Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cd0ee2cd-6a2d-395f-8f29-f1d6c12652f8.roa
File:                     cd0ee2cd-6a2d-395f-8f29-f1d6c12652f8.roa (raw, json)
Hash identifier:          iM60A6MKb6jJ7etTaI0RAIPxDyoyMpl9KRvftcuy7GU=
Subject key identifier:   8B:4E:C5:7C:E4:B9:11:9A:D2:8E:8D:D2:86:ED:03:3D:82:E8:90:B6
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E03932BB8
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cd0ee2cd-6a2d-395f-8f29-f1d6c12652f8.roa
Signing time:             Fri 25 Oct 2019 15:40:06 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     46746
IP address blocks:        198.173.201.0/24 maxlen: 24
                          198.173.202.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:03:93:2b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=2974cc0a-cb91-482b-80d0-c04f4d565c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:13:02:8d:6a:51:66:3f:54:54:52:1c:5e:6d:
                    12:62:c7:2a:d0:f3:4e:13:5f:dc:21:9f:4f:19:97:
                    41:36:26:9f:2d:7a:7e:d4:97:49:4f:60:61:c3:b4:
                    61:65:fd:ba:9a:f4:89:c4:fb:04:21:88:ef:47:e1:
                    aa:2f:f7:c3:78:13:76:af:6d:36:0d:b5:c1:b7:34:
                    99:5e:1d:43:c0:0e:cb:1c:3e:81:18:e9:c0:11:5f:
                    c3:fe:82:fd:4c:c7:4f:6e:b9:02:b2:3a:09:b3:6e:
                    e9:06:4d:6e:c2:2f:89:04:63:05:f2:79:5c:54:d3:
                    c1:8f:dd:97:1c:93:a9:4a:26:f8:eb:58:c9:82:7a:
                    49:53:15:ed:6c:f9:79:41:19:7d:fa:64:50:75:b5:
                    c7:3d:c0:9c:c4:3c:7f:71:9b:95:af:c0:20:c0:2b:
                    26:6d:a0:36:98:c7:e8:53:2c:fe:cd:79:3d:1d:47:
                    8f:b6:11:7a:5c:5d:2b:db:ef:ad:ee:d4:fa:3f:41:
                    b8:13:0e:26:df:8a:d6:8e:6a:31:d4:3f:ef:a1:f2:
                    6d:10:ff:68:55:0a:eb:09:38:29:09:d0:b7:a8:7e:
                    5c:fd:3b:97:25:cd:eb:cf:b3:e1:50:14:d3:f4:0f:
                    cb:67:d7:33:05:a3:7c:9e:f4:ac:0c:ef:7f:71:e1:
                    a7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4E:C5:7C:E4:B9:11:9A:D2:8E:8D:D2:86:ED:03:3D:82:E8:90:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cd0ee2cd-6a2d-395f-8f29-f1d6c12652f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.173.201.0-198.173.203.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:3f:b0:4a:ac:3f:c8:5c:39:c1:b1:69:c8:53:b3:ac:62:cd:
         c1:27:89:db:5c:d4:2f:90:2d:b2:e5:7e:98:a1:fb:d0:4e:42:
         ff:19:ee:82:02:df:7e:92:48:0c:d0:b8:1b:4e:e9:f3:93:4a:
         66:95:89:15:1d:8f:3c:85:6f:cf:4d:9d:43:65:25:f8:9e:46:
         3f:f4:47:08:5f:85:94:f7:b1:8e:87:17:7d:5a:4d:80:27:20:
         4e:bc:8d:c3:c0:3e:22:11:83:f1:bb:52:a3:fc:33:e7:67:c1:
         9d:1d:34:68:48:b1:9c:cb:ae:53:7e:81:1c:eb:cc:71:76:4e:
         bb:10:21:1f:7d:24:c5:c0:64:96:67:03:e9:bb:fd:a5:00:46:
         94:08:d9:6b:ab:84:59:3d:86:34:9c:a9:9b:b9:53:34:ca:9e:
         12:a7:dd:81:23:af:81:1b:75:90:75:99:aa:53:4e:60:93:65:
         57:08:84:bc:f9:a1:21:50:4b:98:98:d0:e6:2b:6c:95:4d:6d:
         86:80:57:d9:2a:37:b2:db:36:99:46:3c:02:27:70:e4:5c:75:
         11:ea:fb:68:41:a0:3c:28:5e:37:1f:06:df:4b:bd:79:06:3e:
         5f:77:0a:85:fc:04:19:21:16:5e:99:45:49:60:b4:2f:d6:d7:
         5a:17:03:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----