Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/44162361-4bb3-3a0f-931d-61d6dcaaa511.roa
File:                     44162361-4bb3-3a0f-931d-61d6dcaaa511.roa (raw, json)
Hash identifier:          OpOEslhq5O2/LwILZ6lfUxeggo8TsXrTT8GQtSOuGmM=
Subject key identifier:   88:AD:97:F2:7B:FE:66:AE:60:8C:E8:F2:0C:56:CE:6C:E4:C1:54:1F
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328576D51CC73C042CFC166A33F6B86
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/44162361-4bb3-3a0f-931d-61d6dcaaa511.roa
Signing time:             Tue 23 Oct 2018 23:25:34 +0000
ROA not before:           Tue 23 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        76.223.180.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:a3:3f:6b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Oct 23 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=b294e406-09be-429d-b0a8-ec73be711033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d5:22:f0:10:e5:26:8e:a6:63:09:c6:3d:99:
                    1d:cf:c9:68:83:59:4c:00:7b:94:31:02:5a:d2:e8:
                    89:72:dc:09:74:f0:21:fe:2e:42:54:80:9e:91:e2:
                    d3:c5:ca:6d:94:e0:2b:96:22:18:b8:e5:35:02:26:
                    fe:42:76:63:c1:c6:bf:1b:cc:bc:3a:74:a6:6d:74:
                    06:71:57:45:e5:e9:8d:d1:6e:48:33:dc:f8:81:23:
                    11:e6:2e:42:c6:95:44:71:04:6c:77:b3:20:d2:15:
                    03:71:f2:60:ed:29:83:9a:87:2a:91:16:c2:8a:93:
                    44:7b:f2:22:c6:00:cc:56:06:e2:6a:fe:e7:da:1a:
                    3d:bc:98:e5:60:fe:a5:a2:c8:6b:7a:96:6a:40:fa:
                    9a:e4:e1:e9:b1:44:a8:e3:47:a6:76:9c:ba:94:04:
                    50:0c:bd:74:5f:5e:bd:82:fc:db:34:f0:5f:22:3b:
                    ef:ba:1e:34:1b:7a:01:52:8b:18:7b:f0:c7:bf:e2:
                    8a:4e:5e:a8:76:9d:1c:59:f4:78:aa:7f:24:73:e0:
                    5d:27:61:b9:a1:2e:5e:12:02:95:71:97:c3:dc:30:
                    3f:ab:04:ec:e5:79:80:9f:de:47:0a:ed:37:a3:15:
                    b0:37:0c:e0:ca:e9:ac:70:bc:88:94:a3:7e:a0:fa:
                    41:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AD:97:F2:7B:FE:66:AE:60:8C:E8:F2:0C:56:CE:6C:E4:C1:54:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/44162361-4bb3-3a0f-931d-61d6dcaaa511.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:43:81:82:35:6a:cb:74:68:e8:93:c2:44:eb:01:b4:b0:53:
         a9:7d:6c:a5:2e:35:0d:56:93:46:18:1b:bf:e1:27:c8:a1:32:
         3c:3c:b1:0c:9c:b9:75:24:2b:42:72:a2:5c:a1:26:fc:b7:b3:
         aa:65:73:a8:c1:ad:c5:cd:a3:f4:1e:d8:7e:08:8f:5a:7b:7e:
         d1:5b:51:18:59:5c:f6:a7:9a:d5:a0:ba:9a:1f:36:5c:87:41:
         eb:41:a8:ae:3b:89:fa:f2:67:bb:e2:03:57:b0:1a:ec:70:8b:
         8f:4f:0a:d9:43:67:50:ef:0d:6c:53:5f:b9:06:e6:67:20:79:
         c7:b3:4c:70:c4:a0:36:43:95:9d:0d:59:c5:78:59:76:3d:92:
         c6:04:52:8c:04:92:6d:cd:6e:ec:f1:71:f2:4d:e1:15:47:d1:
         91:7b:a9:d1:71:95:c8:ef:2a:b9:9a:80:e2:fe:a7:d5:98:a8:
         c6:83:7c:3f:d8:52:f4:d3:c1:28:86:f2:cc:ce:01:51:03:b2:
         29:fe:75:a3:04:00:ff:78:02:be:97:48:df:a1:49:05:0d:08:
         52:ba:88:46:9e:52:b8:24:d7:cb:ce:31:ce:14:6c:63:36:7f:
         7b:43:26:9e:ad:76:fc:19:a2:15:2e:c5:c3:25:8f:a5:60:90:
         55:f1:61:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----