Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad/bea4db01-7c97-3179-a40d-0cff6212b773.roa
File:                     bea4db01-7c97-3179-a40d-0cff6212b773.roa (raw, json)
Hash identifier:          50scY57y17dD6Vp9LLvcaLMZiKJiUWB8sWHJNtJBSWc=
Subject key identifier:   08:A2:97:71:4C:DA:79:B9:F3:35:41:F9:D0:25:A6:B9:33:C1:4A:7F
Certificate issuer:       /CN=53e1e100-f122-416c-8a32-e10c835a78ad
Certificate serial:       010D0C9F4328576D51CC73C042CFC174071CCD43
Authority key identifier: 9E:F4:3E:72:1D:5F:5A:FA:02:81:C2:75:34:75:40:1C:CD:C3:DE:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad/bea4db01-7c97-3179-a40d-0cff6212b773.roa
Signing time:             Mon 20 Jul 2020 04:00:00 +0000
ROA not before:           Mon 20 Jul 2020 04:00:00 +0000
ROA not after:            Sat 31 Dec 2022 05:00:00 +0000
asID:                     12083
IP address blocks:        75.118.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:74:07:1c:cd:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e1e100-f122-416c-8a32-e10c835a78ad
        Validity
            Not Before: Jul 20 04:00:00 2020 GMT
            Not After : Dec 31 05:00:00 2022 GMT
        Subject: CN=ea9daa1d-0072-4f82-baef-516b920758fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:17:80:81:ef:35:2c:f1:6f:06:d4:40:fb:7a:
                    04:2b:ab:ad:22:70:71:8a:f6:8a:17:13:f0:d5:c2:
                    92:5b:4f:ac:41:84:c1:c5:c0:44:85:f5:f0:09:69:
                    a2:ec:7a:4e:ea:e9:2c:40:51:3d:19:ee:ba:03:7b:
                    b5:45:36:cd:83:03:05:2a:e9:52:73:85:de:da:d5:
                    fe:eb:c9:53:6d:c4:a1:fb:bb:cf:d8:4c:e1:22:6b:
                    7b:a2:c3:50:de:77:5d:ac:4d:fd:99:73:bc:03:0f:
                    54:be:16:b6:4f:57:34:f8:e2:8d:fd:5a:e2:f1:5b:
                    d5:c4:12:56:ef:d7:4d:28:05:8e:b1:c2:33:1c:fd:
                    c7:9b:06:8d:de:d6:ee:12:30:71:41:87:6c:ed:7e:
                    61:d1:2e:da:7a:8b:64:be:71:55:2b:81:2f:a9:fe:
                    9c:8d:91:bf:e6:0c:65:7f:99:e4:5a:8f:ba:cb:29:
                    2f:a9:af:b3:d7:10:7f:90:f8:cd:01:e1:2b:3e:bf:
                    3d:83:b7:f8:0b:ab:e5:5e:73:af:09:07:28:0a:86:
                    39:d3:7f:57:5b:a0:8c:40:e8:40:d6:bf:30:f9:04:
                    9e:91:09:4b:69:eb:6c:02:d8:58:c7:9b:73:33:23:
                    14:b7:87:15:e0:23:36:42:2b:96:e0:37:83:b3:d6:
                    af:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A2:97:71:4C:DA:79:B9:F3:35:41:F9:D0:25:A6:B9:33:C1:4A:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad/bea4db01-7c97-3179-a40d-0cff6212b773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad/53e1e100-f122-416c-8a32-e10c835a78ad.crl

            X509v3 Authority Key Identifier:
                keyid:9E:F4:3E:72:1D:5F:5A:FA:02:81:C2:75:34:75:40:1C:CD:C3:DE:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.118.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:e9:45:fd:1b:47:fc:3f:ee:2c:0c:aa:40:b1:3e:20:a4:c1:
         21:24:6c:c5:10:23:a2:33:8d:a5:ea:f6:47:fc:c5:32:22:3f:
         ef:fb:0f:4a:ae:75:cc:6b:a1:60:73:0f:9c:d1:cd:b9:2f:f1:
         c8:aa:f6:a3:d6:95:ca:62:29:6e:01:dd:40:2a:69:11:26:6c:
         0c:7e:db:d1:28:38:34:1f:69:ef:0d:ae:4d:78:08:ce:76:ae:
         c4:c2:a8:40:21:71:df:24:59:c0:ee:37:ea:44:fc:35:f1:32:
         ce:3d:d6:f2:be:d1:36:09:86:6f:21:89:5f:5e:8d:1f:f8:30:
         6c:4a:93:0d:4f:11:24:5c:fa:6c:2b:f3:14:7d:9b:8e:65:1d:
         d4:db:a4:dd:27:d7:b7:74:45:39:d4:5a:31:09:73:fc:77:81:
         f2:ad:b4:c3:e6:7e:f1:2d:f5:cc:fc:6d:5d:3c:b7:3a:d4:d4:
         78:d0:e7:33:7a:17:de:5c:87:c8:68:f8:f4:46:36:a3:ed:f9:
         e0:a7:62:5f:a4:f5:58:df:96:d7:aa:2b:d1:26:59:57:59:b2:
         9c:88:7f:eb:88:af:d9:3c:74:b3:56:41:73:c0:18:af:09:c6:
         3a:f1:da:b5:b8:3e:bf:fa:6a:5a:04:ac:46:18:d5:a0:ad:58:
         fe:53:a0:5e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BdAcczUMwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNlMWUxMDAtZjEyMi00MTZjLThhMzItZTEwYzgzNWE3
OGFkMB4XDTIwMDcyMDA0MDAwMFoXDTIyMTIzMTA1MDAwMFowLzEtMCsGA1UEAxMk
ZWE5ZGFhMWQtMDA3Mi00ZjgyLWJhZWYtNTE2YjkyMDc1OGZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBeAge81LPFvBtRA+3oEK6utInBxivaKFxPw
1cKSW0+sQYTBxcBEhfXwCWmi7HpO6uksQFE9Ge66A3u1RTbNgwMFKulSc4Xe2tX+
68lTbcSh+7vP2EzhImt7osNQ3nddrE39mXO8Aw9Uvha2T1c0+OKN/Vri8VvVxBJW
79dNKAWOscIzHP3HmwaN3tbuEjBxQYds7X5h0S7aeotkvnFVK4Evqf6cjZG/5gxl
f5nkWo+6yykvqa+z1xB/kPjNAeErPr89g7f4C6vlXnOvCQcoCoY5039XW6CMQOhA
1r8w+QSekQlLaetsAthYx5tzMyMUt4cV4CM2QiuW4DeDs9av5wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAiil3FM2nm58zVB+dAlprkzwUp/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81M2Ux
ZTEwMC1mMTIyLTQxNmMtOGEzMi1lMTBjODM1YTc4YWQvYmVhNGRiMDEtN2M5Ny0z
MTc5LWE0MGQtMGNmZjYyMTJiNzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTNlMWUxMDAtZjEyMi00MTZjLThh
MzItZTEwYzgzNWE3OGFkLzUzZTFlMTAwLWYxMjItNDE2Yy04YTMyLWUxMGM4MzVh
NzhhZC5jcmwwHwYDVR0jBBgwFoAUnvQ+ch1fWvoCgcJ1NHVAHM3D3ocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81M2UxZTEwMC1mMTIyLTQxNmMtOGEzMi1lMTBj
ODM1YTc4YWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAS3YwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAXelF/RtH/D/uLAyqQLE+IKTBISRsxRAjojONper2R/zFMiI/7/sPSq51
zGuhYHMPnNHNuS/xyKr2o9aVymIpbgHdQCppESZsDH7b0Sg4NB9p7w2uTXgIznau
xMKoQCFx3yRZwO436kT8NfEyzj3W8r7RNgmGbyGJX16NH/gwbEqTDU8RJFz6bCvz
FH2bjmUd1Nuk3SfXt3RFOdRaMQlz/HeB8q20w+Z+8S31zPxtXTy3OtTUeNDnM3oX
3lyHyGj49EY2o+354KdiX6T1WN+W16or0SZZV1mynIh/64iv2Tx0s1ZBc8AYrwnG
OvHatbg+v/pqWgSsRhjVoK1Y/lOgXg==
-----END CERTIFICATE-----