Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/9a6080b9-6a76-3b86-a020-a12ca6c0fd8c.roa
File:                     9a6080b9-6a76-3b86-a020-a12ca6c0fd8c.roa (raw, json)
Hash identifier:          bNsUsOKJmUqHG4Tj3pUSJ3D0FVTKO+t0L5IkUeNwLeI=
Subject key identifier:   72:35:23:FB:2F:A2:F0:C5:7F:AE:C0:E5:98:07:AA:26:A1:45:36:F0
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328576D51CC73C042CFC166A33FB8C5
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/9a6080b9-6a76-3b86-a020-a12ca6c0fd8c.roa
Signing time:             Tue 23 Oct 2018 23:25:54 +0000
ROA not before:           Tue 23 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        76.223.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:a3:3f:b8:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Oct 23 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=111bdcfb-0c4c-4093-9d7d-8172c1343ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b6:33:32:5c:fb:58:09:fc:66:7e:1a:61:5a:
                    05:7f:47:c0:64:08:dd:c7:86:bd:1e:c3:62:78:2d:
                    ed:de:3a:dd:0e:3d:a6:16:84:b7:c9:0b:92:7c:a1:
                    d0:f5:34:b7:ce:f1:5b:ec:de:19:11:0c:72:f6:3d:
                    c7:9c:1e:a4:92:31:7f:e5:e6:6b:93:34:07:69:0d:
                    85:a2:b5:60:4d:74:5a:fd:f9:de:40:7e:30:26:c0:
                    3e:11:30:40:0d:2d:54:03:4d:dc:19:30:68:0b:a9:
                    2d:88:45:94:99:97:ab:51:50:a5:4e:a2:23:38:c9:
                    8f:c4:5f:a0:c3:23:bc:c0:96:bc:16:ad:08:ad:f4:
                    ae:cd:7a:ed:3b:25:3c:39:6e:83:39:ad:74:95:c2:
                    bd:78:23:9a:dd:c7:3b:57:35:cd:5e:56:fe:14:17:
                    ca:ef:20:13:44:68:78:e8:b6:89:07:eb:20:d3:f0:
                    ca:1e:80:aa:84:4e:ac:04:f6:18:b8:f5:04:8e:6d:
                    2b:27:2a:cb:28:f0:6b:d7:c5:bd:c3:c4:48:23:30:
                    c0:cb:b8:51:1e:62:9a:4b:c0:78:b1:1c:0c:43:ea:
                    3d:a6:38:f4:aa:aa:3f:02:68:5b:99:e5:ea:a3:16:
                    7d:73:25:cc:2b:1d:77:69:28:86:5c:94:70:8f:9f:
                    b8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:35:23:FB:2F:A2:F0:C5:7F:AE:C0:E5:98:07:AA:26:A1:45:36:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/9a6080b9-6a76-3b86-a020-a12ca6c0fd8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:60:15:15:e7:f3:93:b5:2c:21:45:f7:00:a3:90:e7:74:bb:
         34:20:d7:54:8e:f6:24:d0:3c:3a:2c:cf:cd:2e:b0:fc:dc:fa:
         16:d7:5b:6a:05:8d:dd:a4:02:1e:0f:c4:9f:5a:20:34:47:ff:
         da:b6:63:c7:14:6d:f0:ae:8b:19:bd:35:5f:c7:2e:62:10:63:
         97:b9:6a:32:10:2f:f1:41:28:94:ae:08:7f:4d:78:5d:11:5e:
         06:e5:ed:57:28:8c:af:10:8a:1d:6b:25:f0:60:42:a9:b5:4c:
         48:fd:ee:d1:54:db:fb:9e:69:72:f2:83:f5:8a:b4:a4:d3:26:
         be:aa:ff:6a:f6:0c:57:c8:1c:ee:63:b8:32:a4:c1:02:d5:7b:
         dd:10:fb:eb:a6:02:9f:03:ab:68:e5:b6:07:11:e3:57:63:9a:
         29:13:a4:28:e8:95:9e:b1:90:e7:ca:9c:c0:d9:61:93:35:e0:
         63:b2:cc:1f:5a:71:78:c8:23:21:55:dd:22:39:fc:ce:e4:43:
         ea:ed:16:fe:87:73:bc:5b:0d:92:22:86:56:88:e3:d9:6a:d8:
         7d:68:ba:23:82:cf:8a:83:a1:e1:16:5b:ef:70:59:85:d2:3e:
         75:ed:78:8f:4c:93:93:23:43:04:7d:7e:d8:ce:a4:dc:b0:a0:
         8a:56:76:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----