Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/bc64d8ad-e9c4-3266-9d84-9209a721ecb2.roa
File:                     bc64d8ad-e9c4-3266-9d84-9209a721ecb2.roa (raw, json)
Hash identifier:          zkSylH04FQXpooortHwrn59U80WUjybH7JMyU9QacGc=
Subject key identifier:   CA:3D:EA:ED:FB:93:60:EC:AE:79:EF:23:A6:36:2B:5F:66:AC:1B:4B
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1669B67E0F9
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/bc64d8ad-e9c4-3266-9d84-9209a721ecb2.roa
Signing time:             Mon 22 Oct 2018 10:52:48 +0000
ROA not before:           Mon 22 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        76.223.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:9b:67:e0:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Oct 22 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=f40dc203-d86b-4138-9912-5f2c8d27c859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:13:9f:70:62:a6:f7:56:d4:cf:5e:0d:de:a5:
                    f4:c2:d3:8d:6e:ca:62:94:7d:8d:a3:06:8d:3c:56:
                    b6:62:d2:19:8a:36:dd:e8:ab:98:89:96:1e:0e:3b:
                    7e:d5:19:77:a8:34:2a:12:81:cf:d2:ae:44:6f:a9:
                    03:66:fe:7e:1b:73:51:a4:fe:ee:0b:e9:d0:6e:51:
                    22:17:fd:47:12:61:eb:96:2c:0f:a1:5f:e6:f8:80:
                    d3:4b:6e:ee:03:bc:2b:2a:7b:8b:7a:f4:03:58:c3:
                    c3:d2:d7:03:9d:02:78:58:14:32:0d:21:75:b0:41:
                    b4:f2:1b:53:53:f5:5e:88:5b:45:8d:cd:94:03:83:
                    cd:3c:15:6f:5a:94:b9:e8:1e:86:a8:48:d6:10:cd:
                    b9:f4:7d:f3:02:d2:be:82:f7:cb:30:ef:e5:45:59:
                    7e:c7:53:1a:c4:01:b7:93:e4:5a:7f:ad:19:17:94:
                    7e:b0:70:9f:b6:3e:d6:af:01:e9:be:12:f6:83:59:
                    38:90:b9:69:b9:0f:f7:7a:e0:9c:e8:50:f6:3d:14:
                    fb:d2:7b:d4:d8:27:e2:0b:b3:51:cf:c8:ac:b2:f6:
                    97:22:32:08:fa:54:c0:a4:c9:a6:99:0a:88:a6:cc:
                    82:ed:8a:6a:ab:01:b5:e9:ee:c8:27:ce:32:af:a9:
                    90:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3D:EA:ED:FB:93:60:EC:AE:79:EF:23:A6:36:2B:5F:66:AC:1B:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/bc64d8ad-e9c4-3266-9d84-9209a721ecb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:71:ab:e4:cf:bb:66:b3:ce:65:b6:2b:e5:cf:8d:d9:eb:96:
         99:d0:bd:62:42:31:1e:f3:f3:9c:d4:a4:0a:f0:cd:be:88:4e:
         3f:c5:eb:25:99:9f:0a:29:e8:dc:58:5c:71:2c:5d:4d:0c:30:
         f7:1c:a4:73:fa:18:5b:47:f2:7a:1c:3f:87:66:e8:f2:41:30:
         dc:5a:d4:4c:52:3e:35:a3:21:bb:ef:4e:44:41:5b:4e:df:53:
         be:04:2b:c9:77:b5:4a:27:f0:2c:f2:ca:87:35:d6:c6:52:cc:
         d1:32:b5:58:22:a0:f2:b8:91:ad:a3:d2:2c:94:b7:a0:e5:63:
         7d:9a:1e:91:2b:be:01:ee:9b:fb:83:39:27:54:57:9a:a9:77:
         8f:82:f9:13:14:38:76:0b:90:ff:e4:76:b6:de:ac:70:b6:97:
         d4:ae:0e:e2:43:28:cd:d6:eb:da:80:3a:8a:15:70:02:7b:79:
         f5:66:86:4e:a8:40:7f:bc:41:46:55:c4:42:33:8f:e7:73:8a:
         9b:2e:34:f9:f7:8b:38:8f:d8:d2:64:be:09:cf:da:44:78:f6:
         b5:38:51:72:d7:33:33:8a:09:e9:d1:2b:6b:b6:64:24:d7:46:
         5b:7d:2a:55:94:20:3c:f4:2f:5a:4d:c1:eb:88:a6:d1:d4:71:
         05:4f:10:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----