Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/9a530ff6-2bc0-36ba-80e9-65a8d32132e4.roa
File:                     9a530ff6-2bc0-36ba-80e9-65a8d32132e4.roa (raw, json)
Hash identifier:          3brSxAm4fHY3Rh4U70ROYGghispInVNOCv4dvNnvYr4=
Subject key identifier:   B0:44:C0:52:D4:45:53:35:05:C7:9D:45:73:79:76:AE:20:C1:A1:5F
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328576D51CC73C042CFC166A33F7BF3
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/9a530ff6-2bc0-36ba-80e9-65a8d32132e4.roa
Signing time:             Tue 23 Oct 2018 23:25:38 +0000
ROA not before:           Tue 23 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        76.223.180.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:a3:3f:7b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Oct 23 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=9e8e584d-26b8-4529-b45b-22d190da53c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:89:58:70:1f:c4:85:a8:99:0b:d1:56:b9:48:
                    20:03:c2:39:18:27:96:1d:75:0e:f6:32:93:53:07:
                    2d:69:57:53:ab:5e:ef:11:aa:16:01:00:92:06:6f:
                    0a:37:d2:a4:75:08:ab:d2:46:3e:cd:ac:5f:de:59:
                    45:18:0b:37:eb:6b:18:ea:10:70:57:2d:51:15:26:
                    12:c3:6f:d3:18:1d:d2:55:bc:71:a7:9a:1a:1b:02:
                    9a:07:4a:c3:fb:3f:c8:8b:01:72:a8:0c:b3:f5:e4:
                    34:5a:0d:cc:7b:a0:67:48:77:cd:46:c2:6b:01:b4:
                    3e:f5:0f:91:de:60:25:e9:1b:cd:60:e3:32:71:b8:
                    e8:5d:37:d4:9e:d0:d1:a0:a9:30:d9:17:00:26:51:
                    ac:36:47:36:aa:79:dc:42:ee:cc:59:db:54:1b:18:
                    3e:be:dc:ad:7c:ea:f2:e8:20:ba:fd:b4:b5:84:34:
                    62:53:d0:0d:a2:fd:ae:70:b6:ce:ed:7e:a2:fb:39:
                    ea:72:e0:e2:c2:c7:e9:66:81:91:c9:5f:f1:64:52:
                    ff:50:18:e9:de:b6:c7:eb:2c:8f:62:d8:bb:38:27:
                    e2:66:7c:00:b3:fa:43:5c:93:1e:8d:92:13:df:6f:
                    32:aa:22:9d:e7:9a:d6:c8:49:f7:20:79:4d:0a:8a:
                    68:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:44:C0:52:D4:45:53:35:05:C7:9D:45:73:79:76:AE:20:C1:A1:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/9a530ff6-2bc0-36ba-80e9-65a8d32132e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:1c:6e:fb:8d:c4:dc:eb:f0:47:84:86:22:b2:4a:91:28:2c:
         7a:c7:73:5e:0d:20:76:82:d5:d3:80:44:b3:77:9b:e0:24:6b:
         64:d0:a3:c7:dc:e6:ff:13:4e:0b:cb:02:14:07:26:3b:1f:6d:
         ba:bb:ea:62:da:8a:6d:97:7b:6b:2d:d5:0b:52:1f:47:6b:ba:
         b5:81:9d:8b:34:5e:25:e5:1b:95:c7:b7:74:54:0d:b1:35:a0:
         dd:8b:9a:c8:37:f2:b7:8b:55:24:43:b7:43:83:4c:68:8f:2e:
         7c:ad:d8:a7:b7:71:54:51:ad:aa:09:fd:b5:9a:15:86:bf:3e:
         d0:bf:02:9d:cb:20:d3:66:9d:9a:f8:22:91:e2:2e:56:3b:3f:
         6d:9d:85:1e:fc:6e:bb:cc:af:00:d8:7d:70:a1:69:5e:d6:77:
         1f:68:70:06:8e:f4:f0:8d:fd:18:02:5e:4b:6b:68:a5:93:3c:
         2b:78:72:e0:76:ba:04:d2:26:fa:b7:06:47:a5:27:af:b3:21:
         a1:72:d0:95:4c:6b:87:a3:14:e1:4a:66:92:6e:8a:9a:6b:02:
         7f:6d:02:a7:6c:80:ee:0d:cb:42:2a:35:00:bf:e7:f2:d0:7f:
         9a:c2:db:ed:b0:25:71:a2:d8:1b:8e:3b:b0:4f:cd:d8:4d:3c:
         66:e6:c6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----