Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a9c6b068-ed95-3c61-b5b5-68893aa1ca53.roa
File:                     a9c6b068-ed95-3c61-b5b5-68893aa1ca53.roa (raw, json)
Hash identifier:          J8jQoG5I4MQajRfjXPWcGw0uwgDA4yBbz9m1KtHBJS4=
Subject key identifier:   A0:76:A0:61:D6:91:44:6F:7B:8F:FC:F1:21:A2:DD:B7:C7:2C:BB:8F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F432858393A684C1FD2A5245B67691EA0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a9c6b068-ed95-3c61-b5b5-68893aa1ca53.roa
Signing time:             Fri 12 Mar 2021 05:00:00 +0000
ROA not before:           Fri 12 Mar 2021 05:00:00 +0000
ROA not after:            Fri 05 Mar 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        75.134.192.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:3a:68:4c:1f:d2:a5:24:5b:67:69:1e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 12 05:00:00 2021 GMT
            Not After : Mar  5 05:00:00 2027 GMT
        Subject: CN=5e9984d6-3a34-4680-80de-dd778384d363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:44:6f:97:4e:74:2d:14:a4:de:16:4e:e0:b4:
                    d6:d5:81:eb:47:b5:5b:8a:78:80:70:bb:89:b0:9f:
                    63:fa:fe:f1:30:54:8e:62:18:d7:d6:62:5d:cd:62:
                    18:09:2f:28:cb:5c:1c:68:a3:c8:ed:a5:7a:3b:9c:
                    0d:08:27:a0:c2:67:fd:3a:f9:45:c7:17:cc:3c:c4:
                    3f:6d:6e:79:02:7d:ca:40:6d:d8:82:99:ed:e9:b6:
                    e2:1d:44:ab:e0:34:42:e6:09:a3:92:aa:96:a7:52:
                    ab:a0:17:be:a5:63:aa:14:1d:35:f8:dd:d5:a1:92:
                    22:c6:4e:08:11:51:89:66:57:e3:b5:d4:97:6e:3c:
                    9c:8e:3d:b6:4c:fb:22:d9:cb:5f:f6:3d:d3:f4:5c:
                    fc:d6:50:e1:59:e1:0f:ca:db:fb:12:bd:b2:04:92:
                    75:35:97:66:9d:1e:44:cf:45:c9:2c:66:58:91:53:
                    c8:d4:62:b4:cc:9b:de:a7:91:3b:13:4a:d4:7d:7c:
                    7d:e0:7d:1c:a6:15:eb:65:5b:34:32:11:0f:d2:97:
                    76:7d:b7:30:73:f1:7f:59:f0:dd:52:52:9c:bd:23:
                    ab:f4:04:55:ae:85:f2:59:60:a9:c8:0e:af:f1:0c:
                    43:74:76:e5:b8:86:c6:50:3b:db:9a:bb:aa:8d:52:
                    ce:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:76:A0:61:D6:91:44:6F:7B:8F:FC:F1:21:A2:DD:B7:C7:2C:BB:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a9c6b068-ed95-3c61-b5b5-68893aa1ca53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.134.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:66:da:bf:c1:40:b6:55:a7:24:c2:f2:e3:ff:10:ab:4f:e6:
         3c:07:1c:3d:9b:69:00:c2:99:f8:89:4a:cb:8d:5f:19:6b:14:
         3e:e2:31:4e:81:30:e3:73:38:b2:f8:4e:94:85:e2:68:82:3e:
         29:3b:47:50:83:7b:19:c2:81:7b:36:7e:58:27:b4:3a:d4:c8:
         0b:b0:8e:a5:9f:f8:20:3b:2b:32:c3:b5:4d:75:3b:01:bb:99:
         7e:cd:a7:8d:b9:66:22:88:68:5d:b8:d1:78:b1:e4:95:3d:4f:
         59:ca:84:49:d2:99:3e:03:f8:c9:75:e3:90:e7:22:48:3b:df:
         fa:5a:fe:76:dc:0c:34:c3:a2:74:34:a6:0a:10:aa:9a:7e:39:
         e2:d0:bb:58:21:d6:9f:9e:69:07:8f:4d:d2:db:ab:8f:a4:e0:
         29:7a:3f:dc:02:84:85:9e:a4:b2:39:0e:e9:c0:fc:06:3e:92:
         14:d2:29:32:e9:db:3f:d6:46:61:18:db:00:9d:fd:5b:95:39:
         5c:8d:e8:c4:7c:bb:ff:10:85:b9:4e:f8:d8:7e:9e:ef:25:ab:
         ff:e4:c6:7c:dd:b9:93:d9:ae:e2:39:15:b8:24:ea:04:81:e1:
         0e:20:42:8c:9d:13:5d:34:4f:5e:4b:40:9c:49:2e:1b:79:c4:
         7d:24:e1:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDk6aEwf0qUkW2dpHqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTIxMDMxMjA1MDAwMFoXDTI3MDMwNTA1MDAwMFowLzEtMCsGA1UEAxMk
NWU5OTg0ZDYtM2EzNC00NjgwLTgwZGUtZGQ3NzgzODRkMzYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkRvl050LRSk3hZO4LTW1YHrR7VbiniAcLuJ
sJ9j+v7xMFSOYhjX1mJdzWIYCS8oy1wcaKPI7aV6O5wNCCegwmf9OvlFxxfMPMQ/
bW55An3KQG3Ygpnt6bbiHUSr4DRC5gmjkqqWp1KroBe+pWOqFB01+N3VoZIixk4I
EVGJZlfjtdSXbjycjj22TPsi2ctf9j3T9Fz81lDhWeEPytv7Er2yBJJ1NZdmnR5E
z0XJLGZYkVPI1GK0zJvep5E7E0rUfXx94H0cphXrZVs0MhEP0pd2fbcwc/F/WfDd
UlKcvSOr9ARVroXyWWCpyA6v8QxDdHbluIbGUDvbmruqjVLOPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKB2oGHWkURve4/88SGi3bfHLLuPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTljNmIwNjgtZWQ5NS0z
YzYxLWI1YjUtNjg4OTNhYTFjYTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES4bAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFxm2r/BQLZVpyTC8uP/EKtP5jwHHD2baQDCmfiJSsuNXxlrFD7iMU6B
MONzOLL4TpSF4miCPik7R1CDexnCgXs2flgntDrUyAuwjqWf+CA7KzLDtU11OwG7
mX7Np425ZiKIaF240Xix5JU9T1nKhEnSmT4D+Ml145DnIkg73/pa/nbcDDTDonQ0
pgoQqpp+OeLQu1gh1p+eaQePTdLbq4+k4Cl6P9wChIWepLI5DunA/AY+khTSKTLp
2z/WRmEY2wCd/VuVOVyN6MR8u/8QhblO+Nh+nu8lq//kxnzduZPZruI5Fbgk6gSB
4Q4gQoydE100T15LQJxJLht5xH0k4Ws=
-----END CERTIFICATE-----