Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ccb27a7c-b7d8-3ce4-830a-7ddbee0c5743.roa
File:                     ccb27a7c-b7d8-3ce4-830a-7ddbee0c5743.roa (raw, json)
Hash identifier:          2j98G0ZEI7NL2bogx8+/BlMgohEcLTY2qGKSfByaHJU=
Subject key identifier:   92:5F:07:62:36:E2:E1:22:10:0F:F9:D4:90:5B:B7:50:83:66:B2:5D
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16DD55F0889
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ccb27a7c-b7d8-3ce4-830a-7ddbee0c5743.roa
Signing time:             Wed 16 Oct 2019 16:20:38 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     174
IP address blocks:        216.44.216.32/28 maxlen: 28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:d5:5f:08:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=bf4b8b7d-f2b0-4702-a39e-25c6eae254da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:74:ed:e4:38:fe:8e:a8:ce:6f:f2:47:37:b6:
                    e9:fe:6c:b9:70:fc:ea:bc:bd:23:ee:bd:dc:a1:e4:
                    d9:a2:60:62:42:54:90:24:5e:f9:7d:a8:15:7b:1e:
                    9d:1c:da:fb:03:8d:01:98:69:2b:5c:8d:5f:f2:92:
                    aa:47:b1:e7:84:41:f1:07:87:87:76:a1:9b:9b:5f:
                    32:25:a8:5c:8a:ef:b4:31:66:57:df:e7:8e:db:b1:
                    bb:3a:4d:01:2f:18:95:7e:17:e2:63:7b:d6:22:e7:
                    55:7e:fb:90:d8:51:f9:91:67:b7:1a:34:56:4a:17:
                    3e:d8:70:f5:18:6d:2b:58:aa:64:29:21:a5:4c:66:
                    71:9f:44:8a:cb:1c:16:7c:1c:7b:cc:9e:dd:9c:7e:
                    52:e2:16:6f:35:50:25:b5:8d:ef:ee:38:d0:1c:65:
                    a0:0d:21:14:f2:35:f2:0e:de:19:84:c7:f3:64:c0:
                    6c:56:ef:cf:6c:86:6d:f4:0e:23:84:25:90:bf:c3:
                    f5:62:52:09:8f:be:cf:bc:13:b1:90:55:4d:41:3e:
                    c3:f2:a9:4f:6d:76:ee:fa:95:ef:e5:85:69:6b:87:
                    85:30:ee:1d:a6:86:ab:a3:71:74:67:d2:50:ea:34:
                    67:78:35:f3:77:6c:3c:7d:3a:8b:9a:ce:ce:c2:42:
                    4c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5F:07:62:36:E2:E1:22:10:0F:F9:D4:90:5B:B7:50:83:66:B2:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ccb27a7c-b7d8-3ce4-830a-7ddbee0c5743.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.44.216.32/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:7a:be:dd:d6:7e:c7:de:2a:0b:87:71:0d:af:d5:52:5d:73:
         92:87:9f:16:ee:ec:18:06:8a:0d:ce:1b:9f:ef:5c:75:5b:92:
         e0:9e:4e:82:32:95:b1:31:a6:cd:d6:f3:3a:d2:a4:d1:2f:7c:
         b7:29:a7:b0:d6:de:46:19:9c:9f:7d:83:e4:0a:5d:08:59:d4:
         b8:5b:2b:c3:b0:90:30:83:1f:76:4c:39:f6:ab:77:a1:2f:52:
         6d:dd:8e:92:a5:ea:fc:5e:ec:fd:aa:3c:cd:c3:99:93:f4:4d:
         6c:cc:d3:ff:52:ab:7b:11:a6:5d:50:fb:2f:82:96:8a:d1:b2:
         30:9f:64:b1:aa:f4:90:37:43:b9:5d:67:28:b2:04:e9:84:67:
         ee:b7:3e:c1:9f:b2:68:6f:2d:45:40:78:87:2e:98:a0:e3:b9:
         66:01:e8:c6:1c:a4:69:80:12:16:1d:82:d9:ff:98:52:4d:f8:
         ff:53:95:40:78:ad:c5:ee:37:32:b4:c7:ad:d3:ea:17:99:a5:
         62:e4:d8:04:c5:9c:22:d2:25:aa:7f:42:44:2c:c7:61:0c:1f:
         e1:52:90:6d:69:c5:1a:a4:a1:01:5c:87:80:fa:ce:7d:fe:85:
         29:73:f9:6a:0f:b6:63:60:b5:3d:09:94:ed:5a:6d:9f:7f:ce:
         7f:0d:17:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----