Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad/e1f45bcb-3b03-31e7-ba9b-1251d670f3ae.roa
File:                     e1f45bcb-3b03-31e7-ba9b-1251d670f3ae.roa (raw, json)
Hash identifier:          1Z5MymfRp2xiRAOjCEuN4impJ1iPdiW/OgzQXej7/NE=
Subject key identifier:   E0:47:B2:4F:32:79:B7:9F:46:02:32:7A:C8:2F:13:BC:14:33:B3:73
Certificate issuer:       /CN=53e1e100-f122-416c-8a32-e10c835a78ad
Certificate serial:       010D0C9F4328576D51CC73C042CFC17371B6EDDB
Authority key identifier: 9E:F4:3E:72:1D:5F:5A:FA:02:81:C2:75:34:75:40:1C:CD:C3:DE:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad/e1f45bcb-3b03-31e7-ba9b-1251d670f3ae.roa
Signing time:             Tue 21 Jul 2020 14:11:20 +0000
ROA not before:           Mon 20 Jul 2020 04:00:00 +0000
ROA not after:            Sat 31 Dec 2022 05:00:00 +0000
asID:                     12083
IP address blocks:        23.28.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:71:b6:ed:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e1e100-f122-416c-8a32-e10c835a78ad
        Validity
            Not Before: Jul 20 04:00:00 2020 GMT
            Not After : Dec 31 05:00:00 2022 GMT
        Subject: CN=5b813fe3-667c-4bc5-a30b-6b884b740d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:33:83:dd:20:de:fa:a5:e0:36:29:8f:11:46:
                    2b:ca:d1:cf:4e:dd:3c:17:5f:97:21:97:6c:c9:34:
                    ce:a9:41:62:aa:29:ab:5c:9e:18:a8:87:84:27:ee:
                    50:61:55:6f:35:20:ad:f8:24:c8:58:40:d9:8f:0d:
                    50:e4:bc:9e:9c:4b:9b:26:68:ac:7c:20:18:d5:69:
                    b6:ed:d2:8b:2d:c6:cb:d9:5e:41:2b:a5:23:07:d1:
                    c3:bc:48:81:03:97:75:74:2c:ee:5d:89:65:89:12:
                    f5:32:2b:f2:b8:90:e5:6c:e2:3f:40:8c:b3:c8:ac:
                    56:86:74:23:9e:c4:81:65:e7:1c:f4:6f:cc:ae:c8:
                    1b:4a:14:d8:f3:2a:10:5b:c5:7a:70:68:2e:d5:d7:
                    a5:11:e8:d7:4f:75:72:28:68:0b:2c:1b:6b:a5:40:
                    8b:1f:10:ae:35:73:d1:04:9e:27:ad:c2:fd:6d:2c:
                    e5:4b:e2:67:8e:47:5c:25:90:8d:17:1f:17:0f:cd:
                    5e:4d:52:f1:8a:0d:4b:10:82:99:04:01:72:c7:00:
                    2f:d5:11:3b:2e:0e:c4:91:c7:cd:35:1c:53:27:e2:
                    fc:ed:03:06:89:9d:47:13:5c:5d:fd:4b:09:25:03:
                    0a:af:b7:f6:af:f1:c4:5a:d2:96:9c:84:a7:b7:e4:
                    f6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:47:B2:4F:32:79:B7:9F:46:02:32:7A:C8:2F:13:BC:14:33:B3:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad/e1f45bcb-3b03-31e7-ba9b-1251d670f3ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad/53e1e100-f122-416c-8a32-e10c835a78ad.crl

            X509v3 Authority Key Identifier:
                keyid:9E:F4:3E:72:1D:5F:5A:FA:02:81:C2:75:34:75:40:1C:CD:C3:DE:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53e1e100-f122-416c-8a32-e10c835a78ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.28.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:0e:9e:76:52:18:6c:52:57:80:c4:04:8b:b8:29:3c:45:4a:
         49:4a:e5:18:2b:fc:bf:3b:92:d9:84:d5:ae:83:eb:d5:46:22:
         8e:a0:e9:91:70:d1:a1:49:36:4e:f2:59:a6:51:3f:1a:00:63:
         ea:84:d7:6b:48:e8:e3:3a:48:9f:3b:ab:b0:ea:9f:b7:2f:93:
         42:02:58:f1:ab:a3:25:93:05:e1:07:9b:ba:43:e3:a1:4d:77:
         96:ff:bf:73:d7:41:43:d5:e2:d0:09:70:82:a0:ad:e3:63:7b:
         58:b3:33:94:65:f6:66:80:26:5f:d4:7a:07:e3:bb:dd:70:19:
         1e:b8:c5:2e:5b:d2:f8:e3:06:59:e6:11:4d:9b:9e:da:1e:72:
         30:17:31:e2:3e:23:87:f5:2d:cd:0b:c4:ff:a7:a9:35:fb:c5:
         88:5e:7b:cf:9d:90:36:00:14:3b:93:5e:66:d1:71:5f:20:1a:
         54:88:79:af:77:8d:fe:d5:99:b3:7e:53:c9:40:7d:1a:8c:ac:
         11:2a:d7:94:65:1a:36:2c:23:11:37:c5:c1:39:52:f9:32:b6:
         f3:29:46:a3:54:31:c2:ba:21:02:e3:9e:56:57:bd:bc:d4:58:
         2d:55:a8:6c:4a:c1:5c:7d:37:d4:c3:a0:f9:01:23:72:b1:ea:
         fb:5b:b5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----