Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/983432ca-4721-3c2f-8c41-235acdeb0680.roa
File:                     983432ca-4721-3c2f-8c41-235acdeb0680.roa (raw, json)
Hash identifier:          SW1GCWe020irro2DScoOAIeXGy/5DMEF6nkVpTJWKN8=
Subject key identifier:   76:62:3C:0F:D0:6C:BD:23:91:DE:C5:94:B1:36:7B:8F:23:E8:B5:4A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328576D51CC73C042CFC1669632202B
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/983432ca-4721-3c2f-8c41-235acdeb0680.roa
Signing time:             Sun 21 Oct 2018 10:35:59 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        76.223.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:96:32:20:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=49d7f32b-c900-4e15-b097-63ddb7006424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:06:89:17:23:dc:5c:c1:e6:a2:73:c1:21:57:
                    19:72:c3:8d:6d:10:f1:f6:73:4c:3b:2f:7c:1d:19:
                    bb:01:31:b5:6a:58:ef:08:71:34:4c:1d:91:e2:97:
                    ef:63:8d:d7:ae:0a:3c:23:16:0e:33:ec:3d:de:29:
                    dc:34:4b:c2:52:ae:c4:f9:53:5d:7b:8f:df:5d:df:
                    dd:17:46:9a:d5:d5:7f:35:02:06:22:28:2b:39:bb:
                    14:05:26:18:f3:18:6a:6e:2c:a4:07:18:e9:27:16:
                    db:50:c9:7d:87:e5:2c:41:51:c6:15:85:fa:69:13:
                    e5:f2:76:8b:d6:f3:7b:09:41:cc:d1:b0:7f:da:ca:
                    0a:2d:9f:03:96:af:da:02:8f:be:39:14:2f:10:5a:
                    a1:08:43:44:a4:98:9a:1d:d2:09:d5:18:f3:e5:e6:
                    57:5d:43:8a:15:18:72:0a:58:ba:4e:6d:8a:d8:d0:
                    29:7a:a7:e4:00:7e:dc:f4:a1:35:02:3b:e8:93:00:
                    6d:ef:0d:51:dd:bd:fe:3a:21:dc:3c:e2:e6:b5:c7:
                    b8:f7:85:24:ae:c4:3d:64:77:2e:ca:a5:e9:04:76:
                    8d:17:3d:57:2e:02:20:cc:c4:df:55:28:56:62:a2:
                    6c:e3:ca:35:00:bc:96:7e:66:1b:57:42:bb:b5:f8:
                    98:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:62:3C:0F:D0:6C:BD:23:91:DE:C5:94:B1:36:7B:8F:23:E8:B5:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/983432ca-4721-3c2f-8c41-235acdeb0680.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:95:a2:67:21:b2:e4:bc:09:31:47:dc:3e:6b:70:f0:3f:10:
         36:15:c0:bb:0f:90:d5:ad:ba:39:1b:3d:af:2a:a2:ee:e6:6c:
         d0:78:ef:89:9b:86:f3:d1:f7:91:93:20:9a:1e:05:a6:27:7e:
         fc:a2:93:8c:8f:13:88:94:c9:55:c0:e5:6f:8e:16:e7:ec:82:
         a1:bb:db:8b:8e:76:9d:20:50:7a:97:cf:ad:45:85:95:68:1e:
         2a:9d:53:38:55:e9:c3:07:63:0d:7e:7e:7b:ee:42:79:07:a0:
         15:ba:9d:8e:b9:df:cb:67:fc:d8:62:b3:1f:da:7c:23:3c:3d:
         3e:64:12:48:7f:b6:1a:b3:fa:b8:af:1c:4e:86:e0:ab:d4:59:
         32:6d:bc:7c:bc:5a:84:16:5a:d6:5f:5a:14:fc:fe:10:28:d4:
         26:84:58:0b:cd:04:74:98:d8:20:12:47:af:44:58:c6:a4:96:
         47:31:aa:75:be:e5:0c:73:59:f0:83:81:bc:89:35:64:8b:39:
         23:4a:4d:2e:5e:1b:3e:72:70:85:b1:fa:d1:2a:df:89:7c:2a:
         0b:1d:13:3a:d7:d1:a2:f3:ef:f4:25:e9:27:8c:90:1a:29:a0:
         35:b3:de:f3:8b:37:0d:2e:5d:ce:84:c7:34:d5:34:47:7e:a5:
         ac:74:73:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----