Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/ae046a08-9e40-3f5f-a9f9-048ff6ebc830.roa
File:                     ae046a08-9e40-3f5f-a9f9-048ff6ebc830.roa (raw, json)
Hash identifier:          LZ16U9h1uCV4tE7GlPuKWDYjIGaFE4DJ3YOIMHXoQ5k=
Subject key identifier:   01:7B:53:FE:2E:DA:51:0F:A2:79:D1:74:9A:EF:18:4B:E2:9E:20:91
Certificate issuer:       /CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Certificate serial:       010D0C9F4328576D51CC73C042CFC16DF4544920
Authority key identifier: 00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/ae046a08-9e40-3f5f-a9f9-048ff6ebc830.roa
Signing time:             Tue 22 Oct 2019 16:37:07 +0000
ROA not before:           Wed 16 Oct 2019 04:00:00 +0000
ROA not after:            Tue 16 Oct 2029 04:00:00 +0000
asID:                     63949
IP address blocks:        66.175.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:f4:54:49:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
        Validity
            Not Before: Oct 16 04:00:00 2019 GMT
            Not After : Oct 16 04:00:00 2029 GMT
        Subject: CN=957bc2ca-c721-4063-8c4f-b62fbcd6db6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cb:84:0b:16:af:c3:27:43:0d:70:b2:cb:b0:
                    b5:96:aa:74:0f:36:72:56:f5:e1:0b:0f:4c:ce:d4:
                    b5:3f:30:71:4d:eb:36:21:dc:48:c9:97:43:42:71:
                    33:13:5a:ea:91:d4:92:c1:75:98:ba:1e:64:cf:85:
                    5c:ef:00:41:6f:cc:6d:be:49:2d:78:cc:de:40:28:
                    29:40:24:35:d3:21:f8:04:32:04:87:ae:fd:ce:62:
                    24:45:f5:d9:8b:d7:cd:71:5a:0b:7c:61:9c:eb:1b:
                    a0:ed:13:70:76:bf:3f:cd:d0:6b:81:42:89:0e:ff:
                    c5:a7:eb:3a:7d:09:e5:79:bf:02:1a:f9:16:12:2c:
                    10:63:78:96:46:44:6a:39:7f:f8:d1:18:7a:2a:e8:
                    43:b4:96:e3:4a:2a:f7:e4:ea:85:c8:f0:47:ce:78:
                    51:a6:2d:52:63:0a:84:94:c5:95:a3:41:f6:31:88:
                    da:77:ea:a1:6a:39:ea:2b:d7:4f:95:24:f8:d1:34:
                    e4:8b:c4:88:fd:3f:a3:94:8b:d1:5d:9d:6c:80:38:
                    8f:de:31:f1:72:85:27:72:8e:68:45:47:c3:c1:a0:
                    ff:46:b2:41:64:6a:55:36:6c:cd:f0:5d:de:ae:91:
                    29:11:bb:88:b5:05:02:89:f3:7e:32:ff:16:f6:8e:
                    ad:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7B:53:FE:2E:DA:51:0F:A2:79:D1:74:9A:EF:18:4B:E2:9E:20:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/ae046a08-9e40-3f5f-a9f9-048ff6ebc830.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.crl

            X509v3 Authority Key Identifier:
                keyid:00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.175.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:94:fc:42:76:37:4b:37:5d:74:ac:a4:50:be:de:48:72:e3:
         01:59:61:e0:54:43:86:6e:47:34:11:28:2b:0b:c6:a1:b6:c9:
         24:8e:c6:cf:dd:6d:9b:cd:72:4c:97:2a:83:f3:37:21:f1:8c:
         2b:2c:ca:b7:96:18:50:ce:26:79:81:b4:d6:2b:4c:f4:ac:88:
         a8:75:a1:a3:4b:c6:a8:73:0a:bc:07:a1:58:41:31:9c:2f:10:
         ac:de:80:c9:dd:c6:7b:5f:08:e9:5d:6e:b8:2f:10:a0:42:5c:
         01:79:ea:25:a2:26:8e:36:62:28:c0:23:73:0f:f2:21:6e:29:
         fd:b5:36:fa:ae:1b:ce:e1:51:1f:72:73:a5:5f:22:33:0d:64:
         ff:c5:d1:af:39:d3:d5:7b:ae:c1:e6:02:33:d7:b4:97:9d:eb:
         36:bb:39:a5:5d:f3:26:97:ad:4d:65:6d:bf:0b:33:cb:f7:ff:
         38:a5:14:57:cc:a5:a8:4b:b3:46:6d:88:6c:a5:28:f1:1d:06:
         ef:b7:fa:18:59:cf:0a:a1:83:a4:47:eb:30:a9:74:81:09:00:
         0b:ad:04:ef:73:e8:19:43:2d:a4:79:e0:23:38:0e:12:dc:52:
         fa:33:b2:de:39:66:18:68:7a:bc:bd:0d:30:7b:26:9b:39:e3:
         0c:1a:73:43
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BbfRUSSAwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDFlY2ViYzlkLWFhYWYtNGI2ZC1hZjRmLWZhNWMwNzQ5MjVl
ODAeFw0xOTEwMTYwNDAwMDBaFw0yOTEwMTYwNDAwMDBaMC8xLTArBgNVBAMTJDk1
N2JjMmNhLWM3MjEtNDA2My04YzRmLWI2MmZiY2Q2ZGI2ZDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAK3LhAsWr8MnQw1wssuwtZaqdA82clb14QsPTM7U
tT8wcU3rNiHcSMmXQ0JxMxNa6pHUksF1mLoeZM+FXO8AQW/Mbb5JLXjM3kAoKUAk
NdMh+AQyBIeu/c5iJEX12YvXzXFaC3xhnOsboO0TcHa/P83Qa4FCiQ7/xafrOn0J
5Xm/Ahr5FhIsEGN4lkZEajl/+NEYeiroQ7SW40oq9+TqhcjwR854UaYtUmMKhJTF
laNB9jGI2nfqoWo56ivXT5Uk+NE05IvEiP0/o5SL0V2dbIA4j94x8XKFJ3KOaEVH
w8Gg/0ayQWRqVTZszfBd3q6RKRG7iLUFAonzfjL/FvaOraECAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQBe1P+LtpRD6J50XSa7xhL4p4gkTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWVjZWJj
OWQtYWFhZi00YjZkLWFmNGYtZmE1YzA3NDkyNWU4L2FlMDQ2YTA4LTllNDAtM2Y1
Zi1hOWY5LTA0OGZmNmViYzgzMC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzFlY2ViYzlkLWFhYWYtNGI2ZC1hZjRm
LWZhNWMwNzQ5MjVlOC8xZWNlYmM5ZC1hYWFmLTRiNmQtYWY0Zi1mYTVjMDc0OTI1
ZTguY3JsMB8GA1UdIwQYMBaAFACv7SUrbtnkGc8SE6kp7d3ibnoqMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvMWVjZWJjOWQtYWFhZi00YjZkLWFmNGYtZmE1YzA3
NDkyNWU4LmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBEKv0DBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAbZT8QnY3SzdddKykUL7eSHLjAVlh4FRDhm5HNBEoKwvGobbJJI7Gz91tm81y
TJcqg/M3IfGMKyzKt5YYUM4meYG01itM9KyIqHWho0vGqHMKvAehWEExnC8QrN6A
yd3Ge18I6V1uuC8QoEJcAXnqJaImjjZiKMAjcw/yIW4p/bU2+q4bzuFRH3JzpV8i
Mw1k/8XRrznT1XuuweYCM9e0l53rNrs5pV3zJpetTWVtvwszy/f/OKUUV8ylqEuz
Rm2IbKUo8R0G77f6GFnPCqGDpEfrMKl0gQkAC60E73PoGUMtpHngIzgOEtxS+jOy
3jlmGGh6vL0NMHsmmznjDBpzQw==
-----END CERTIFICATE-----