:33:39 +0000
ROA not before:           Tue 20 Nov 2018 05:00:00 +0000
ROA not after:            Mon 20 Nov 2028 05:00:00 +0000
asID:                     16509
IP address blocks:        45.223.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6b:6f:f1:64:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a69f9d3-746f-47a4-971f-36ee3a52a190
        Validity
            Not Before: Nov 20 05:00:00 2018 GMT
            Not After : Nov 20 05:00:00 2028 GMT
        Subject: CN=ffa85095-2ed1-4dbe-87e1-50ffa07b4537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:00:fe:08:5e:03:a2:9c:3a:bb:9b:ba:11:5d:
                    77:bf:82:06:49:81:fb:67:58:ac:7d:95:f8:2e:b8:
                    ed:7a:9b:fa:84:86:dc:7c:7e:5e:84:57:8a:65:f7:
                    6c:6f:bd:18:f8:88:42:fa:71:7c:a1:c0:e1:c7:3c:
                    17:17:4c:12:ba:fb:98:14:f9:df:02:d7:e6:fe:a7:
                    e7:f3:9e:e5:55:a3:96:26:af:96:52:0c:ed:3f:ac:
                    66:e5:b4:bf:0a:d6:f0:d9:c3:73:50:e4:ab:d8:12:
                    2b:35:3e:9d:ee:7c:83:52:a9:5a:46:b0:45:e0:6b:
                    21:46:9c:cd:d9:a6:a3:fc:c9:3e:4d:fe:93:0b:6d:
                    0f:07:1a:17:f0:44:7f:53:18:bc:64:30:8a:ce:88:
                    ff:ae:02:bd:24:14:27:d4:eb:8a:b0:48:1f:56:49:
                    cc:e6:74:31:c7:69:a4:0a:df:ff:39:e8:b2:60:4c:
                    c5:9b:7f:6e:1f:f6:15:60:07:24:a8:76:df:94:62:
                    a8:a3:cf:b9:b0:9c:72:a5:b2:4c:dd:bc:e0:0b:7f:
                    d1:f5:d4:cc:ec:b2:dd:a6:e8:cd:7f:68:6e:a9:43:
                    d4:17:6c:3a:34:fd:14:24:b6:f5:14:8b:61:df:ee:
                    93:3d:a7:bc:f1:02:fe:da:8d:c4:6f:13:88:8e:43:
                    53:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:48:7C:EF:F2:87:4E:A5:79:3D:60:8E:B8:1F:CE:3E:76:CD:41:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190/74644b1a-27ea-3237-991e-bad361acde1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190/8a69f9d3-746f-47a4-971f-36ee3a52a190.crl

            X509v3 Authority Key Identifier:
                keyid:16:B3:E8:A9:FC:0C:22:F4:68:BE:86:8C:B0:69:47:3E:55:3A:B0:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.223.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:5c:33:55:73:50:59:59:bc:ec:e9:d3:9c:a6:a1:16:c1:f2:
         6b:7b:30:48:22:42:d4:36:c2:0d:a2:e0:e3:6f:6e:ea:17:df:
         fd:89:2d:7a:8e:ca:f4:97:61:10:e3:37:fe:9f:f3:0a:4b:fc:
         6a:fa:27:ac:77:5c:bd:d9:3f:49:c4:17:50:a7:e9:06:78:da:
         8b:eb:3d:2d:1d:02:da:c6:94:41:81:cd:58:b5:88:e6:e0:af:
         b6:f8:2c:1a:ff:75:e8:eb:28:07:e3:27:46:57:9e:bf:a3:59:
         55:43:7b:28:01:eb:87:7d:f5:c4:2b:ce:2f:c0:57:2e:12:c1:
         41:c9:62:79:e3:82:04:e5:13:70:88:26:2a:a0:ae:62:66:b8:
         63:36:00:ba:1e:01:9e:11:6d:0c:e7:8f:07:bd:ce:7f:e5:f8:
         e9:79:d5:59:61:2e:0b:dd:38:23:7b:ab:a7:8b:bd:f8:14:1c:
         1c:38:24:50:e8:f3:f9:64:e7:a4:ca:9e:30:8e:66:d0:f0:c7:
         d6:b3:0d:c9:24:45:2e:c0:53:ed:38:ea:e9:82:87:c0:56:97:
         8f:7b:57:24:2b:63:04:e0:ac:6a:93:98:d6:78:98:61:7f:bf:
         51:19:9a:e9:d5:f9:67:da:ce:1b:7c:fe:a4:f3:32:96:06:de:
         1a:85:13:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----