Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/c04e9cfd-d9a3-3620-9fd8-82fdd8e49154.roa
File:                     c04e9cfd-d9a3-3620-9fd8-82fdd8e49154.roa (raw, json)
Hash identifier:          gUf7/0lsbfDm0Y3fMomY/gnZ+GTXVfNyZwUqJO14/bk=
Subject key identifier:   6D:10:81:4F:6D:10:B5:7F:61:AA:46:AB:52:30:7A:92:72:C8:30:49
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328576D51CC73C042CFC166A33FB0C4
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/c04e9cfd-d9a3-3620-9fd8-82fdd8e49154.roa
Signing time:             Tue 23 Oct 2018 23:25:52 +0000
ROA not before:           Tue 23 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        199.127.232.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:a3:3f:b0:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Oct 23 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=1bb583ef-c45e-4504-9059-24b15bb70daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:35:40:b0:f0:01:97:92:00:93:08:9e:27:3a:
                    f4:89:15:25:f6:a9:ab:93:bb:8f:63:50:19:a7:7b:
                    ce:69:64:5a:3d:a7:8d:37:18:e5:89:f9:52:a6:1f:
                    a4:ea:0b:42:bb:c8:eb:3f:27:90:63:59:b7:3d:0c:
                    29:10:aa:ea:8b:d2:d9:33:5e:e4:75:aa:a3:08:b4:
                    b8:31:e1:b8:4a:7a:f0:82:2b:c4:60:68:bb:90:66:
                    fe:8f:dc:9c:ae:1b:db:3f:8e:38:a0:f1:2f:47:e8:
                    52:08:1f:0e:66:f5:78:72:76:da:2f:d8:a0:cc:84:
                    14:d6:b6:1d:10:96:7e:34:c9:82:23:32:4a:41:a1:
                    48:96:b9:c0:65:ab:b1:65:4e:3e:63:03:ee:f5:65:
                    c9:04:da:40:d6:47:07:36:19:e8:6a:11:8c:b0:0d:
                    81:05:1e:40:81:75:f6:75:84:1b:08:62:b1:71:28:
                    ed:8d:5b:b1:d7:4e:69:fc:83:3c:12:2f:98:86:09:
                    d5:60:15:49:32:34:81:b2:0a:3f:96:55:1e:04:5c:
                    2e:c1:ee:08:ce:77:65:14:b0:30:fd:d6:73:e2:70:
                    40:14:9d:cf:2d:68:88:da:9a:f1:7a:b2:47:3a:f6:
                    87:aa:f6:2b:e9:5f:3b:ff:d0:0f:03:0e:81:68:b3:
                    d5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:10:81:4F:6D:10:B5:7F:61:AA:46:AB:52:30:7A:92:72:C8:30:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/c04e9cfd-d9a3-3620-9fd8-82fdd8e49154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.127.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:cc:7c:be:c0:3c:14:f0:84:92:18:f3:3f:f5:ad:c7:d9:bf:
         78:d3:1e:53:91:bd:b4:09:ee:3d:f0:49:fc:c7:3f:18:97:09:
         b0:55:bc:4e:b1:9e:66:ed:52:27:af:a9:9e:1c:6d:e0:d7:37:
         33:54:4d:60:01:1e:19:8a:fa:80:05:41:90:de:49:8a:17:ae:
         0f:f3:4b:df:f0:94:97:97:d4:18:2f:97:fc:f2:18:b5:b2:51:
         fe:04:46:a9:51:29:1c:ad:6c:68:cf:2e:d9:f5:db:3c:4b:82:
         4a:19:b3:02:17:ec:4b:b1:02:2f:dd:2a:ac:b8:90:9a:ab:23:
         a0:dc:f2:ff:47:67:7a:6c:0e:d6:94:d8:81:fd:ec:92:ba:f5:
         13:9c:55:5f:43:0a:67:28:0e:e1:35:1d:0c:d5:4b:4d:d6:63:
         32:6f:ad:0a:44:12:ed:1f:6b:a9:41:c9:67:9f:b5:c7:6e:86:
         ff:c1:4b:ed:66:56:6b:40:d5:b6:79:bf:e7:a7:d4:d9:d0:30:
         5a:57:53:3e:e6:4a:7d:64:3b:3a:fb:c7:cd:80:e0:e3:ea:74:
         fd:64:1f:25:d0:ae:7b:48:5e:d8:fc:85:4f:f9:22:37:69:78:
         ad:38:d0:ae:6d:bb:87:82:be:ed:7c:5f:88:16:a3:5f:02:f7:
         73:72:36:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----