Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe243884-ccbf-4a54-86d4-961a383a71cb/f2731520-ce23-3663-ab55-526c7ff77dec.roa
File:                     f2731520-ce23-3663-ab55-526c7ff77dec.roa (raw, json)
Hash identifier:          5Jqo05DcHRdgFwYGG8lDVwP0WXZuGxEuhruVqaSVA8c=
Subject key identifier:   0A:E4:68:22:64:CA:3F:FA:46:AF:ED:50:45:76:DB:C2:61:60:31:84
Certificate issuer:       /CN=fe243884-ccbf-4a54-86d4-961a383a71cb
Certificate serial:       010D0C9F4328576D51CC73C042CFC16F248558BB
Authority key identifier: 38:00:92:12:E8:F8:45:6B:94:00:43:45:10:63:72:F7:5A:D2:7A:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe243884-ccbf-4a54-86d4-961a383a71cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe243884-ccbf-4a54-86d4-961a383a71cb/f2731520-ce23-3663-ab55-526c7ff77dec.roa
Signing time:             Fri 20 Dec 2019 18:15:16 +0000
ROA not before:           Fri 20 Dec 2019 05:00:00 +0000
ROA not after:            Thu 20 Dec 2029 05:00:00 +0000
asID:                     16509
IP address blocks:        98.142.176.0/24 maxlen: 27

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:24:85:58:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe243884-ccbf-4a54-86d4-961a383a71cb
        Validity
            Not Before: Dec 20 05:00:00 2019 GMT
            Not After : Dec 20 05:00:00 2029 GMT
        Subject: CN=0b5027e6-93de-4974-a6ee-ebacacd1afbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a7:7e:63:a1:51:a1:1b:a7:4b:e0:0e:8c:6a:
                    56:0e:f5:87:93:10:17:fa:19:29:fd:08:42:47:51:
                    15:fb:f8:ba:84:ee:34:82:24:0f:75:c9:30:67:55:
                    26:30:1b:bc:ef:46:fd:11:c3:3f:8d:83:db:bb:56:
                    28:92:25:43:46:12:a3:f9:7c:30:3c:20:c7:dc:ab:
                    08:7a:5d:e1:7d:96:e0:c7:17:8f:e8:e6:3c:3d:b5:
                    c8:65:1b:96:ed:64:6b:8f:c5:1d:d6:b4:cc:c9:51:
                    fa:65:ce:cf:93:e2:f2:12:6d:32:b8:ab:7c:30:5a:
                    7e:fe:1b:5e:f2:d3:08:bf:01:8d:5f:ba:e7:bd:88:
                    39:59:db:f5:8c:97:ee:2b:e9:f3:6a:80:38:eb:92:
                    2b:b1:f1:9b:a1:05:7c:23:38:29:cd:7c:26:ae:87:
                    de:b5:6a:94:ac:e3:95:15:4e:e7:67:28:1d:24:22:
                    c3:c8:6b:89:43:9f:1f:6c:aa:b0:b5:53:fd:8d:df:
                    c4:5c:07:58:4e:10:65:e6:d3:fc:fc:95:84:71:49:
                    e0:20:da:c3:47:74:51:2b:1e:a1:68:58:d6:c3:85:
                    70:8d:70:e6:ef:ea:fd:64:e7:81:b0:d1:ea:e8:bb:
                    28:b6:7c:5d:a8:2e:9c:c0:3c:13:4b:71:04:4e:24:
                    b4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E4:68:22:64:CA:3F:FA:46:AF:ED:50:45:76:DB:C2:61:60:31:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe243884-ccbf-4a54-86d4-961a383a71cb/f2731520-ce23-3663-ab55-526c7ff77dec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe243884-ccbf-4a54-86d4-961a383a71cb/fe243884-ccbf-4a54-86d4-961a383a71cb.crl

            X509v3 Authority Key Identifier:
                keyid:38:00:92:12:E8:F8:45:6B:94:00:43:45:10:63:72:F7:5A:D2:7A:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe243884-ccbf-4a54-86d4-961a383a71cb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:fe:28:fa:a1:34:e1:85:9f:2e:79:4f:c3:c8:6d:07:c6:40:
         5d:98:66:f1:bd:b1:a4:4e:32:e6:dd:e9:c2:3f:56:f1:8e:79:
         b3:c2:f6:b9:65:1a:86:52:24:65:1c:b1:2f:77:98:69:84:52:
         6a:e0:df:a5:e5:54:5a:9a:34:08:2a:a4:23:0e:d1:77:27:36:
         c3:15:90:be:2e:7c:63:43:b0:a8:bf:68:27:9a:da:ee:2b:04:
         7c:4f:7a:82:a7:b7:32:6e:03:a4:5a:4e:c0:0d:02:3a:d8:bc:
         d5:ad:58:c4:76:b3:f4:45:9f:3f:36:fe:1b:81:ef:ba:7d:bd:
         1e:03:70:6a:f1:31:40:36:6b:75:2d:a3:f5:6f:f5:0b:c0:c7:
         20:d9:a6:1b:56:2a:fe:71:af:05:98:63:b0:a2:d0:ca:c1:4c:
         cc:5f:4e:98:35:e7:fe:33:84:fb:81:66:14:c4:59:ee:10:74:
         ad:57:77:c8:c9:91:75:55:a0:aa:83:e4:22:64:2f:b4:b2:7c:
         ac:bc:bb:e2:1f:d3:df:2f:92:42:90:b2:cd:a5:9f:84:37:5f:
         83:18:f3:13:ff:6c:2a:b2:3e:74:a8:a7:01:4e:15:ce:9d:bd:
         99:48:e2:4e:48:cf:1b:13:97:87:b3:b6:91:f9:53:5d:cd:f7:
         de:50:ba:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----