Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514/41756f7e-15d6-315d-a4f6-757b3f61d861.roa
File:                     41756f7e-15d6-315d-a4f6-757b3f61d861.roa (raw, json)
Hash identifier:          5d06wta3OK4OS+JoB/+ihmSXQJ+CwnLMe1GvQNEw5Tg=
Subject key identifier:   D8:A7:8E:C4:DD:1E:0A:41:36:88:CC:6B:7E:15:83:A6:BF:EA:1D:CB
Certificate issuer:       /CN=dc969dfb-52db-45b6-9244-62c3f7ddf514
Certificate serial:       010D0C9F432858391BFE02D431EEF2B55D49B300
Authority key identifier: CA:DC:79:A9:69:34:E9:AF:17:2E:50:66:00:0A:A1:30:0D:EC:61:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514/41756f7e-15d6-315d-a4f6-757b3f61d861.roa
Signing time:             Thu 01 Aug 2019 04:00:00 +0000
ROA not before:           Thu 01 Aug 2019 04:00:00 +0000
ROA not after:            Sun 04 Jun 2023 04:00:00 +0000
asID:                     138995
IP address blocks:        192.209.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:1b:fe:02:d4:31:ee:f2:b5:5d:49:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc969dfb-52db-45b6-9244-62c3f7ddf514
        Validity
            Not Before: Aug  1 04:00:00 2019 GMT
            Not After : Jun  4 04:00:00 2023 GMT
        Subject: CN=fe5d001e-a79b-427e-af74-fc1b9112dac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8c:cb:82:6b:75:2a:cb:34:e6:bf:1e:85:1a:
                    14:5d:f2:c3:8b:3f:cc:f0:ef:73:7d:07:54:17:9a:
                    76:99:99:8b:b9:c7:33:14:34:c4:31:e5:37:b6:ba:
                    0e:a7:3e:86:7c:00:2b:64:02:d9:12:05:8d:32:b4:
                    4a:40:c4:10:86:1c:53:e2:18:3e:9f:47:c6:0d:93:
                    00:7b:94:4c:85:0d:c3:45:19:00:06:8c:2a:26:41:
                    d1:cb:08:0a:a3:b0:7f:d8:2b:ea:bd:0e:12:4e:94:
                    e0:4f:74:7e:b6:58:92:eb:ce:87:01:28:3e:7f:54:
                    52:13:1c:fb:bc:cc:7f:42:da:9d:7e:67:05:a9:4d:
                    c3:17:a4:c7:8e:f5:23:32:a7:98:b4:f5:35:e3:f7:
                    44:8b:02:bd:45:ff:bc:b2:94:0a:43:fe:cf:8e:59:
                    1a:7c:fa:ab:f7:c7:8d:d0:3f:1a:6f:4c:ff:3e:3a:
                    ee:39:5f:4e:ac:3b:57:e3:52:e5:66:86:04:0b:c7:
                    c4:3f:a0:f5:b6:57:18:e0:3c:49:b4:5c:97:eb:68:
                    8c:d7:ab:6d:92:08:3b:83:b4:96:30:a7:4a:ce:d6:
                    2d:63:3c:17:d4:49:c6:89:2e:e4:e5:b9:31:52:6e:
                    ea:49:35:17:8f:6e:b7:f3:07:b8:92:5f:cf:42:d7:
                    46:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A7:8E:C4:DD:1E:0A:41:36:88:CC:6B:7E:15:83:A6:BF:EA:1D:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514/41756f7e-15d6-315d-a4f6-757b3f61d861.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514/dc969dfb-52db-45b6-9244-62c3f7ddf514.crl

            X509v3 Authority Key Identifier:
                keyid:CA:DC:79:A9:69:34:E9:AF:17:2E:50:66:00:0A:A1:30:0D:EC:61:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.209.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:31:33:7b:e7:79:0c:58:29:ef:6b:39:f5:a7:93:f5:be:7f:
         25:42:a3:b9:bb:43:65:08:3d:4c:83:cf:f3:b6:48:e4:25:01:
         36:ee:0d:7d:1c:3d:5d:b0:92:5a:f6:c9:90:bf:0b:8b:93:a2:
         72:af:02:ba:da:88:61:02:f4:ea:30:f7:6a:c3:bd:90:d2:e8:
         d4:96:63:79:5b:3e:9e:c0:4d:75:4f:90:90:4a:fd:6a:77:da:
         ca:2b:44:5a:05:de:83:3e:78:ea:0e:38:6c:68:b7:e8:50:7b:
         72:4e:64:a8:21:03:3b:b0:c9:26:cb:73:f2:01:8f:dc:f6:fa:
         8f:4d:f6:3f:1a:e1:99:56:cd:c1:7e:85:6a:8b:71:27:23:67:
         d1:b8:01:07:b3:a7:21:4d:49:c6:ee:31:8e:e9:e4:c6:58:18:
         38:a5:70:93:e4:da:f2:54:5a:74:1f:ad:59:eb:b5:63:ee:64:
         a2:52:41:c3:c5:e6:98:36:43:75:8e:63:50:cd:fc:3b:42:f0:
         0d:d8:6e:89:f2:87:bd:cb:57:de:cc:f5:1f:e7:06:ae:b5:8f:
         9a:b6:6d:a0:de:4a:d4:ba:87:a3:a4:18:c1:6c:a5:43:3b:25:
         d5:3e:45:a4:30:ec:91:65:45:53:7a:8a:a7:94:a6:b7:e5:67:
         a4:05:60:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----