Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11cddc66-c1b2-4bbb-a5ef-e3a08f499f72/2dc909f0-df84-34d9-9d05-1fd1a8c1151e.roa
File:                     2dc909f0-df84-34d9-9d05-1fd1a8c1151e.roa (raw, json)
Hash identifier:          PJiQigJ6xJRj6Ve8YCtpUjYD8WbhkRFWOMWDc+Yzei4=
Subject key identifier:   99:8B:49:AE:05:6F:9D:D4:3A:76:77:2C:8A:7E:33:4F:86:EB:51:57
Certificate issuer:       /CN=11cddc66-c1b2-4bbb-a5ef-e3a08f499f72
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732AC28070
Authority key identifier: 26:BD:7C:37:C9:22:3B:7A:6E:21:EE:5B:31:30:43:2C:9E:0D:10:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11cddc66-c1b2-4bbb-a5ef-e3a08f499f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11cddc66-c1b2-4bbb-a5ef-e3a08f499f72/2dc909f0-df84-34d9-9d05-1fd1a8c1151e.roa
Signing time:             Tue 07 Jul 2020 19:30:56 +0000
ROA not before:           Tue 12 May 2020 04:00:00 +0000
ROA not after:            Mon 10 Oct 2022 04:00:00 +0000
asID:                     32261
IP address blocks:        139.177.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2a:c2:80:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11cddc66-c1b2-4bbb-a5ef-e3a08f499f72
        Validity
            Not Before: May 12 04:00:00 2020 GMT
            Not After : Oct 10 04:00:00 2022 GMT
        Subject: CN=3ff8c979-6576-49a3-9543-d4fe0ed36452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3b:7f:b2:42:e7:9f:21:47:70:de:b1:a0:6c:
                    2b:3e:dd:a9:bb:97:eb:0b:cd:a2:8e:8f:af:2a:83:
                    4f:26:2d:48:9f:0b:7f:c8:24:af:c9:dd:81:eb:7a:
                    9d:68:fc:78:79:b8:9d:98:5a:49:e5:17:b4:5f:85:
                    6d:a1:1a:bd:cc:0a:e3:71:3d:ef:e5:13:e0:7e:15:
                    cc:e7:b6:59:3b:fd:a2:20:00:07:b0:31:db:ea:25:
                    f2:de:a9:38:44:31:4c:10:05:07:ec:82:9c:0f:c5:
                    96:80:79:eb:28:2a:9d:a9:cb:4d:19:a8:53:a7:e6:
                    72:6f:0b:b6:39:c9:b1:16:0f:fe:e0:e7:62:a5:47:
                    bb:42:df:e0:60:a4:d6:89:0b:f2:e9:cb:ef:43:93:
                    90:72:c6:cb:85:d3:ed:c8:55:b3:af:f3:7c:ce:e6:
                    6d:e4:19:05:1f:2e:e1:9b:55:ca:ee:14:76:9e:fa:
                    be:dc:b2:b1:51:7e:d5:df:19:7c:28:27:52:9e:18:
                    45:3f:3c:bf:d5:ea:c8:b0:9e:62:1b:a8:97:52:f7:
                    29:bd:eb:02:9a:61:78:ab:43:3e:8f:82:f6:17:47:
                    d2:8a:fe:51:b6:d2:c7:6f:96:67:1c:91:3d:28:bd:
                    de:36:5d:f0:91:9f:0c:2b:b3:07:98:62:f7:ae:24:
                    a6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8B:49:AE:05:6F:9D:D4:3A:76:77:2C:8A:7E:33:4F:86:EB:51:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11cddc66-c1b2-4bbb-a5ef-e3a08f499f72/2dc909f0-df84-34d9-9d05-1fd1a8c1151e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11cddc66-c1b2-4bbb-a5ef-e3a08f499f72/11cddc66-c1b2-4bbb-a5ef-e3a08f499f72.crl

            X509v3 Authority Key Identifier:
                keyid:26:BD:7C:37:C9:22:3B:7A:6E:21:EE:5B:31:30:43:2C:9E:0D:10:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11cddc66-c1b2-4bbb-a5ef-e3a08f499f72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:1b:f0:c2:b0:24:49:0e:7b:25:e9:4f:f1:c3:3a:ea:da:00:
         3e:4c:1b:59:2d:70:f5:0a:00:d2:9a:bb:44:a9:03:83:3f:8a:
         9f:b8:18:09:b4:61:da:1f:86:0b:65:9c:e9:ba:86:e1:6b:f8:
         f8:e8:82:74:c0:8e:94:80:f6:1d:42:78:51:22:8b:c2:e0:dd:
         52:3a:70:28:d6:9e:51:a2:cb:ec:ca:5b:e7:9e:ea:dd:dd:ee:
         3f:fe:5c:72:73:1a:ad:a1:31:c5:b9:d5:35:a3:99:f7:d6:ae:
         d9:39:34:5a:41:8e:f6:03:67:8f:27:77:14:ba:fc:f1:c4:7f:
         47:e4:72:6a:ca:22:e9:ff:72:a7:e3:59:68:52:fc:b7:52:e5:
         22:1f:ad:6a:7e:90:50:72:23:60:09:bf:5c:10:9e:e8:45:05:
         20:17:89:a0:4e:1a:38:c9:bc:1a:84:9e:8e:7c:f1:76:4a:49:
         32:39:95:2b:96:99:74:29:fb:a3:64:4e:09:f1:06:54:2e:24:
         42:65:7e:34:5c:fa:4f:91:d2:f5:c4:63:b2:29:f0:12:b8:3e:
         4c:46:af:a6:3e:d5:1d:5e:14:cc:9f:7c:28:4c:3c:e2:9d:0c:
         c0:4b:cd:a6:04:9f:ec:2a:f7:a2:58:de:c4:7a:3d:af:d6:17:
         66:ec:69:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----