Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f927e7d-1181-3b45-854f-1c5346da737c.roa
File:                     8f927e7d-1181-3b45-854f-1c5346da737c.roa (raw, json)
Hash identifier:          C+atGjHWg0pPyz9rtcxeXDbeo+zAtIkGpOJ8NB4d1Zs=
Subject key identifier:   02:B5:50:45:F4:9E:3F:31:F2:B8:EE:AE:80:0B:7E:85:D3:23:9F:7C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328576D51CC73C042CFC166A33EEC0E
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f927e7d-1181-3b45-854f-1c5346da737c.roa
Signing time:             Tue 23 Oct 2018 23:25:01 +0000
ROA not before:           Tue 23 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        70.132.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:a3:3e:ec:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 23 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=b26144c3-869f-4dd9-8e9e-fe01807886d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:79:f4:39:60:4a:aa:22:9c:be:bd:11:91:73:
                    d7:51:91:be:bd:c8:78:ad:0d:20:c7:e0:1d:7e:dc:
                    f9:15:ae:95:72:ba:07:c8:29:0f:5f:da:95:2b:c0:
                    39:e0:40:9a:6f:8d:20:17:3c:fb:f6:9e:ab:6f:31:
                    a9:55:1b:af:fc:b3:0f:49:41:15:6e:53:14:87:12:
                    48:be:45:f8:37:1f:8b:26:b3:ed:ee:d7:a5:d8:67:
                    25:e7:34:be:3f:fd:8b:ef:65:90:b3:ae:4d:82:ff:
                    df:22:94:d1:e2:33:40:19:c3:be:74:a4:49:b0:03:
                    69:07:4f:d9:4d:6c:d4:09:df:38:dd:17:09:e2:d2:
                    b9:3b:c8:9d:66:5e:82:d2:58:c3:43:74:e1:fe:39:
                    54:a8:66:3e:74:a6:7f:84:31:db:4d:b3:7a:1d:80:
                    41:b2:a9:94:83:aa:6f:10:98:5c:75:ae:3d:13:3d:
                    79:83:8c:47:f7:d6:23:40:3e:c0:c9:26:7e:92:c1:
                    09:23:76:2f:3e:9f:64:42:3c:bf:7a:09:eb:d4:29:
                    d4:52:2e:ad:2e:47:a8:1c:20:dd:2c:26:d2:df:85:
                    49:5d:98:d3:9b:37:2b:c0:bd:5b:91:70:ce:7f:23:
                    ef:06:a5:b4:17:d7:f0:67:57:0c:e7:8c:3a:e5:3e:
                    3c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B5:50:45:F4:9E:3F:31:F2:B8:EE:AE:80:0B:7E:85:D3:23:9F:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f927e7d-1181-3b45-854f-1c5346da737c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.132.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:db:5a:20:48:22:62:fd:09:f4:87:df:93:fb:91:41:5e:e1:
         b5:2e:73:8e:bc:05:3d:60:ce:32:b6:a2:bb:bb:ed:d5:9d:d5:
         64:3f:ea:db:ab:13:f2:21:9d:cf:c0:13:8b:5e:02:67:fa:89:
         91:6e:9a:c8:38:dc:a7:5b:7a:7d:3a:c7:01:8d:c2:69:76:68:
         b6:cd:04:59:79:f0:ce:e0:57:4e:cc:9b:e2:a3:59:e2:35:57:
         50:8f:68:0e:47:bd:37:d0:26:da:85:b3:9a:47:b8:1a:51:10:
         10:18:23:ac:0f:74:5f:be:22:33:e5:7c:33:5d:1f:52:11:a9:
         7e:3d:e9:6a:c5:b5:5a:0f:ca:5f:b1:3a:02:3c:49:8c:cd:86:
         4a:27:fe:2a:92:4b:72:cd:23:f8:d5:8c:29:34:86:ad:32:72:
         f1:fd:3e:d3:fc:8a:8d:5c:53:8e:79:72:0f:bc:f0:36:df:00:
         ba:e6:a8:7e:d0:86:45:c6:fa:20:66:94:b9:6b:14:99:33:e4:
         f7:6f:9c:b8:ab:85:6b:26:e6:06:8f:b3:2b:2f:c1:85:a1:99:
         fa:b7:14:0c:d5:58:5b:a3:6b:8f:f0:db:10:10:8f:57:67:53:
         41:fa:92:68:cb:c8:e1:a1:48:ae:c7:44:fe:0c:79:c4:b8:7c:
         41:2e:0e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----