Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba/503d6369-d30f-3ddb-929f-0c8d65777719.roa
File:                     503d6369-d30f-3ddb-929f-0c8d65777719.roa (raw, json)
Hash identifier:          a9HvFnpFQ+iupNH4gKdnjBsUVtHrRlsewMLiJC4OB0o=
Subject key identifier:   A3:49:F8:78:24:6E:71:7B:50:50:A3:2F:FD:63:9A:AB:C9:B1:ED:CE
Certificate issuer:       /CN=9d4d0e8b-df52-4033-8ede-1f00c69412ba
Certificate serial:       010D0C9F43285840EFF99BD6158D6250C78DA180
Authority key identifier: 3E:C0:79:9B:58:B6:1A:C0:FE:10:11:04:83:57:5E:4E:22:35:30:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba/503d6369-d30f-3ddb-929f-0c8d65777719.roa
Signing time:             Fri 20 Nov 2020 14:21:09 +0000
ROA not before:           Fri 20 Nov 2020 14:21:09 +0000
ROA not after:            Thu 22 May 2025 04:00:00 +0000
asID:                     210439
IP address blocks:        199.188.236.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:ef:f9:9b:d6:15:8d:62:50:c7:8d:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d4d0e8b-df52-4033-8ede-1f00c69412ba
        Validity
            Not Before: Nov 20 14:21:09 2020 GMT
            Not After : May 22 04:00:00 2025 GMT
        Subject: CN=9f5f674b-792d-4d34-bd1f-cbf22feaa5a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5d:f1:3c:4c:b2:6d:03:8c:5b:56:17:33:65:
                    0a:fd:ad:b4:d8:f5:6a:48:57:39:fd:d3:3f:49:8e:
                    6d:57:85:90:b2:bf:fb:58:ca:23:de:a9:dd:db:b6:
                    2a:64:f3:58:54:76:68:f6:01:06:f8:7b:8c:47:17:
                    53:18:a7:82:f0:a0:c9:8d:20:c8:3b:8a:65:f1:ec:
                    5e:35:21:20:75:ff:94:ce:77:8d:b3:af:6e:79:c4:
                    b7:26:58:86:a4:55:3d:08:cf:03:8b:c3:07:33:bc:
                    ed:dc:a4:42:b7:0e:d7:86:89:17:ee:b0:69:fb:e1:
                    2b:32:bc:6a:1d:59:10:76:46:c9:29:2c:ff:49:94:
                    98:c1:23:7a:e5:fc:d8:58:64:ee:25:a8:e3:31:77:
                    c8:1b:02:c5:4f:59:d3:75:b8:2c:8f:0e:33:01:c3:
                    1f:1a:9c:66:52:08:72:98:f5:ee:39:46:01:bf:99:
                    bb:1b:79:04:ac:cc:0d:ab:a7:9f:6f:d0:a9:28:77:
                    93:64:7a:92:c4:5b:6a:9d:a0:58:b0:ee:28:d3:23:
                    73:c7:c0:8b:b0:d6:ce:b5:f9:8c:70:77:60:de:d2:
                    1d:ac:82:28:d9:37:86:0a:be:f7:a7:77:f3:5f:56:
                    a7:c1:df:f5:bb:35:ab:9f:66:db:d0:c8:91:03:c6:
                    19:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:49:F8:78:24:6E:71:7B:50:50:A3:2F:FD:63:9A:AB:C9:B1:ED:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba/503d6369-d30f-3ddb-929f-0c8d65777719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba/9d4d0e8b-df52-4033-8ede-1f00c69412ba.crl

            X509v3 Authority Key Identifier:
                keyid:3E:C0:79:9B:58:B6:1A:C0:FE:10:11:04:83:57:5E:4E:22:35:30:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d4d0e8b-df52-4033-8ede-1f00c69412ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:c8:4c:1a:89:0f:d4:53:fe:96:ac:d2:75:46:ed:cf:c8:81:
         53:9a:58:64:50:a8:0c:f9:5c:ec:ba:41:ff:fe:9c:00:a2:c6:
         59:a8:05:cc:19:bf:ef:cf:39:69:f5:85:24:28:a5:e9:d7:b3:
         89:48:67:19:78:7d:1c:e6:fc:72:29:e4:39:ce:a7:40:4e:4f:
         50:f4:01:ab:77:66:2d:34:c1:34:4b:f1:57:44:d0:00:74:50:
         a1:50:cf:55:da:e9:c3:14:06:0b:59:d9:5c:0e:4c:cb:af:21:
         88:4e:3a:d1:0c:d3:49:40:a7:67:4b:d8:2b:18:f7:e5:a9:79:
         17:66:c9:6c:84:d4:7e:70:19:24:78:6a:4e:6a:16:74:4c:57:
         aa:b2:e5:55:c7:3d:b7:30:3a:e3:ce:99:d2:b6:75:7d:c8:7c:
         f5:57:29:b3:50:37:e9:62:b7:40:22:62:6e:f2:60:03:f4:3c:
         fa:cb:58:e1:7a:ed:6c:60:57:81:f8:b7:e1:3e:89:5d:c8:85:
         e1:10:8d:4d:dd:eb:af:07:61:37:0c:d1:e6:50:89:95:d5:3c:
         bc:52:28:fa:9d:c4:49:e4:48:4f:3f:89:05:2b:bc:a8:3d:d3:
         80:67:94:0a:f0:f8:bc:65:ca:61:a4:4d:71:bf:7b:05:46:49:
         22:0c:a3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----