Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/eaa58aba-ae43-3f4e-8f10-18bb727e49b8.roa
File:                     eaa58aba-ae43-3f4e-8f10-18bb727e49b8.roa (raw, json)
Hash identifier:          c9q/M40KTGmnYRZx1PHXgCQ4FVf1rtmHXFQh8e+NA+8=
Subject key identifier:   9B:B2:5C:47:1D:4C:35:0E:57:38:E8:F8:96:62:A2:93:20:29:17:04
Certificate issuer:       /CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Certificate serial:       010D0C9F4328583EF272D4B020E2DB0304866D00
Authority key identifier: 00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/eaa58aba-ae43-3f4e-8f10-18bb727e49b8.roa
Signing time:             Wed 16 Oct 2019 21:03:01 +0000
ROA not before:           Wed 16 Oct 2019 21:03:01 +0000
ROA not after:            Wed 20 Nov 2024 05:00:00 +0000
asID:                     63949
IP address blocks:        139.144.128.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:f2:72:d4:b0:20:e2:db:03:04:86:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
        Validity
            Not Before: Oct 16 21:03:01 2019 GMT
            Not After : Nov 20 05:00:00 2024 GMT
        Subject: CN=e06f83dd-5b87-4c69-9fdd-7ebb76393cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c0:aa:f0:8c:21:88:41:84:fb:24:e6:66:0a:
                    0a:a5:c6:ff:85:97:9e:07:e5:16:4a:dd:ad:51:4f:
                    8b:45:9e:87:be:7e:9c:66:0a:20:c9:e3:91:25:71:
                    c8:00:4c:b7:d1:cb:bf:42:c6:81:4b:1b:25:14:9b:
                    29:2a:73:a3:29:51:af:fd:a1:34:61:6c:80:aa:c3:
                    5b:2c:7e:64:ec:ad:b6:2a:7d:0b:28:b4:60:4e:1d:
                    e9:2c:31:13:bf:16:bc:e6:c5:2f:c2:ab:cf:52:8b:
                    a2:3d:f8:07:92:dc:d4:05:ec:6b:62:d9:32:63:c7:
                    0f:12:6a:25:a3:eb:e5:2e:d0:fd:90:04:91:32:3b:
                    2b:a2:8b:98:9d:ce:a3:72:76:53:72:ab:14:41:ff:
                    0d:a6:c2:eb:4a:43:0d:03:7d:e9:cd:36:30:ed:94:
                    4f:0b:ff:ec:47:2e:5b:78:07:17:38:4e:81:d7:7e:
                    f7:86:71:f1:0e:63:2b:b1:59:27:4d:61:fe:1c:c9:
                    91:b1:a7:6e:b8:7b:5c:4a:c0:d6:ce:83:2c:a6:43:
                    d5:0c:d4:4d:14:eb:d8:0a:5c:0f:46:77:ba:1d:a0:
                    1d:20:63:36:40:d8:d8:9a:66:ed:bc:02:ae:b9:24:
                    cb:03:76:77:19:2a:8c:f5:4e:c5:c2:38:7b:c5:31:
                    2d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B2:5C:47:1D:4C:35:0E:57:38:E8:F8:96:62:A2:93:20:29:17:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/eaa58aba-ae43-3f4e-8f10-18bb727e49b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.crl

            X509v3 Authority Key Identifier:
                keyid:00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.144.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:2a:e1:24:4e:00:46:1a:cb:ee:83:91:85:e1:06:9c:21:8e:
         14:19:23:a0:e5:aa:0b:55:27:31:ad:c5:ae:1e:9b:61:95:36:
         e2:04:5a:23:ea:2b:88:1e:6f:5e:92:b4:6b:4f:31:51:4a:7f:
         0a:2e:dd:ef:95:27:03:6a:78:e4:75:de:70:dd:22:55:6b:5e:
         b1:e0:6c:ee:0d:43:65:9f:d0:12:4b:5d:d3:8e:b1:98:0e:7b:
         a6:2a:4a:73:68:61:4a:25:98:78:15:a0:8a:01:a5:3e:53:b9:
         95:e4:30:b9:9a:db:8e:81:53:eb:04:49:2b:9d:b9:1d:88:d7:
         05:37:67:8a:39:8c:16:d5:80:90:ff:79:8a:fe:38:e5:55:59:
         e2:2a:3d:2d:f9:14:ca:86:71:8e:82:b7:ce:38:4c:d3:08:dd:
         f7:97:b8:e9:2b:02:aa:9a:6c:4e:97:ed:a1:eb:ef:84:c0:2e:
         ff:4e:2e:b2:eb:e2:1f:c1:cf:f2:74:d8:7e:5e:e6:b8:c8:6b:
         2d:dd:20:23:43:7f:0c:d2:67:a9:b3:8e:27:86:68:79:63:46:
         4a:d8:ef:d1:83:af:03:75:93:8a:98:ad:15:2d:f6:fa:06:9a:
         ff:a1:e5:cb:26:b1:56:31:7c:75:a3:c0:32:78:fa:6a:a8:97:
         6c:96:ca:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----