Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62f3be1f-a9e6-4792-89c6-d1a3c4b02eb4/ec59ffa6-7e9a-355b-9e02-31086a7476bc.roa
File:                     ec59ffa6-7e9a-355b-9e02-31086a7476bc.roa (raw, json)
Hash identifier:          vr+iY6ScowXyuEr2e4cPH+cNNU3H1p/PMtcb8yiYUk8=
Subject key identifier:   CD:46:1E:F5:BC:9A:98:43:9E:40:2C:C5:AB:DA:D5:2D:0B:AE:C7:73
Certificate issuer:       /CN=62f3be1f-a9e6-4792-89c6-d1a3c4b02eb4
Certificate serial:       010D0C9F4328576D51CC73C042CFC171C1AB3778
Authority key identifier: B0:B0:40:E8:5B:91:E9:29:73:0C:6F:01:4A:50:46:42:47:2F:C4:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62f3be1f-a9e6-4792-89c6-d1a3c4b02eb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62f3be1f-a9e6-4792-89c6-d1a3c4b02eb4/ec59ffa6-7e9a-355b-9e02-31086a7476bc.roa
Signing time:             Tue 28 Apr 2020 16:42:35 +0000
ROA not before:           Mon 27 Apr 2020 04:00:00 +0000
ROA not after:            Fri 01 Aug 2025 04:00:00 +0000
asID:                     14618
IP address blocks:        172.86.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:c1:ab:37:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f3be1f-a9e6-4792-89c6-d1a3c4b02eb4
        Validity
            Not Before: Apr 27 04:00:00 2020 GMT
            Not After : Aug  1 04:00:00 2025 GMT
        Subject: CN=a0b0927b-8a19-475c-b9b1-06360c848da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8f:80:93:e1:a5:64:17:71:09:a7:ac:7c:a4:
                    9f:dc:ac:70:43:0c:02:c4:91:c6:a7:26:1e:58:d0:
                    1f:f8:b8:d5:3b:68:81:7a:d3:24:4b:c4:3a:34:bb:
                    2d:0f:7c:51:36:67:7e:fe:e3:a3:04:bc:5d:ad:42:
                    4b:3c:3f:f9:9d:6d:86:13:47:bb:8d:df:71:2e:f9:
                    84:d7:8d:ba:90:0b:7a:42:3c:14:54:bd:74:72:d4:
                    c6:68:7b:f5:a7:9b:55:f7:df:90:f4:2c:30:34:01:
                    36:17:d5:55:8f:f7:bd:21:97:c6:21:80:3f:e8:bc:
                    7f:23:fd:bd:84:73:09:da:0a:65:a5:e1:cc:2e:64:
                    29:57:f2:26:0e:fa:c7:58:bd:9a:da:e5:11:e6:0e:
                    5c:94:df:ba:7d:0a:40:ce:0a:00:7d:79:74:c8:2b:
                    67:69:d0:d4:64:29:0d:17:db:ed:6c:5e:ff:10:ca:
                    1b:6c:9f:9b:02:66:5d:8e:2b:34:81:dc:6d:1f:ac:
                    f0:bd:69:76:5c:ed:fc:e1:07:f1:37:a8:78:94:17:
                    f6:4b:ad:1c:37:7e:a2:de:a9:e5:12:fb:36:46:bf:
                    75:0a:78:51:ec:2d:d1:8e:2c:54:cf:3d:f2:0e:e4:
                    53:67:fa:90:70:a9:cc:01:99:88:4f:d5:fa:85:35:
                    d4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:46:1E:F5:BC:9A:98:43:9E:40:2C:C5:AB:DA:D5:2D:0B:AE:C7:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62f3be1f-a9e6-4792-89c6-d1a3c4b02eb4/ec59ffa6-7e9a-355b-9e02-31086a7476bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62f3be1f-a9e6-4792-89c6-d1a3c4b02eb4/62f3be1f-a9e6-4792-89c6-d1a3c4b02eb4.crl

            X509v3 Authority Key Identifier:
                keyid:B0:B0:40:E8:5B:91:E9:29:73:0C:6F:01:4A:50:46:42:47:2F:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62f3be1f-a9e6-4792-89c6-d1a3c4b02eb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.86.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:f6:4c:c5:e1:1e:05:98:4a:4c:e1:b7:ab:a9:be:b4:b7:b4:
         c9:34:f7:bb:25:1d:70:df:31:b8:82:a5:a9:a2:61:98:79:6c:
         3a:4f:fc:0b:a9:c4:d5:b6:12:8c:0e:f2:59:17:dd:e4:1a:ff:
         24:29:c8:66:62:af:5b:61:44:79:66:a8:33:3b:28:e7:d8:fe:
         73:e8:aa:fa:d4:51:dc:e1:7a:9e:61:66:8d:80:13:56:3d:6f:
         eb:38:cf:46:e2:45:e5:15:b9:e9:76:30:17:bd:0d:7a:ca:97:
         ed:58:c3:af:a7:6f:6e:47:e8:20:1c:49:90:0e:9f:20:de:e0:
         ba:f9:04:2d:5e:59:4a:d4:74:b8:e1:1c:43:10:2a:61:6b:a9:
         44:10:04:eb:34:4b:7f:70:29:a3:1d:09:32:27:48:9c:5d:df:
         55:4a:bc:7e:2f:57:02:cf:16:d5:bc:c5:82:e6:e1:e4:de:ba:
         0d:ac:f0:2a:b3:0e:cc:64:e7:b1:a7:e8:fa:58:dc:72:bf:68:
         01:d0:5e:d8:f9:88:a8:cb:81:33:53:30:1c:db:df:98:ad:28:
         c5:c4:13:7a:be:6f:cc:4a:f5:eb:0f:8f:88:66:a7:6b:3f:d7:
         58:5b:d8:97:3c:dd:a0:e3:39:52:46:b9:8c:a4:bf:97:bf:64:
         ca:95:91:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----