Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190/97f3c047-ad9d-3864-bb44-8047ef275c72.roa
File:                     97f3c047-ad9d-3864-bb44-8047ef275c72.roa (raw, json)
Hash identifier:          vfxqaiAJ9DebM/NVYlP6JDzKusymq5UMLfb96aA8hrk=
Subject key identifier:   40:06:7A:43:2D:C8:DA:56:0A:1D:A5:09:68:A2:7D:82:65:BE:B9:62
Certificate issuer:       /CN=8a69f9d3-746f-47a4-971f-36ee3a52a190
Certificate serial:       010D0C9F4328583A41AB623AAF8B8AF037F66D80
Authority key identifier: 16:B3:E8:A9:FC:0C:22:F4:68:BE:86:8C:B0:69:47:3E:55:3A:B0:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190/97f3c047-ad9d-3864-bb44-8047ef275c72.roa
Signing time:             Tue 20 Nov 2018 05:00:00 +0000
ROA not before:           Tue 20 Nov 2018 05:00:00 +0000
ROA not after:            Sun 17 Sep 2023 04:00:00 +0000
asID:                     62571
IP address blocks:        45.223.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:41:ab:62:3a:af:8b:8a:f0:37:f6:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a69f9d3-746f-47a4-971f-36ee3a52a190
        Validity
            Not Before: Nov 20 05:00:00 2018 GMT
            Not After : Sep 17 04:00:00 2023 GMT
        Subject: CN=d4e42dcb-4d0d-4f69-b2df-249b65cfaf31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:9c:a5:94:32:66:23:dc:f6:b1:c0:fa:99:
                    98:86:50:63:de:3d:63:a3:cd:93:c0:bd:a7:14:e6:
                    4a:68:b6:29:0b:a8:3f:58:31:51:e1:d9:08:fb:82:
                    ea:67:2b:88:11:6f:03:89:f4:2b:f4:fe:53:37:a1:
                    9a:71:ae:62:bd:6d:6e:5f:04:69:cd:e2:68:56:2c:
                    0b:55:3d:a9:28:c0:d9:e3:44:d5:f6:db:c5:04:cd:
                    07:46:ec:41:2f:6a:d0:87:e0:9b:b7:fd:fd:7f:71:
                    a2:f9:91:75:5d:73:92:b9:03:2e:22:12:62:db:f0:
                    6f:4e:ca:02:55:a7:58:b7:fb:77:44:f0:75:c0:7b:
                    97:90:1e:87:9e:03:4f:3f:7a:66:1f:8c:72:14:55:
                    ca:b3:73:06:b0:81:98:34:35:31:69:44:bd:87:c8:
                    e2:5d:c6:6f:c1:72:88:f2:e3:98:e3:91:8d:69:b6:
                    5b:0b:6f:00:ac:d3:1b:e9:03:a4:5f:d4:c0:a6:42:
                    50:53:7c:87:c7:2e:20:13:17:0f:47:3d:b7:3f:ce:
                    b0:6b:b0:52:bd:b5:58:ec:f3:01:cf:1c:98:f8:f0:
                    48:be:7e:3c:96:6a:c8:01:62:8c:50:77:e4:ed:c5:
                    2f:57:37:77:e7:12:ce:19:d9:19:ee:22:50:db:0b:
                    75:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:06:7A:43:2D:C8:DA:56:0A:1D:A5:09:68:A2:7D:82:65:BE:B9:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190/97f3c047-ad9d-3864-bb44-8047ef275c72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190/8a69f9d3-746f-47a4-971f-36ee3a52a190.crl

            X509v3 Authority Key Identifier:
                keyid:16:B3:E8:A9:FC:0C:22:F4:68:BE:86:8C:B0:69:47:3E:55:3A:B0:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.223.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:ad:35:98:30:d4:1d:82:9f:0b:a6:18:a2:e0:fa:50:b8:93:
         e8:c6:27:b5:c6:68:5f:cf:bf:7f:a8:13:45:09:e3:4e:95:31:
         2a:cf:29:f0:73:92:da:b7:f9:a4:16:33:36:48:f4:b9:53:02:
         79:ba:88:0c:53:30:5a:83:7d:03:19:03:e9:f3:ec:2c:d4:06:
         d8:a2:86:45:0c:d5:5f:b8:e3:44:a6:60:56:80:14:47:2c:5a:
         a9:fc:7d:f5:f2:bf:e2:64:85:fa:77:f0:f2:fe:8d:28:b4:cf:
         f9:20:0a:8f:91:9b:3a:7e:7d:cd:73:c1:cc:ec:ae:da:ce:a9:
         9d:5c:2e:94:d4:ec:c1:b0:87:d8:3a:d5:21:fc:2b:75:97:57:
         1a:83:21:9d:a6:18:3a:9e:1d:53:3e:16:af:4f:65:f2:91:2f:
         dc:72:f3:48:36:18:4a:2e:ca:78:ba:e8:ef:84:1d:fb:b1:a9:
         2b:80:59:5f:06:4d:41:42:17:cf:8d:5b:dc:f6:e0:fc:ba:ce:
         39:ed:0f:6f:16:ee:54:62:a9:ff:90:85:be:e7:f4:58:09:88:
         ce:77:80:45:8c:05:62:d0:78:a3:22:1e:fe:af:07:5f:43:e1:
         e7:fc:8e:41:34:bd:f0:20:f2:73:4d:87:e1:01:59:cc:6c:9f:
         1f:62:1b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----