Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/db528b17-0207-4c84-941b-477434c9aa5b/bd566b3a-6a52-3889-b62e-38f385760293.roa
File:                     bd566b3a-6a52-3889-b62e-38f385760293.roa (raw, json)
Hash identifier:          S5w0+W3ILVOsG9/IAs0D8zu48qCiTp4qztOkDydMxQQ=
Subject key identifier:   0D:57:9E:4E:1A:C4:8E:55:F9:01:18:BF:D9:C4:0E:82:E9:09:91:83
Certificate issuer:       /CN=db528b17-0207-4c84-941b-477434c9aa5b
Certificate serial:       010D0C9F4328576D51CC73C042CFC1695B04C919
Authority key identifier: 9C:D3:1D:8B:92:9E:D9:42:D1:4E:7A:03:5C:06:86:2E:6C:8A:2C:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/db528b17-0207-4c84-941b-477434c9aa5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/db528b17-0207-4c84-941b-477434c9aa5b/bd566b3a-6a52-3889-b62e-38f385760293.roa
Signing time:             Fri 08 Mar 2019 01:57:14 +0000
ROA not before:           Thu 07 Mar 2019 05:00:00 +0000
ROA not after:            Wed 07 Mar 2029 05:00:00 +0000
asID:                     14618
IP address blocks:        74.122.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:69:5b:04:c9:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db528b17-0207-4c84-941b-477434c9aa5b
        Validity
            Not Before: Mar  7 05:00:00 2019 GMT
            Not After : Mar  7 05:00:00 2029 GMT
        Subject: CN=274af6f5-1bea-445e-82e4-947ae9406602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1a:bb:6b:ec:40:8a:21:a0:53:04:85:c6:a0:
                    4b:c8:92:6b:76:25:32:19:e7:0d:b7:8c:53:1c:44:
                    98:23:2d:e5:44:f6:f5:f3:1e:64:67:eb:9c:44:cc:
                    b8:f1:e7:c1:05:0a:31:30:17:ba:cf:48:a2:bf:fd:
                    43:db:83:bc:02:15:22:6b:41:20:94:8b:23:3b:e3:
                    c5:3e:6a:9f:c5:2d:47:7c:69:66:f4:7a:f7:83:d6:
                    0b:38:1c:8d:d5:c2:c4:99:44:92:13:d7:ed:40:31:
                    a1:77:6d:4d:03:95:85:cc:69:9e:f5:77:9e:43:54:
                    46:89:81:30:e0:03:6b:94:31:50:48:12:89:d0:95:
                    c6:63:53:d0:a0:3d:c7:58:06:96:4c:a0:f1:ee:dc:
                    f6:44:fa:ea:49:52:8e:18:e5:63:fb:e9:ed:02:ba:
                    0e:1f:b9:57:51:04:52:dd:a9:77:2a:9a:f0:39:1f:
                    b1:3a:83:bc:4e:cd:1e:4e:c7:36:a7:4c:7e:7e:61:
                    f5:ad:00:cb:16:fb:9c:c3:c8:3c:1d:b7:35:65:c2:
                    6e:43:62:c4:ec:dc:70:3b:1c:ee:d8:df:de:22:0e:
                    1d:89:69:42:5c:34:4e:57:09:d2:a1:d4:1a:b7:f2:
                    7d:72:ba:4a:07:f2:23:e2:55:9c:dc:86:01:f5:60:
                    a8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:57:9E:4E:1A:C4:8E:55:F9:01:18:BF:D9:C4:0E:82:E9:09:91:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/db528b17-0207-4c84-941b-477434c9aa5b/bd566b3a-6a52-3889-b62e-38f385760293.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/db528b17-0207-4c84-941b-477434c9aa5b/db528b17-0207-4c84-941b-477434c9aa5b.crl

            X509v3 Authority Key Identifier:
                keyid:9C:D3:1D:8B:92:9E:D9:42:D1:4E:7A:03:5C:06:86:2E:6C:8A:2C:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/db528b17-0207-4c84-941b-477434c9aa5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.122.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:38:b8:08:da:75:34:cf:80:3a:9b:8d:1f:b1:60:ee:b0:b5:
         a8:0f:18:09:f3:95:69:d4:28:93:93:87:40:d2:f1:7f:43:21:
         c8:28:30:46:6e:31:09:d3:c3:60:34:6a:a7:95:8b:5c:df:c8:
         99:c4:8b:94:e4:6e:4c:6a:45:9d:c8:28:4d:f5:d6:d3:dc:19:
         86:75:95:82:9c:32:96:d6:3c:e0:e7:36:b4:74:c4:a8:19:5e:
         b5:b7:c8:75:d8:2c:85:27:e4:90:42:3f:80:a4:df:b1:e3:89:
         11:cf:52:9d:e9:0e:7d:28:13:c4:a4:b8:70:b5:71:d5:52:ac:
         60:ff:9f:ca:09:1c:59:fb:d3:e8:f0:20:bc:5b:c1:a0:86:b3:
         d3:24:ae:59:db:6c:b8:61:95:3e:a6:94:1f:b4:36:46:27:b2:
         b9:32:df:44:63:70:87:af:8c:5c:c0:40:81:2b:a4:25:11:d3:
         d5:0c:4b:e9:ec:65:18:c9:d1:44:79:c1:41:41:74:a4:11:f8:
         6b:bd:3c:9e:02:e7:9c:9e:d8:d4:f2:3a:fd:b8:71:e1:ce:24:
         f6:ef:86:2b:19:17:02:f4:72:2c:15:b8:58:26:f1:ba:f5:e2:
         86:4f:6e:7c:8a:ba:2f:5a:02:46:9c:08:04:e9:7f:3b:c4:fb:
         b0:4f:7c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----