Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/0fec4191-cb7f-3697-97b6-b7ff9d3cf50b.roa
File:                     0fec4191-cb7f-3697-97b6-b7ff9d3cf50b.roa (raw, json)
Hash identifier:          vU7I6xrj/elTAVvf6chx4TVY6list0akpKsIHvTUcPM=
Subject key identifier:   26:1F:E1:77:70:87:74:A8:77:C8:32:65:C8:A4:DA:C3:D4:6E:5E:C4
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1669AE011C0
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/0fec4191-cb7f-3697-97b6-b7ff9d3cf50b.roa
Signing time:             Mon 22 Oct 2018 08:24:27 +0000
ROA not before:           Mon 22 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        76.223.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:9a:e0:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Oct 22 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=3381e046-354b-4fdc-8286-fa309b2798da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:af:1e:97:d6:a3:8f:78:38:4c:3e:f9:bc:d1:
                    6f:46:d2:ca:59:71:5d:17:7d:66:c5:63:50:9e:4a:
                    12:06:e8:4d:e3:6e:f1:80:df:a5:61:ba:c1:fb:a9:
                    e6:11:9a:2c:a0:f7:d5:de:42:42:04:a3:2e:c0:5c:
                    31:58:05:26:1e:59:5e:26:8a:a0:8a:2f:61:bf:80:
                    c1:62:28:9f:9d:03:fa:7b:92:72:f1:88:74:f0:a9:
                    21:03:86:1b:4c:5c:b8:35:8c:ea:7f:16:48:b2:fe:
                    82:84:1f:36:63:2a:35:91:76:4a:19:7e:ac:31:6e:
                    48:e9:20:f0:8e:b2:cf:d5:22:24:97:f6:95:99:ea:
                    ce:82:cd:fd:f9:ae:e1:7a:5e:5e:a0:75:3e:7c:22:
                    ea:ed:4c:71:7e:94:7a:21:ec:1e:6f:10:6e:01:e4:
                    e5:d9:b7:68:e8:60:f6:ca:3e:68:7f:af:e4:ed:5b:
                    b8:e6:b4:36:60:df:91:27:d3:12:94:75:ce:1b:2a:
                    3d:66:3d:72:53:13:33:31:4d:0f:dd:5c:46:32:ac:
                    7e:4b:10:4b:e6:da:21:68:87:72:d8:ac:57:4f:c9:
                    ec:b6:84:d0:4f:12:73:ba:59:9a:79:e7:4e:1c:33:
                    72:3b:f1:34:19:63:e9:cf:df:5d:14:66:d2:07:81:
                    b4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1F:E1:77:70:87:74:A8:77:C8:32:65:C8:A4:DA:C3:D4:6E:5E:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/0fec4191-cb7f-3697-97b6-b7ff9d3cf50b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:bc:c1:f5:26:21:58:9e:46:66:e9:36:7c:de:de:de:fc:b4:
         17:41:40:f9:4e:f8:8f:e8:c4:1b:7c:91:45:fc:1d:df:3f:97:
         ec:fd:d1:4e:df:11:b2:32:b1:46:87:ce:5c:10:0d:3e:9c:c7:
         11:8f:ec:2c:0d:36:8a:84:61:a0:79:45:48:d0:3b:4c:6e:93:
         61:2f:6f:8b:83:24:0b:7b:9c:75:bf:5b:8b:cb:60:47:d3:87:
         c3:32:b4:12:01:1c:68:3c:ac:8e:5c:9b:bb:b7:a7:d7:83:da:
         ac:55:e8:e0:d5:1e:48:17:81:4c:87:6f:28:f1:51:f0:58:7f:
         d8:a5:e4:86:47:6d:3b:b5:bd:c7:b2:56:1c:33:5e:c6:b8:4a:
         45:63:ee:64:a6:ac:64:15:69:09:a4:45:b3:59:31:05:d7:e4:
         1a:b4:ff:86:08:3b:f3:be:39:62:69:9a:4d:62:02:14:d6:22:
         5a:ee:f2:e9:5d:d2:b3:81:ca:64:46:b9:87:08:a0:d9:12:8d:
         39:e4:8a:08:e9:6f:08:9f:30:ff:c2:18:d8:fb:2a:11:d6:68:
         81:03:a9:f7:02:64:c5:ec:30:99:a2:08:05:84:e1:ad:d1:6c:
         58:f7:58:28:7e:4b:1b:f9:0e:05:62:fe:3a:b8:cc:ed:50:2f:
         af:bc:a2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----