Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8d6ce30e-c4c4-30ec-b9d1-b580a0d986a3.roa
File:                     8d6ce30e-c4c4-30ec-b9d1-b580a0d986a3.roa (raw, json)
Hash identifier:          39mYnVZIncivDszWhJeJLstt+T06kMqFKHEzlIRJ3r8=
Subject key identifier:   7C:60:76:23:D9:13:34:B2:89:42:9D:F4:4E:6F:41:FF:6E:71:A4:A8
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16F8639C924
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8d6ce30e-c4c4-30ec-b9d1-b580a0d986a3.roa
Signing time:             Wed 08 Jan 2020 17:35:31 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     20940
IP address blocks:        2001:418:1401:4::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:86:39:c9:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=45885f65-24a1-4be0-83b6-2ab42282438e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:65:1d:6d:1b:8c:79:5f:ce:93:5a:f9:67:e2:
                    f1:94:cc:9c:f1:7e:ac:5d:71:9f:51:b3:3b:d6:16:
                    c5:ed:af:1c:40:dc:fc:32:ac:56:11:05:91:6b:6c:
                    5f:24:a4:f2:98:48:41:9f:ae:ad:2b:62:34:d5:e2:
                    87:73:81:28:13:6a:36:4b:32:ee:b6:29:8f:38:9e:
                    44:ce:f1:15:27:2c:ce:c4:51:44:e3:3f:9e:fa:b3:
                    19:a7:46:f5:32:52:f7:50:cb:db:d9:23:a2:df:cb:
                    ab:f1:01:8f:83:dc:17:11:66:9b:f6:5a:7e:fb:1b:
                    18:37:86:a5:af:cf:ac:3b:96:86:95:c8:06:dd:52:
                    5b:81:64:43:3b:d9:d9:69:ce:bf:34:0b:d5:06:4d:
                    f1:6e:b3:48:22:93:38:e7:dd:7e:01:9f:a0:db:6c:
                    f8:ad:29:d8:fc:55:19:8b:77:6b:58:c2:49:07:8c:
                    04:52:ed:93:e9:2e:3e:f1:78:7b:46:bd:7c:64:87:
                    08:e3:41:b1:51:59:8c:50:bc:03:70:ba:31:4d:dd:
                    91:e2:12:a8:61:7d:7a:95:e0:34:b3:8f:c0:4a:c6:
                    c2:40:43:66:2a:dc:f9:97:65:49:5d:80:67:35:c5:
                    fb:c6:c2:5a:d0:67:d4:86:20:89:69:06:48:da:79:
                    4e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:60:76:23:D9:13:34:B2:89:42:9D:F4:4E:6F:41:FF:6E:71:A4:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8d6ce30e-c4c4-30ec-b9d1-b580a0d986a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1401:4::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:bd:7d:83:57:86:9b:d0:ce:09:a1:c4:8f:69:df:db:84:de:
         9d:84:81:31:d2:ad:d3:d8:bc:9c:21:78:05:7f:d1:d9:e4:6e:
         ac:2d:21:32:63:18:b3:e3:94:89:b5:56:75:de:03:aa:d8:51:
         34:47:c7:3d:b0:af:f9:3e:0c:48:24:65:f2:62:f5:71:6e:5f:
         31:eb:3f:e4:72:1e:8a:30:fa:d4:bd:16:02:22:90:e3:e8:e3:
         61:a1:e2:1a:19:8c:7a:86:04:01:fd:46:24:50:aa:2e:c6:4e:
         93:e3:0d:b4:55:3e:35:3f:d5:d4:2d:32:08:40:c6:06:ca:56:
         ea:ba:1d:47:2d:72:9f:62:fe:9b:93:5f:96:62:cb:af:ea:97:
         10:55:ff:5c:89:4f:65:14:92:42:f3:36:dd:1a:f7:31:15:13:
         9a:0a:df:5e:a6:f0:09:d9:2f:38:b1:b4:2c:88:bd:a9:c7:99:
         f2:dc:99:0e:97:1f:57:ef:8e:88:8f:82:a4:a6:a9:5a:d2:35:
         31:be:23:5d:fa:2e:99:f9:28:cd:3f:3b:b2:58:98:89:26:44:
         66:f4:4c:dd:71:39:0e:e7:6b:31:56:0d:a2:e8:30:9a:5a:29:
         d9:46:4c:36:ce:fe:18:3a:91:0e:04:2d:c8:08:5a:18:7f:bb:
         85:e6:00:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----