Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9b651f21-4266-3d58-b225-6ae30f5f6a4b.roa
File:                     9b651f21-4266-3d58-b225-6ae30f5f6a4b.roa (raw, json)
Hash identifier:          tXadpioVWYRbIXh8S6BDhGXE3h1wxw4PUuACBg0YYGc=
Subject key identifier:   34:21:A0:26:02:0D:B0:20:A3:73:2E:53:54:A2:82:0A:BC:01:9D:57
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328576D51CC73C042CFC16642945D68
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9b651f21-4266-3d58-b225-6ae30f5f6a4b.roa
Signing time:             Fri 05 Oct 2018 04:55:11 +0000
ROA not before:           Fri 05 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        50.18.128.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:94:5d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  5 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=82ba4526-bd2b-469e-a817-70003cbf9d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:29:c6:43:23:ef:cf:7b:8a:48:48:b9:5c:c4:
                    44:11:04:dc:a6:a6:10:30:0c:41:7f:09:96:71:15:
                    1d:b4:c9:8c:77:85:2b:a7:cd:77:a9:58:46:4e:15:
                    14:28:34:be:d4:dc:ec:93:74:63:e9:0b:e8:ac:d0:
                    7e:4c:5c:dd:a2:7d:7e:97:b4:af:f8:f4:9b:66:35:
                    ae:53:b1:2e:99:65:11:6c:82:07:21:02:c5:de:d6:
                    ec:1d:06:0f:42:7d:c5:6d:bd:39:5a:e2:52:8e:8b:
                    cd:19:da:e4:e7:4a:d4:48:b2:1c:6e:a9:58:ff:ec:
                    ae:84:38:1a:fb:ec:7c:55:29:e7:69:f2:27:82:17:
                    af:62:6a:c6:09:9b:56:fc:10:48:5c:18:ea:df:aa:
                    b1:93:33:a5:be:1f:e3:32:19:7c:47:3b:ff:67:9b:
                    aa:c1:4d:f9:88:f2:3f:99:d6:01:d0:59:d0:b8:d8:
                    15:a7:50:2f:5d:1f:51:13:01:71:cf:e7:d0:d9:ed:
                    a1:bb:3b:bf:b8:5a:a4:12:74:ac:7e:72:d5:b5:4c:
                    e8:40:b4:27:8a:e0:e5:4e:a8:c2:00:63:52:94:a1:
                    6d:9f:5c:49:f0:6f:e9:3c:de:24:f4:fa:29:c0:50:
                    30:88:b8:4a:c3:82:b5:f4:a1:73:a8:32:b1:6d:b1:
                    cf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:21:A0:26:02:0D:B0:20:A3:73:2E:53:54:A2:82:0A:BC:01:9D:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9b651f21-4266-3d58-b225-6ae30f5f6a4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.18.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a9:8c:7f:cc:9c:10:1c:c9:ad:38:74:fe:60:bc:aa:d2:ff:
         5d:17:c2:fd:79:cb:fd:e8:23:bb:27:85:b7:fe:55:ee:7b:97:
         f7:f8:84:22:f2:26:f8:63:c6:b3:17:2c:a0:e9:5f:5d:5b:dd:
         1b:88:0e:a1:67:7d:3b:9e:60:7d:c2:64:8f:d4:b8:04:6b:50:
         f2:5d:1e:45:c7:17:74:95:d4:f6:fa:5a:5c:07:84:c5:03:01:
         44:85:16:a0:58:ae:ab:1e:2c:fe:53:20:63:75:2a:96:80:b3:
         35:3d:86:e5:98:bd:25:2d:85:07:d3:17:5a:a9:6d:d2:f3:2e:
         1d:b1:6a:4b:e5:c7:8e:2a:0a:b6:8a:a8:64:99:2a:c4:e9:fc:
         39:92:a9:1d:0a:a0:4f:1b:5c:37:eb:82:c3:a0:a8:c6:e7:58:
         ac:b6:8a:64:79:b3:84:fe:b3:e9:92:72:b7:b6:be:8e:c8:f6:
         4b:11:8f:7c:22:ab:10:e8:3e:15:42:e5:ab:5e:43:05:ff:a3:
         d5:97:4f:12:9c:14:18:3f:b1:6c:fb:da:ab:59:92:3d:76:7c:
         79:0c:32:d8:64:e4:2f:64:f8:69:68:90:c5:6f:1b:40:9a:37:
         9e:56:ec:63:64:49:34:08:bc:cc:68:89:23:4c:fc:75:45:45:
         05:61:fb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----