Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a96baf0-ddef-3c1b-8020-dee12edbe596.roa
File:                     7a96baf0-ddef-3c1b-8020-dee12edbe596.roa (raw, json)
Hash identifier:          xGJZwyUYQg/nf48DvPTzMdRCchaXArWRwvx9sKdFc1s=
Subject key identifier:   0A:C6:4C:5A:8A:B1:08:29:9F:FA:1D:DB:CE:EE:72:CC:B9:CB:71:6F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328576D51CC73C042CFC1669B0CD023
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a96baf0-ddef-3c1b-8020-dee12edbe596.roa
Signing time:             Mon 22 Oct 2018 09:13:20 +0000
ROA not before:           Mon 22 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        63.32.0.0/14 maxlen: 14

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:9b:0c:d0:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 22 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=94d2a304-ad3d-4c2e-bae2-f5aaa17636c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:59:4a:a6:ac:75:00:78:2e:4b:21:97:4d:70:
                    c5:74:f6:02:e6:46:49:96:cd:c5:73:39:98:63:da:
                    06:a5:72:60:3e:19:10:51:98:43:ef:86:2a:0f:53:
                    f1:be:3e:31:f4:48:19:33:85:98:4f:dd:1d:53:1e:
                    86:66:48:a3:3b:a9:56:e6:3e:f8:e4:31:e9:0b:72:
                    ca:1c:a4:21:28:37:69:2f:74:17:e4:bd:87:2d:46:
                    3a:cb:d6:36:3e:1b:29:4b:a4:2f:e3:45:22:73:e7:
                    fb:9c:d0:dd:3b:df:27:27:a4:38:b7:39:c5:46:b6:
                    6f:e4:fc:a2:b9:8d:dc:fb:f0:26:ce:fc:4d:3b:7e:
                    7e:d5:f9:cf:53:8b:06:6a:78:c5:7b:d9:e8:81:5d:
                    0c:79:e6:5a:01:9b:88:30:41:5d:72:12:cb:43:06:
                    42:63:4a:e2:a0:c5:f6:3c:c3:5a:b3:4a:8d:63:90:
                    e2:4e:d9:73:c7:c9:99:94:63:4e:ca:f9:f4:5e:31:
                    1a:17:43:b7:40:f2:8f:08:f1:eb:cb:91:d9:bf:ec:
                    1b:16:fb:53:3a:7a:8c:6d:db:a1:48:f0:1c:b4:48:
                    f4:75:3a:bf:c3:6a:7d:70:52:66:52:f1:b0:65:81:
                    36:2b:18:7b:2c:14:29:3b:ae:9d:58:da:0b:44:7c:
                    e6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C6:4C:5A:8A:B1:08:29:9F:FA:1D:DB:CE:EE:72:CC:B9:CB:71:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a96baf0-ddef-3c1b-8020-dee12edbe596.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.32.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:6e:64:99:b4:dd:be:fc:66:36:15:7f:f0:c9:5f:e4:ec:66:
         6e:78:36:b2:ba:68:b2:69:c8:5b:e9:c7:31:0b:e2:61:9a:ce:
         a6:a4:1c:d6:39:82:f3:7c:76:11:76:53:bf:f1:aa:65:95:11:
         8b:85:48:0b:57:44:14:2e:3b:2f:ee:62:45:83:d9:39:ae:a3:
         5b:96:d6:81:87:fc:3d:7a:27:15:41:05:d6:e9:dd:dd:de:bb:
         51:6b:da:bb:5f:4a:b2:40:e7:72:e3:35:1b:40:53:f4:79:48:
         a8:6d:a5:78:50:d8:40:f1:1f:72:b5:4e:13:8e:88:44:fc:83:
         8e:b8:8b:45:2c:90:f8:db:02:5c:8f:12:55:1d:eb:0f:da:66:
         4a:d2:53:86:7e:3e:4b:82:db:ad:ae:b6:d8:d0:a8:15:73:7f:
         45:cf:e1:95:06:7e:a1:a9:fa:65:1c:1d:54:b5:8b:83:54:09:
         e2:0d:76:ce:27:e5:9a:f9:fc:08:80:82:30:d5:73:e5:2e:72:
         99:0c:65:83:dc:55:40:8d:2b:a5:f1:51:07:e2:99:f3:8b:50:
         3e:5c:be:db:39:18:cc:ec:19:30:22:ed:43:a9:8e:a6:91:dd:
         8d:f2:ed:cf:b6:ab:3b:cf:ea:fb:d0:b0:4e:34:8e:f2:e9:82:
         94:f5:83:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----