Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/054cdec6-08ec-3e55-a0a5-b38bf468521f.roa
File:                     054cdec6-08ec-3e55-a0a5-b38bf468521f.roa (raw, json)
Hash identifier:          h2dbEx5q18u4CZxjivxoQFldt0hu//MunNBQYSwYxUo=
Subject key identifier:   93:BA:A7:00:12:9F:86:CD:FD:DF:F7:4F:11:F3:8A:EC:2E:A2:97:1E
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328576D51CC73C042CFC166A33F8D1A
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/054cdec6-08ec-3e55-a0a5-b38bf468521f.roa
Signing time:             Tue 23 Oct 2018 23:25:43 +0000
ROA not before:           Tue 23 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        76.223.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:a3:3f:8d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Oct 23 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=00a92079-4822-4e94-9e18-b895529d3617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ad:ac:f0:0a:41:12:46:48:d4:97:c7:b7:b9:
                    14:cc:6a:7a:c1:8c:08:b0:7f:e9:0a:fd:e4:3a:20:
                    61:d8:a1:dc:55:1a:90:9a:07:51:fb:6e:f4:5c:f8:
                    ab:a1:12:e8:d1:8e:9e:ea:e3:77:36:d7:05:de:cb:
                    30:bf:da:1f:20:8b:94:ef:05:9d:ec:45:7b:f3:75:
                    55:63:5f:9a:9a:13:6b:33:f2:de:43:ed:d9:b5:00:
                    cb:52:26:43:2a:ae:10:59:5f:c1:37:e8:2d:a1:c0:
                    af:5b:0c:58:f6:2a:e2:d0:5c:0f:48:57:2e:cd:ac:
                    e7:c0:b2:5f:39:d8:f6:8b:12:1e:a1:22:fb:d4:c9:
                    48:79:47:f0:a0:51:18:08:af:f4:ca:05:15:a9:8a:
                    2c:9f:2d:93:4f:4f:c5:9a:2f:6e:fb:26:ec:a6:13:
                    fb:11:13:7d:b6:e6:29:34:82:29:e0:5e:e9:7d:15:
                    66:17:46:cc:73:64:b8:98:4e:81:b4:52:c9:a5:e3:
                    fd:0b:3e:21:9c:71:6c:4f:13:5c:df:12:74:7b:a6:
                    1b:02:01:62:2c:3c:42:26:0e:27:3f:f8:d4:11:22:
                    8b:c5:df:8e:52:26:df:71:7e:03:cd:78:cf:fc:00:
                    76:1e:4e:03:0d:ec:22:84:ee:83:7e:54:4f:09:4a:
                    a3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BA:A7:00:12:9F:86:CD:FD:DF:F7:4F:11:F3:8A:EC:2E:A2:97:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/054cdec6-08ec-3e55-a0a5-b38bf468521f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:12:28:70:e2:de:b8:d5:5e:e7:24:73:79:a2:af:c6:1f:53:
         65:2b:6c:f8:f3:c8:56:80:74:22:b2:55:e8:60:dd:bc:dd:ee:
         61:81:8c:28:d1:11:38:1e:c1:df:62:51:a4:de:98:1b:a2:fe:
         f5:ba:73:ed:f6:ed:13:f3:80:d3:b3:93:24:6c:ea:b8:94:4d:
         c7:94:99:6a:92:f8:9d:7a:18:ca:00:b1:1d:72:83:d3:cc:27:
         a7:35:25:31:44:21:b9:a7:9d:72:3f:d8:ab:fe:0f:a7:d5:c3:
         9b:7c:42:5f:56:a6:81:09:64:a4:8e:bb:58:65:14:67:5f:f1:
         74:df:6a:20:05:ed:e7:ff:3d:b9:d3:bd:57:fe:d9:23:f4:59:
         50:37:05:7c:df:27:d4:48:85:19:20:dc:0e:c6:29:78:e6:61:
         16:48:3b:29:ca:fc:08:b8:a0:8a:df:d1:4b:a5:72:32:ba:ee:
         45:fd:9c:66:be:1c:f1:0f:36:36:db:6d:3c:92:8b:c4:63:89:
         04:b3:0d:fb:94:e3:c7:76:89:59:73:ce:36:12:c9:c1:fb:bf:
         d0:c6:fc:83:bb:c4:b3:73:1f:c1:fa:51:ea:8d:4e:5b:f8:c9:
         c7:2c:06:66:d9:b5:71:a0:a9:eb:35:16:7d:6b:e5:38:6f:3b:
         49:06:3c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----