Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/a92e890e-bd13-3764-9d05-443407e4dd5d.roa
File:                     a92e890e-bd13-3764-9d05-443407e4dd5d.roa (raw, json)
Hash identifier:          uL7crXU3eYbmpjsjcTmGoerlgB22jX+3QobysDUetEc=
Subject key identifier:   D1:BF:30:8B:E2:81:62:04:DA:6B:DA:46:BF:8A:EB:89:52:D4:5E:D2
Certificate issuer:       /CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Certificate serial:       010D0C9F4328583F5250A14632414DA9A63DF780
Authority key identifier: 00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/a92e890e-bd13-3764-9d05-443407e4dd5d.roa
Signing time:             Wed 16 Oct 2019 21:03:01 +0000
ROA not before:           Wed 16 Oct 2019 21:03:01 +0000
ROA not after:            Tue 24 Dec 2024 05:00:00 +0000
asID:                     63949
IP address blocks:        139.144.168.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:52:50:a1:46:32:41:4d:a9:a6:3d:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
        Validity
            Not Before: Oct 16 21:03:01 2019 GMT
            Not After : Dec 24 05:00:00 2024 GMT
        Subject: CN=5ba9b847-c295-4df7-8725-04a3a666c45f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a6:2f:05:89:90:f0:1c:3b:93:a6:3a:96:13:
                    78:77:95:b6:90:88:11:13:8c:8c:86:b5:ac:1c:0c:
                    96:98:fe:2a:d6:3f:ae:44:c6:62:e3:ee:a1:91:9d:
                    31:45:0a:4c:69:d9:04:22:fa:1d:e4:52:e1:00:e1:
                    97:50:11:03:cc:98:3e:35:6b:a7:f7:a0:52:ba:8a:
                    5a:2f:63:e6:c8:05:78:88:40:4f:4e:e9:40:b0:ba:
                    f2:ed:9f:08:c9:02:22:7d:cc:68:0d:a1:ad:2b:d9:
                    9c:03:52:57:db:0e:2b:43:37:a6:96:45:46:c8:cf:
                    d7:46:60:e5:4a:03:73:62:17:90:46:01:57:84:82:
                    f6:ed:58:da:e4:fe:db:39:df:38:0a:98:5d:7d:d6:
                    12:75:9c:d7:ea:95:8a:6e:9b:27:92:05:0b:6f:de:
                    d8:b0:cf:be:60:d3:60:2a:03:9c:ae:1d:f5:f5:b9:
                    b9:ec:d2:2b:a6:f0:cf:1b:44:66:14:da:8f:9d:29:
                    e0:ce:b5:c8:06:de:d9:6b:f2:f7:48:e3:54:f6:06:
                    6f:eb:62:a6:22:6f:bf:76:47:e3:eb:6e:b8:7a:fa:
                    5b:50:1d:49:82:6b:67:b6:fa:6e:c8:3b:be:c3:9b:
                    70:29:fd:49:db:3c:ee:25:98:e6:24:26:a7:78:3f:
                    60:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BF:30:8B:E2:81:62:04:DA:6B:DA:46:BF:8A:EB:89:52:D4:5E:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/a92e890e-bd13-3764-9d05-443407e4dd5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.crl

            X509v3 Authority Key Identifier:
                keyid:00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.144.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:38:2f:b7:dd:55:2c:99:9f:43:50:5f:b0:7b:ba:d3:60:a3:
         24:23:a3:06:e0:83:28:b6:75:f2:62:24:0e:42:c8:5f:f4:de:
         ed:5d:06:74:0e:db:27:90:e3:8d:c9:25:89:0e:ac:d1:df:66:
         3f:08:b1:39:6d:3b:3e:3c:2a:bb:bf:e2:c9:55:2e:1f:90:d0:
         9c:56:c6:43:29:6d:41:f2:90:5a:b5:53:10:a7:d9:d7:df:40:
         c1:10:f7:62:e3:71:c4:ed:24:95:27:b8:81:ef:a0:59:46:c8:
         12:56:97:c3:17:18:26:b1:58:e3:a7:12:87:34:76:9d:b7:bd:
         b1:87:0b:8f:2c:13:78:30:5c:26:79:7a:cc:a0:b7:25:01:40:
         e0:a7:3f:46:46:e5:f8:fd:e9:94:dd:5e:75:a5:54:03:09:36:
         eb:88:0f:9b:ec:97:6b:f5:1e:74:0d:df:be:ec:d6:b7:30:9b:
         b2:1a:06:31:dd:e7:14:60:60:5d:26:a9:db:88:6e:52:68:5a:
         0b:3d:20:f3:07:55:5a:9d:d4:99:c8:77:a3:1e:96:c0:fe:1d:
         2c:a8:9a:79:35:fc:55:6f:60:89:22:f6:e4:a7:03:4a:9a:d0:
         24:f1:8f:a3:ac:9b:f1:01:89:7f:97:c5:46:38:dd:1d:41:37:
         86:47:4f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----