Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/321cd580-eb98-336a-940f-1191dbd0cd56.roa
File:                     321cd580-eb98-336a-940f-1191dbd0cd56.roa (raw, json)
Hash identifier:          AyO4pH8IFsxZ1ST4DKjHvAxEUdDwK+b9my61uhcWXbw=
Subject key identifier:   47:4B:34:CD:5F:80:CA:2F:35:35:23:1C:5D:99:70:BC:29:5F:EA:6D
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328576D51CC73C042CFC166A33FC215
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/321cd580-eb98-336a-940f-1191dbd0cd56.roa
Signing time:             Tue 23 Oct 2018 23:25:56 +0000
ROA not before:           Tue 23 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        76.223.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:a3:3f:c2:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Oct 23 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=51355710-a2fb-4c0e-b7ba-757b5b881374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bb:30:43:b1:98:28:dd:8a:61:d4:70:ec:db:
                    81:1e:b8:b7:53:40:b5:c7:6c:01:1d:dc:48:f3:ec:
                    3a:08:97:52:c3:69:fb:d0:44:66:a6:f6:4e:a8:c4:
                    9d:61:7b:1c:b6:5a:89:07:fb:aa:e9:70:4a:94:48:
                    af:97:c6:e2:d3:6c:a3:41:65:b4:73:3a:5c:35:6c:
                    a8:bc:6a:e8:ea:13:a9:86:83:5c:54:2d:1c:6c:4d:
                    f9:5d:62:79:64:2a:e9:40:d6:d0:56:70:1f:e7:5d:
                    c9:e4:6a:b8:e7:84:a2:24:60:38:d3:15:1c:e9:74:
                    79:92:34:de:fc:68:61:76:aa:f2:6c:ae:52:cc:11:
                    74:47:22:d2:85:dd:d8:68:71:b9:76:3f:ad:77:df:
                    5a:2c:91:95:e2:e8:77:dd:1c:b2:58:72:d9:30:56:
                    1c:22:7b:5d:03:f5:e0:a5:d9:98:be:4d:ea:71:0c:
                    60:8f:37:b8:d3:98:e7:f0:23:c0:74:8e:94:82:57:
                    60:cf:a0:f0:27:5d:48:96:26:d8:1b:2f:06:39:89:
                    9a:db:6a:48:7c:aa:61:da:c2:da:30:03:fb:57:68:
                    da:b1:1f:14:7c:3f:6b:d5:0b:45:58:66:7d:1b:6b:
                    eb:80:43:90:a8:2d:3b:ca:eb:34:59:05:e7:d5:91:
                    96:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4B:34:CD:5F:80:CA:2F:35:35:23:1C:5D:99:70:BC:29:5F:EA:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/321cd580-eb98-336a-940f-1191dbd0cd56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:16:a7:3d:e2:fc:b9:66:65:86:b0:f1:55:9e:94:d8:30:16:
         90:dd:74:8a:f0:7f:28:15:4b:b2:c2:d2:7c:9c:56:ca:c0:99:
         21:0a:e3:8c:4a:88:66:ec:9c:a8:3c:9d:68:12:5d:d2:82:78:
         3c:5d:23:12:a4:4a:40:f7:67:6b:ad:f1:b9:a5:30:5a:8b:d5:
         dd:20:0a:09:1c:a3:bc:6e:e2:d5:be:c7:08:11:4e:0a:7a:fa:
         4a:ac:e6:ef:73:e9:ba:59:57:f5:af:af:d6:98:7b:af:0c:a5:
         5f:34:4d:8b:66:01:03:bf:05:57:09:5e:2a:fe:36:28:33:79:
         b4:c2:b4:ba:a5:1f:82:48:e4:5b:e5:90:02:39:50:43:b9:62:
         0e:36:a3:a2:30:df:a6:b7:3c:f9:9b:af:dc:ff:d4:df:04:35:
         fb:3e:f9:f0:19:97:47:e7:5c:fa:92:43:38:3d:d9:3a:1a:9a:
         82:00:c1:3b:59:91:db:5d:ba:49:82:72:d4:fe:b5:57:70:8c:
         c3:5b:94:3c:76:04:78:82:1d:71:c3:15:d1:31:46:b6:8e:7d:
         75:fd:5e:58:af:b2:53:d5:b2:29:8e:48:3d:c6:3a:fe:9a:eb:
         01:78:df:ac:08:21:51:3b:42:00:65:b7:3c:7d:49:7e:31:ca:
         7a:54:31:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----