Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/746fada8-dc6c-46d4-a25b-49ec0fceeb3d/8b9f9de5-7014-30c8-881a-982427e184d5.roa
File:                     8b9f9de5-7014-30c8-881a-982427e184d5.roa (raw, json)
Hash identifier:          UD51V0Uwjxhhmq4em/gQX956vxIb9C4zD/qpHIs2o8M=
Subject key identifier:   B4:A8:44:B9:49:8A:2C:DC:F7:09:F5:0F:91:29:EF:65:94:E2:59:89
Certificate issuer:       /CN=746fada8-dc6c-46d4-a25b-49ec0fceeb3d
Certificate serial:       010D0C9F4328576D51CC73C042CFC16CD9D42301
Authority key identifier: B6:A3:4A:9E:49:1A:4C:30:EB:94:74:0B:FE:BD:3F:74:2D:CB:E7:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/746fada8-dc6c-46d4-a25b-49ec0fceeb3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/746fada8-dc6c-46d4-a25b-49ec0fceeb3d/8b9f9de5-7014-30c8-881a-982427e184d5.roa
Signing time:             Wed 28 Aug 2019 20:04:14 +0000
ROA not before:           Fri 23 Aug 2019 04:00:00 +0000
ROA not after:            Thu 23 Aug 2029 04:00:00 +0000
asID:                     395378
IP address blocks:        2605:b81::/32 maxlen: 32
                          2605:b81::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6c:d9:d4:23:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746fada8-dc6c-46d4-a25b-49ec0fceeb3d
        Validity
            Not Before: Aug 23 04:00:00 2019 GMT
            Not After : Aug 23 04:00:00 2029 GMT
        Subject: CN=385576bf-9e7e-40ec-a89e-754b9e0c0684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b8:1a:1e:c9:8d:42:c5:2e:df:67:b1:45:cc:
                    bc:c1:e8:f2:a2:19:b0:3f:7e:cd:54:84:02:97:0b:
                    1d:aa:1d:e5:ab:ba:4e:aa:16:97:31:a0:45:f8:0e:
                    bd:a6:90:bd:d2:f4:e5:a6:d3:a3:d3:14:fd:c3:b2:
                    ac:b7:ae:4f:f7:41:5c:27:f3:51:77:14:b3:31:cb:
                    9c:c8:9d:ef:df:0d:c9:7e:db:ef:e7:f2:7d:25:68:
                    e4:b5:28:c7:bb:08:59:a8:89:91:5b:0c:a7:1f:db:
                    54:d7:f5:cd:9f:53:50:a2:bd:64:d7:dc:77:16:e3:
                    9e:f6:2f:29:8f:ca:92:d3:5a:7c:d3:96:e7:ec:86:
                    d4:dd:fa:4d:71:49:9a:f8:95:d8:4b:d2:55:d4:a5:
                    6d:4e:91:9b:de:62:fd:30:84:71:1d:7c:53:d7:ec:
                    81:39:10:af:da:60:83:97:f6:0d:92:06:58:23:23:
                    63:cc:4f:72:ae:fd:19:80:d8:2b:20:46:cd:ce:ac:
                    ca:b8:ab:86:ac:aa:e5:3b:f7:9b:07:40:f5:a9:2f:
                    ac:49:88:83:e4:a3:5c:ac:54:3b:0e:d0:a0:94:bd:
                    f9:92:a7:1d:cd:02:ba:f0:cf:c8:a9:7c:05:cd:e3:
                    a7:e8:82:f1:8c:f7:ab:bf:bb:74:23:4c:0d:f1:3d:
                    5e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A8:44:B9:49:8A:2C:DC:F7:09:F5:0F:91:29:EF:65:94:E2:59:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/746fada8-dc6c-46d4-a25b-49ec0fceeb3d/8b9f9de5-7014-30c8-881a-982427e184d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/746fada8-dc6c-46d4-a25b-49ec0fceeb3d/746fada8-dc6c-46d4-a25b-49ec0fceeb3d.crl

            X509v3 Authority Key Identifier:
                keyid:B6:A3:4A:9E:49:1A:4C:30:EB:94:74:0B:FE:BD:3F:74:2D:CB:E7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/746fada8-dc6c-46d4-a25b-49ec0fceeb3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b81::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:70:10:19:75:4f:f8:94:80:f9:78:22:b6:2f:12:03:51:b6:
         0a:89:d5:c7:41:1f:60:5f:c5:89:d8:ae:c4:48:1f:05:62:fd:
         d1:e8:01:ca:44:28:d9:a8:eb:cd:fc:5a:a7:fb:33:69:32:38:
         85:0e:13:08:cc:15:68:d8:6e:4c:9d:46:d0:10:b8:f2:38:f5:
         06:c3:ed:51:55:53:3e:c2:12:c8:fb:de:e5:ad:3c:0d:9c:65:
         42:9c:2b:65:4b:95:e0:dc:1c:8b:47:c8:ba:a5:64:9a:05:fa:
         cc:2a:3d:5c:db:10:26:9a:d0:80:8d:30:02:ae:d4:54:c2:ad:
         2b:bb:46:8a:be:5d:d9:3c:f5:7e:af:fc:e3:a0:bc:c0:08:85:
         93:c8:67:78:56:dd:36:63:b6:24:15:50:52:77:09:12:e7:60:
         0d:6c:91:96:42:67:8d:c1:58:05:47:10:f9:16:55:a6:31:1b:
         ff:17:e3:27:c7:01:6f:c8:9f:fc:fb:3b:29:f5:71:e9:bf:85:
         eb:27:05:29:e0:5e:16:05:e9:f6:4b:7a:68:44:5e:25:d1:d4:
         f5:ea:f7:a5:8c:40:97:fa:1f:30:a1:04:5c:b5:03:3a:b2:4c:
         51:25:5c:ab:e3:79:47:ed:9b:44:35:ec:c1:a5:55:b7:4d:af:
         17:a3:37:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----