Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ee7ad18f-8f0f-32a8-9e2d-086c5247fe6d.roa
File:                     ee7ad18f-8f0f-32a8-9e2d-086c5247fe6d.roa (raw, json)
Hash identifier:          PGTkPmu83uNvCDeQRFiQ3w6mIAPi72R++kPNduQaUUo=
Subject key identifier:   9A:28:3E:7C:84:E2:8F:8D:CB:31:CC:42:29:76:88:AC:A3:40:75:93
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328583AA712F44EE87E66EB8D20E980
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ee7ad18f-8f0f-32a8-9e2d-086c5247fe6d.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Tue 13 Jul 2027 04:00:00 +0000
asID:                     20115
IP address blocks:        35.151.176.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:12:f4:4e:e8:7e:66:eb:8d:20:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Jul 13 04:00:00 2027 GMT
        Subject: CN=4807f93c-b162-4183-827b-d3e9c2e318c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d4:0f:91:96:96:b7:9e:97:19:e2:5c:a0:0d:
                    20:3c:34:7a:71:ce:62:7f:7e:d3:f3:40:c7:e5:47:
                    08:09:60:3c:a6:ec:35:dc:97:be:50:f3:c1:f6:89:
                    b1:8b:14:94:b5:3a:d9:53:c4:18:57:fd:90:de:02:
                    0a:88:e5:42:db:3d:57:26:a7:73:71:90:8c:c8:75:
                    dc:df:ba:dc:df:55:65:5c:fe:5d:b2:d4:d6:c0:03:
                    7d:af:e5:5b:28:d2:15:d1:13:84:5d:ab:08:4d:8a:
                    cd:28:7f:5f:d1:91:5f:f9:24:79:c8:25:39:08:91:
                    54:18:00:c0:cb:31:ed:f6:91:f1:b4:61:0a:0e:8b:
                    91:95:73:07:2a:61:f8:60:e0:3f:ac:84:b2:57:4b:
                    68:83:d6:03:4b:a0:ca:1a:9f:3b:37:ce:32:ae:a2:
                    ec:31:36:31:62:14:da:cb:9a:61:d1:f9:40:5d:a4:
                    9e:e7:0b:36:21:45:28:46:35:66:27:5b:d1:c1:99:
                    60:a1:a6:e0:58:69:b0:11:55:ad:10:c5:2c:45:c7:
                    7b:08:1c:69:10:6d:53:b7:a5:34:46:37:e6:74:4e:
                    b7:43:bd:6c:32:a0:ca:d2:e8:ae:14:18:5c:41:5e:
                    26:d4:de:74:5d:17:d7:6f:65:9f:73:42:ba:ab:73:
                    6a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:28:3E:7C:84:E2:8F:8D:CB:31:CC:42:29:76:88:AC:A3:40:75:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ee7ad18f-8f0f-32a8-9e2d-086c5247fe6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.151.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:35:be:09:40:a1:3d:8a:2f:ec:b7:51:9b:ac:c3:6a:62:6c:
         b1:51:11:07:9d:1f:e7:55:fc:13:a1:b7:4a:2d:d8:a9:55:f4:
         b7:1a:02:c2:cc:33:13:e7:4b:1d:e8:07:14:18:09:29:48:de:
         98:de:d0:67:df:bb:50:78:f3:77:ad:ee:57:ad:0c:f8:9a:c4:
         7d:68:61:c1:fd:43:6f:95:db:f8:2b:4b:71:23:9b:16:8f:59:
         a8:04:ab:bf:2b:83:a3:99:38:51:af:a5:f1:60:40:c3:c8:cc:
         c8:67:59:83:4b:73:e2:ae:e9:d3:ff:ce:88:c3:b7:f5:69:07:
         69:72:f8:79:1b:9c:5c:35:ae:31:c4:1b:32:f8:03:b2:65:41:
         92:e7:20:29:48:15:17:ae:5a:71:17:bd:c5:7c:bd:b3:0f:cb:
         32:8d:65:06:6d:02:0c:03:88:69:11:99:57:bd:a0:0f:d5:8b:
         9a:7d:f8:83:f0:34:ee:dc:75:93:b7:a2:d9:83:75:ec:67:1e:
         fe:9c:18:b9:0d:b6:0f:2a:43:ec:62:03:12:82:f0:9b:cb:67:
         90:c3:a7:b6:5a:93:69:99:17:79:8a:67:c7:9a:7a:c3:1d:69:
         4a:aa:2e:c3:fb:2d:05:82:aa:8e:88:a6:9e:cc:8b:38:a2:94:
         92:15:63:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----