Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/10df197e-2a52-3540-89e8-d673e139c30f.roa
File:                     10df197e-2a52-3540-89e8-d673e139c30f.roa (raw, json)
Hash identifier:          SCfyhjezfTIrrWDnLhfXKE9DlsqEdMyiuBSGuZne4ZE=
Subject key identifier:   F1:EA:17:9C:15:A4:FA:43:A6:8D:BA:7D:6B:4F:28:8B:B7:2C:10:BB
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172D7FE8736
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/10df197e-2a52-3540-89e8-d673e139c30f.roa
Signing time:             Sun 21 Jun 2020 17:48:01 +0000
ROA not before:           Sun 21 Jun 2020 04:00:00 +0000
ROA not after:            Mon 01 Apr 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        13.107.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:d7:fe:87:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 21 04:00:00 2020 GMT
            Not After : Apr  1 04:00:00 2030 GMT
        Subject: CN=dc1b0162-9456-433e-8d13-77bd6b0dd03c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:26:55:ae:99:04:fc:71:3d:ba:9f:0d:2e:b7:
                    5f:18:38:0b:e8:bb:49:ad:b5:6c:be:08:ea:10:cc:
                    9b:6b:75:ef:51:8c:7e:33:1a:9d:85:43:b8:5f:a4:
                    a8:35:95:cf:88:7d:24:6a:22:f5:a7:56:c2:77:dd:
                    98:07:db:a0:17:e9:09:d6:a6:24:20:45:77:db:69:
                    b7:78:a9:22:fc:cc:1e:58:80:7b:37:ed:2a:39:32:
                    9b:ef:f4:a6:97:43:96:30:8d:5c:4c:83:9d:f8:95:
                    7a:de:00:84:51:ff:76:e3:77:36:1b:f1:4d:d1:f1:
                    8c:5a:06:04:21:26:de:df:3e:fc:36:6e:95:7f:4d:
                    6b:99:12:47:6d:77:4d:14:42:4f:62:ec:0d:eb:f2:
                    f0:82:2d:e9:42:ed:cd:d4:01:56:8f:10:5c:33:f9:
                    31:23:f8:8b:cb:8a:cc:18:45:fd:85:e1:3a:97:7e:
                    33:58:42:f6:7c:7e:2b:5f:1e:80:8e:a6:0c:49:a6:
                    b6:aa:4e:9f:df:25:ca:6d:69:64:43:f4:b1:eb:b3:
                    2b:28:3a:f6:d8:91:d7:fe:08:9f:df:d8:fb:f0:60:
                    0e:30:b8:81:f0:f6:e3:21:d3:2a:6e:2b:8e:20:b3:
                    91:62:c0:1b:ce:9e:33:78:8d:40:3f:b6:d7:c2:22:
                    58:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:EA:17:9C:15:A4:FA:43:A6:8D:BA:7D:6B:4F:28:8B:B7:2C:10:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/10df197e-2a52-3540-89e8-d673e139c30f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.107.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ec:a1:d6:f4:9d:ad:55:5e:12:9f:01:b9:12:09:0f:0d:9b:
         d6:25:89:f5:0a:5c:40:9b:eb:e7:f0:b1:35:93:b4:d4:7b:df:
         ec:94:38:c3:17:39:53:3e:ff:12:fe:98:83:0d:12:79:73:9b:
         e5:b5:52:60:d5:f4:58:76:ed:92:4c:10:51:97:52:c3:2d:8b:
         a5:a2:37:9c:e5:ac:33:c4:19:62:7c:51:75:aa:f2:c8:bd:d9:
         bf:37:06:9e:c2:30:4f:cf:41:42:54:80:c3:12:28:60:f0:95:
         f3:ce:3d:91:40:df:28:9a:83:1d:a4:d4:79:7b:08:34:cd:68:
         3a:39:51:13:a8:14:e2:59:9c:f1:73:8a:d0:47:97:80:e4:ff:
         98:d9:05:6d:04:11:2b:79:06:a0:eb:d6:2a:98:2e:a0:2d:f4:
         f2:37:ec:04:83:68:b3:17:52:8f:82:86:c4:df:01:f5:b0:51:
         07:f7:aa:44:b1:62:24:af:96:04:51:c6:89:f1:ef:a6:b0:36:
         84:8b:72:e9:c9:f8:ed:c0:79:19:e9:50:d3:b5:45:3b:98:eb:
         c7:c2:1a:07:df:16:b3:0c:de:43:9f:09:98:9f:4e:c0:c3:eb:
         a0:f7:81:96:84:1f:24:34:8b:b4:f3:42:0b:5d:95:d5:fd:53:
         f4:d3:bd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----