Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/b80af779-5ba5-33e7-a9e6-e2c3566a932a.roa
File:                     b80af779-5ba5-33e7-a9e6-e2c3566a932a.roa (raw, json)
Hash identifier:          /SHgiVW9x5tevLq5bcpnOI89bfN62+4ktX2vNEOxLSo=
Subject key identifier:   2E:0B:40:33:B7:BF:81:EE:75:80:0A:7C:53:AA:AE:A4:37:97:FA:4B
Certificate issuer:       /CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Certificate serial:       010D0C9F4328576D51CC73C042CFC16DF4598222
Authority key identifier: 00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/b80af779-5ba5-33e7-a9e6-e2c3566a932a.roa
Signing time:             Tue 22 Oct 2019 16:42:49 +0000
ROA not before:           Wed 16 Oct 2019 04:00:00 +0000
ROA not after:            Tue 16 Oct 2029 04:00:00 +0000
asID:                     63949
IP address blocks:        74.207.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:f4:59:82:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
        Validity
            Not Before: Oct 16 04:00:00 2019 GMT
            Not After : Oct 16 04:00:00 2029 GMT
        Subject: CN=f2b817ed-7fc5-40ca-87af-79ad8d64d4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:38:ac:3c:05:7b:64:4b:42:14:36:3b:fb:07:
                    62:8d:8d:03:cb:b5:6e:d3:16:0e:fb:6b:fa:b8:96:
                    d3:5a:2f:ab:44:b9:6b:56:45:df:d5:0e:60:c8:07:
                    e2:c1:24:2a:78:c1:af:a6:bf:4e:4a:92:4d:54:ad:
                    42:f2:0a:25:63:0a:01:4b:fc:33:5a:02:e3:a7:97:
                    0b:66:22:d0:00:f3:39:6f:b3:46:18:55:0e:1f:7b:
                    2b:8b:5b:9c:e0:09:59:3c:46:88:f7:73:17:ac:4d:
                    49:7e:fd:7b:42:07:88:c8:8b:6e:12:26:6c:8e:a8:
                    3e:98:e2:5c:db:dc:90:12:da:67:42:fc:e6:87:77:
                    a0:62:2d:38:0d:8b:8e:36:c7:59:6c:7f:18:d0:51:
                    cf:6f:3d:0d:31:43:6a:c5:2d:6d:55:71:e3:ea:b1:
                    0a:bd:97:c7:cd:06:03:01:61:6c:52:ef:66:e4:66:
                    b8:1e:ef:a9:3b:89:05:3e:7c:11:98:a1:93:32:52:
                    7a:f6:ee:f0:30:f0:54:59:60:5e:74:31:5c:ae:58:
                    e8:3b:87:df:c5:35:fd:67:5d:dc:41:aa:b2:6a:e0:
                    65:ef:01:b8:e8:28:19:b3:f0:b5:4d:1c:ba:fa:b5:
                    e3:3f:c4:a0:48:41:6d:ad:ef:12:99:cf:85:db:f2:
                    e7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0B:40:33:B7:BF:81:EE:75:80:0A:7C:53:AA:AE:A4:37:97:FA:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/b80af779-5ba5-33e7-a9e6-e2c3566a932a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.crl

            X509v3 Authority Key Identifier:
                keyid:00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.207.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:c0:31:db:6c:77:a9:c7:98:60:7c:e4:75:f2:81:19:88:f0:
         c5:02:83:6a:bf:48:3e:49:e2:cb:6d:45:90:d4:44:a0:9b:70:
         8b:de:79:b0:25:ea:2d:60:f2:54:02:a3:bb:2c:00:09:21:2a:
         14:79:7c:86:72:df:d8:ee:bd:1a:c9:2b:3a:a4:d8:89:17:6c:
         90:f3:d3:e2:a4:38:95:42:f8:89:4a:74:bf:ea:16:00:97:c5:
         68:be:85:ec:0f:5e:5b:ab:e5:07:84:b7:10:17:fa:9c:1f:9f:
         09:b6:f5:e2:f0:4c:bf:2e:a0:8f:cb:65:22:fa:89:54:b8:2e:
         42:67:cd:2f:0e:70:c0:d8:51:bf:6b:bc:72:d5:d5:f4:ae:62:
         03:7c:05:50:a8:95:b7:db:83:36:73:09:ad:39:2e:73:e6:9e:
         cc:b9:0e:87:20:02:6c:c7:ab:fe:14:d8:a4:a2:cd:7e:be:1e:
         68:2d:44:5a:86:e6:80:b3:27:b1:21:64:79:59:fc:28:a6:0a:
         24:28:9b:6f:c5:89:00:7d:ba:43:22:01:57:b5:88:a5:f6:87:
         4d:a0:23:40:4b:a1:e7:88:c3:35:f9:09:e0:07:31:0e:3b:1a:
         b2:de:5c:ab:c3:d7:83:a8:a2:be:af:fd:68:ac:ae:94:f9:a1:
         7c:f0:7c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----