Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/efced040-849f-394d-90f8-317617c285d6.roa
File:                     efced040-849f-394d-90f8-317617c285d6.roa (raw, json)
Hash identifier:          gMINLIE/yMumnUBT0Tm5peTWTsxwkd8BJaxI9BgoIlU=
Subject key identifier:   13:3D:4A:3F:51:9C:85:15:2B:B4:F9:F5:85:53:89:60:20:9F:50:BF
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1669AE02475
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/efced040-849f-394d-90f8-317617c285d6.roa
Signing time:             Mon 22 Oct 2018 08:24:32 +0000
ROA not before:           Mon 22 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        76.223.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:9a:e0:24:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Oct 22 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=cece5e83-a0ac-4221-bc4a-be5455f454e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0e:79:0a:91:0f:64:4f:0a:32:03:11:a5:2a:
                    c8:10:ef:60:1e:41:e0:11:8d:95:fa:f5:aa:fb:d9:
                    bc:6e:7f:4c:2a:8e:cb:7d:5a:71:be:5e:ba:23:63:
                    00:ef:f6:af:e2:cb:e0:84:50:28:ab:2b:2b:60:b6:
                    e8:39:4b:01:56:1f:d9:26:2a:c6:17:da:52:e2:09:
                    2e:6e:1b:db:b2:2e:43:f2:44:25:96:b1:ba:67:54:
                    9d:80:cc:f6:02:1a:49:75:19:1e:7f:b4:dd:54:7c:
                    fd:63:0c:00:42:50:7d:89:ca:d2:52:26:da:ea:2e:
                    fc:08:58:b4:6a:62:76:6c:21:8c:c9:97:50:b2:54:
                    bb:97:05:2c:18:b3:8a:47:80:e1:1d:fe:88:01:2f:
                    50:38:49:0a:91:7d:b2:98:04:79:4b:2a:6c:61:81:
                    4b:70:cf:b1:3f:1f:a1:2c:d4:62:87:13:ba:fa:11:
                    eb:5d:82:cb:0b:46:9d:1e:8f:0e:35:71:9f:a8:68:
                    5c:a6:ff:2f:3d:f6:12:21:df:37:55:ab:15:5f:71:
                    1e:27:05:d9:65:f7:fe:e2:72:3f:04:e6:0b:e7:25:
                    0f:cd:51:47:c0:72:dc:8f:c2:09:0c:7f:86:04:85:
                    db:dd:dd:47:de:b1:28:22:a2:42:ab:f0:36:30:94:
                    e7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3D:4A:3F:51:9C:85:15:2B:B4:F9:F5:85:53:89:60:20:9F:50:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/efced040-849f-394d-90f8-317617c285d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:76:38:fc:01:d8:79:03:dc:3a:8a:d2:99:f5:87:55:86:61:
         04:db:70:39:d9:ae:72:95:50:59:86:94:2d:58:39:f9:ef:e2:
         68:bb:8e:90:67:9b:82:d7:96:d5:ba:db:7b:17:49:24:c1:70:
         3c:97:76:43:7d:51:63:59:dc:6b:40:0d:cc:a6:2a:32:76:15:
         84:81:40:64:77:ef:2f:8e:4e:fd:4f:de:7a:b3:1f:01:a9:a5:
         7e:25:73:79:c6:6c:08:f1:01:8b:9d:de:45:ee:7d:e6:1f:4a:
         7c:cf:2e:d9:3f:b1:87:68:94:1a:c2:14:0d:f0:e6:a1:da:c2:
         19:eb:7b:c7:b9:31:a3:d9:ca:b4:da:55:69:74:dc:e1:07:05:
         93:20:c4:9d:cc:2f:81:ca:2d:09:d2:77:6c:53:6d:20:0b:f9:
         29:d9:a0:bb:38:47:5f:41:1f:52:df:ad:e5:b2:93:da:ff:6d:
         97:f8:73:30:ef:70:3e:e7:46:68:36:0f:35:54:be:ac:66:fd:
         74:1f:7a:66:37:c8:4d:0d:05:3e:7d:c7:25:d8:bb:6c:e8:6d:
         4c:d8:35:be:5e:92:75:05:87:98:44:77:21:4c:86:45:7b:8d:
         2e:2e:01:55:6a:f4:df:92:6a:9a:8c:9f:3c:1c:a2:b4:1d:36:
         d0:74:87:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----