Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/6b999bb3-1672-3b72-a4cc-c79462864ca7.roa
File:                     6b999bb3-1672-3b72-a4cc-c79462864ca7.roa (raw, json)
Hash identifier:          gyFM2uiyOsBl5CxwFB5ErTcgAPglwU/+w8EP5P6SsAc=
Subject key identifier:   20:69:4E:A9:56:9A:66:D1:B3:69:AC:B5:7A:EA:55:D4:9E:81:AA:EC
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328576D51CC73C042CFC166A33FA965
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/6b999bb3-1672-3b72-a4cc-c79462864ca7.roa
Signing time:             Tue 23 Oct 2018 23:25:50 +0000
ROA not before:           Tue 23 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        76.223.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:a3:3f:a9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Oct 23 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=eb7c52e8-2915-4df4-bccc-f2d37529c2de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ab:6c:47:f3:53:d7:38:eb:c7:a2:44:ae:ec:
                    3d:a9:68:b4:0c:0c:e4:ab:57:bc:0e:e6:3f:e3:a1:
                    a7:2b:91:65:34:a1:e0:f3:bc:b4:5f:dc:35:61:dd:
                    61:0e:3d:32:57:f6:20:f5:dd:97:8c:19:45:f8:da:
                    51:d1:8d:0d:39:f0:83:71:5a:5e:35:c9:57:c0:2c:
                    bc:36:a7:07:09:24:f4:63:4d:1b:9d:0f:f2:fe:3b:
                    b1:9f:5f:fb:50:28:78:2b:3f:8e:98:df:f5:2b:a7:
                    f2:cf:a5:10:a4:54:60:e6:fc:5e:da:a9:8e:04:f0:
                    bc:2b:3e:15:4e:7f:06:0e:0c:db:01:12:c4:50:b2:
                    46:f3:f7:05:8d:e6:72:a7:a2:83:cb:cb:8d:7b:6c:
                    17:73:4c:64:6f:a6:44:79:b1:f0:da:aa:cd:7d:0d:
                    23:42:8a:99:5d:a0:95:60:c8:56:d5:51:e3:c5:9e:
                    e6:80:76:d4:67:7e:0c:e8:21:13:f8:a3:a1:8c:5a:
                    23:5b:13:93:f7:c1:63:81:90:12:cd:cf:bb:b0:89:
                    78:74:9f:9a:40:11:f2:68:78:61:6c:c6:c0:32:16:
                    e8:15:23:48:51:7b:cb:f5:58:3b:c1:54:94:0f:3c:
                    69:4e:1f:d5:90:c3:98:75:70:c4:f5:00:6a:10:31:
                    1a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:69:4E:A9:56:9A:66:D1:B3:69:AC:B5:7A:EA:55:D4:9E:81:AA:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/6b999bb3-1672-3b72-a4cc-c79462864ca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:d6:82:b4:2a:3e:d6:f7:9f:03:96:da:52:da:ea:bc:cb:5d:
         8d:1f:b4:37:54:fe:7b:c4:3f:d5:a7:46:8b:df:03:04:eb:f9:
         70:57:ec:8d:ee:c4:cf:bc:88:b3:30:73:27:b9:91:c7:32:18:
         47:10:ce:c0:99:53:6a:e4:24:81:d2:ed:d1:37:8e:5e:cb:a1:
         d8:c7:d1:17:f9:b4:2c:d6:bc:a1:fa:77:3b:a7:46:e6:f8:41:
         58:05:3a:c7:ca:dd:4f:0b:5d:dd:59:ef:16:f6:77:d9:a3:2e:
         6a:09:97:31:96:35:72:6e:57:73:06:b1:02:14:b7:44:7f:00:
         c8:db:5e:6d:f5:fb:1d:39:96:6d:2a:29:3f:ca:a3:d5:ec:cb:
         75:03:7c:ee:de:74:18:ee:c3:03:5b:19:6c:50:47:ca:5c:3c:
         12:2f:9a:98:bc:1f:ec:63:c9:e5:a0:56:2d:0a:1b:30:bb:06:
         d6:a5:86:26:87:b1:cf:c3:cf:c3:f3:d6:f1:a4:59:42:4a:a2:
         44:06:d0:45:2e:aa:1a:9a:c5:b8:a5:c2:e8:d0:75:da:9e:89:
         9b:2c:dc:07:78:3f:6d:15:f0:03:8b:3a:df:ed:45:d1:9d:54:
         d6:2d:4c:31:87:c3:b8:90:76:b2:4b:c1:ab:8b:83:7d:98:16:
         4a:14:25:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----