Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/7440c047-dccb-344a-a963-7580cc72f8d2.roa
File:                     7440c047-dccb-344a-a963-7580cc72f8d2.roa (raw, json)
Hash identifier:          bFT1QFS8XoS3NQ128RzepSGdhSLqGYx8bYSTCJ0XyTY=
Subject key identifier:   5A:ED:07:50:40:95:B1:6D:B9:C2:43:AD:55:D7:2D:B7:7E:6E:F9:DA
Certificate issuer:       /CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Certificate serial:       010D0C9F4328576D51CC73C042CFC16DF462444F
Authority key identifier: 00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/7440c047-dccb-344a-a963-7580cc72f8d2.roa
Signing time:             Tue 22 Oct 2019 16:52:23 +0000
ROA not before:           Wed 16 Oct 2019 04:00:00 +0000
ROA not after:            Tue 16 Oct 2029 04:00:00 +0000
asID:                     63949
IP address blocks:        192.81.128.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:f4:62:44:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
        Validity
            Not Before: Oct 16 04:00:00 2019 GMT
            Not After : Oct 16 04:00:00 2029 GMT
        Subject: CN=fd8cf959-a3d7-4c5b-93c7-899d013b7387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bf:d8:37:71:1d:5e:12:05:35:dd:17:7c:57:
                    60:c3:ad:e5:74:e4:ab:15:79:84:55:cc:eb:a6:b6:
                    c3:1c:11:29:f6:55:a9:49:ef:d8:e1:a4:80:f0:79:
                    2a:b6:37:07:d4:37:15:00:86:61:df:96:2e:44:69:
                    7f:bb:8c:d0:40:cb:4c:8c:bb:1b:31:64:8c:e4:ae:
                    d2:94:f8:15:31:24:e4:4e:53:ea:20:c6:bd:93:45:
                    dc:8c:07:d3:73:e0:24:cb:d8:62:0f:44:04:74:fa:
                    2b:c8:7e:72:8f:c3:56:23:d2:86:99:71:40:4c:60:
                    d7:e3:8f:2c:73:00:de:8d:36:b1:76:3c:32:93:f7:
                    68:1a:02:c7:8f:ca:27:09:ce:95:d1:df:54:24:0d:
                    98:ae:53:e0:39:a1:11:19:13:71:9d:26:d0:48:b7:
                    cf:44:95:4b:e0:69:89:6c:72:5e:b2:4c:b0:94:a8:
                    39:dd:e4:d6:06:31:b2:cf:54:ee:b4:27:ec:c7:d8:
                    e2:a2:a2:19:5d:0a:14:e7:8b:08:3e:ce:ee:c0:bc:
                    80:10:2c:0d:c6:d6:82:a6:6f:5e:5b:fb:a5:8b:ca:
                    45:60:0b:52:9c:05:2c:85:6a:18:41:82:5a:39:91:
                    f4:67:ee:77:31:36:12:e5:79:8b:33:53:1a:2a:f2:
                    61:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:ED:07:50:40:95:B1:6D:B9:C2:43:AD:55:D7:2D:B7:7E:6E:F9:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/7440c047-dccb-344a-a963-7580cc72f8d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.crl

            X509v3 Authority Key Identifier:
                keyid:00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:2c:7b:6b:93:b5:15:7d:7b:d8:78:ee:54:81:3a:37:2f:ec:
         1f:3e:aa:84:a7:27:03:af:ed:b0:fd:f2:d5:66:5c:55:67:27:
         f4:02:1e:09:7b:da:fe:93:01:e4:17:a4:d4:ca:d3:dd:eb:84:
         2a:56:bd:93:62:80:e1:66:a6:45:c8:23:92:b5:1f:53:79:9d:
         aa:bd:f2:a1:da:a2:3f:50:4d:69:76:34:9e:aa:cf:62:a0:ba:
         2c:2e:fd:15:d7:84:cb:f1:aa:4c:6f:ec:9e:98:77:bb:52:f2:
         28:35:bd:75:d0:16:02:d1:be:b2:dd:90:47:99:ed:70:ca:8f:
         d3:7a:aa:8c:4c:e3:3e:23:19:40:a2:48:21:dd:18:65:21:93:
         37:a3:bc:49:98:26:2e:78:78:cd:8b:ad:c2:1a:ac:ce:ed:b6:
         b4:13:81:85:50:9f:64:d3:2e:00:24:9c:ed:4f:cf:df:80:09:
         74:6e:89:d9:00:91:8f:d6:14:cd:3d:82:db:c6:a4:82:4d:a4:
         2e:f3:64:be:11:be:c5:47:97:de:67:26:43:15:f9:39:e0:ba:
         da:fc:49:72:fb:e7:61:19:8c:56:d4:0e:54:de:34:85:0f:3c:
         0d:5a:61:80:05:77:6e:6c:71:9b:c1:94:58:f2:b6:97:4e:26:
         31:26:6d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----