Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/57dfbc91-5d00-34c7-af8b-5ef88d82c381.roa
File:                     57dfbc91-5d00-34c7-af8b-5ef88d82c381.roa (raw, json)
Hash identifier:          vgpWGITCOfRJCZTnKEWxv28T4lr9GSmJAt9YNkXu0xs=
Subject key identifier:   29:7D:21:34:39:72:BE:3D:30:3B:3B:73:B0:8D:2B:CB:69:92:3E:34
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328576D51CC73C042CFC166A33F5A52
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/57dfbc91-5d00-34c7-af8b-5ef88d82c381.roa
Signing time:             Tue 23 Oct 2018 23:25:30 +0000
ROA not before:           Tue 23 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        76.223.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:a3:3f:5a:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Oct 23 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=93fae252-8f49-441e-aac8-0c8ecd6d98da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3a:7b:78:cd:cb:26:09:18:71:e0:b4:ca:00:
                    58:3f:af:bd:43:ba:c8:c3:67:0d:5b:a5:e9:4d:39:
                    af:58:5e:45:18:a7:02:c3:49:3c:e7:7a:7a:8b:45:
                    4b:8f:1a:a4:31:13:e0:3f:1f:3a:0d:a6:bf:80:59:
                    a7:04:d2:88:1c:8d:de:6f:dc:d1:b9:f2:26:8c:62:
                    42:db:41:ea:2b:da:91:4f:2d:89:53:fc:ea:7a:e9:
                    43:5f:51:56:58:2e:b4:57:af:84:65:50:6f:96:c6:
                    86:5a:b5:d6:8d:1c:63:84:47:b1:2c:3f:00:8c:72:
                    73:02:11:27:ad:02:6f:3a:4e:ab:f0:b6:34:cf:2a:
                    14:d2:8a:76:ad:4c:c9:0b:7b:56:d2:b6:b6:da:37:
                    b3:45:38:a0:16:fa:f5:81:58:8a:c6:51:97:3b:ed:
                    25:06:c0:0e:2a:bf:94:89:13:ef:ab:9f:04:92:08:
                    1b:2f:8e:d4:36:4c:e3:ca:2f:c0:dc:bd:6e:90:99:
                    76:4d:cb:21:ec:71:56:20:04:26:3d:ac:25:e2:c3:
                    e7:a7:71:4b:ea:32:14:af:2b:a1:42:5d:03:e8:65:
                    6e:09:05:ed:de:5f:5e:51:d4:35:1d:f9:a0:6d:03:
                    d0:bf:81:c4:87:9e:a3:ce:8b:28:ff:1c:49:bc:c2:
                    27:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7D:21:34:39:72:BE:3D:30:3B:3B:73:B0:8D:2B:CB:69:92:3E:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/57dfbc91-5d00-34c7-af8b-5ef88d82c381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:28:3b:98:54:97:48:1d:1a:c9:ee:1f:d3:e8:35:5f:01:5c:
         7c:49:98:1a:11:76:ff:d9:05:f7:97:f9:da:d0:32:dd:bc:15:
         7c:05:12:9f:5a:a9:73:6f:e2:52:70:2a:84:6f:bb:09:c9:ac:
         1d:9b:a9:98:49:52:f6:1b:3c:bc:82:37:29:ac:18:a0:0b:e5:
         73:9c:b8:bb:2d:25:e6:71:92:bc:fa:7b:f7:bb:75:8e:46:0d:
         ff:06:ab:77:ad:d2:f4:ef:6d:ae:27:dd:10:dd:06:b1:fa:df:
         d4:53:94:25:8e:28:f8:f1:1e:f1:93:e7:20:eb:0e:ae:84:e4:
         dd:a0:22:9d:05:7a:95:d6:3d:2c:d4:de:28:f0:ad:c4:ce:67:
         8f:ad:c0:52:e3:43:ca:fe:d9:95:e3:c2:e2:c8:f2:8e:09:a4:
         6c:96:74:7f:38:d5:19:83:fe:a3:59:e6:48:c5:e5:56:f5:68:
         56:c7:fc:33:88:07:d5:c1:ee:4c:97:ca:6d:c2:3d:dc:8e:69:
         6d:9a:98:c6:2c:26:93:67:37:7f:84:43:6a:34:41:34:dc:8a:
         d7:c3:30:3a:02:3c:2a:74:69:9d:90:37:d2:46:74:e2:81:82:
         a0:7e:b7:de:a0:33:f9:0e:59:ec:56:5a:b1:5b:51:6e:1a:42:
         dd:e3:19:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----