Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a24323a0-1bcc-3b54-82d7-e8edf4307a1e.roa
File:                     a24323a0-1bcc-3b54-82d7-e8edf4307a1e.roa (raw, json)
Hash identifier:          ocaof3bIrYLqDIW7yBFjvl99BKI91eGtvRVIRQQx9JI=
Subject key identifier:   5C:33:EF:94:79:AB:EE:1B:25:65:A8:63:86:CB:BA:B9:EA:2F:B7:33
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328576D51CC73C042CFC166A33E2528
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a24323a0-1bcc-3b54-82d7-e8edf4307a1e.roa
Signing time:             Tue 23 Oct 2018 23:24:10 +0000
ROA not before:           Tue 23 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        70.132.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:a3:3e:25:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 23 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=7bb14cec-df7e-4ef5-9345-a6be8ef3e790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:26:70:73:09:72:ee:a1:6a:6d:4f:ad:a1:b5:
                    94:83:ea:27:12:04:01:5c:21:47:3a:f3:ec:2e:f7:
                    41:f4:07:4c:a8:f6:97:6e:67:a3:4c:29:59:93:20:
                    b5:11:50:ce:ec:60:9e:d0:d7:9f:5c:2e:a9:18:17:
                    4e:9d:9d:9f:f3:72:f9:4a:22:58:76:d7:4c:a9:c5:
                    19:02:66:80:02:fa:3a:39:ec:f2:3c:0c:19:4c:aa:
                    4b:9f:dd:3f:4e:a5:4a:e2:9c:b4:b1:6c:c8:10:98:
                    a2:fe:4a:c5:5d:d8:19:fb:0c:54:40:b9:96:60:77:
                    09:b4:02:44:4b:32:4d:11:23:ca:ed:19:f0:ea:e3:
                    79:b1:10:ae:b7:2f:bc:82:e9:8f:50:76:f0:0b:fd:
                    38:5a:5e:99:57:32:a1:c8:e0:96:0c:54:65:26:ea:
                    c1:06:6c:ab:89:15:21:7c:4c:2c:bb:77:01:58:58:
                    6e:14:1b:e3:09:c5:70:0c:10:05:12:2f:b6:c8:d8:
                    b3:5a:f9:b7:85:28:b1:48:b4:f5:64:0a:b9:fd:b4:
                    74:be:ef:ef:4e:73:93:64:0e:51:67:b3:aa:2b:72:
                    95:56:1f:7c:8b:94:19:50:54:de:98:35:3b:2e:b2:
                    d7:37:c5:f6:62:79:0f:ce:80:c2:22:3d:cb:76:f5:
                    4b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:33:EF:94:79:AB:EE:1B:25:65:A8:63:86:CB:BA:B9:EA:2F:B7:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a24323a0-1bcc-3b54-82d7-e8edf4307a1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.132.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:cf:bc:0f:1c:50:97:c2:01:50:3d:50:ff:79:2d:83:2f:3f:
         3f:a4:ff:c3:70:51:1c:8b:94:8f:7b:83:a7:da:34:60:65:61:
         af:6a:1e:36:39:0d:19:42:ff:f5:2e:ad:fe:4e:77:aa:68:fa:
         4b:19:59:d3:ca:a2:3d:df:0b:04:0b:83:a8:12:af:f1:4a:d6:
         b6:63:00:09:0c:d9:7d:12:fa:27:f3:5b:cd:df:b8:e4:56:96:
         b5:c6:a8:1b:8c:be:61:08:27:be:02:74:c1:4d:80:06:9d:a5:
         bc:eb:5d:e3:aa:4e:f3:f6:89:3d:2c:7a:eb:ae:ac:57:93:b0:
         a0:a9:0f:89:f6:e4:03:21:67:8b:9a:e5:f2:e8:6a:cc:d3:24:
         01:6b:f7:9e:2d:24:dd:3d:a9:9f:f8:22:51:dc:40:25:22:b8:
         08:14:11:0c:7a:ab:c7:04:85:12:bf:90:8b:27:af:c6:fc:84:
         2b:ba:9f:c4:f2:c4:bd:d5:45:c9:2a:d1:3d:4a:64:e8:ac:fc:
         9c:cc:4a:6e:b8:0b:49:8d:bd:9e:c0:c9:01:fa:17:32:a8:93:
         4c:f8:bb:12:77:40:62:db:bb:c0:bf:c9:d7:a8:8f:43:52:21:
         c9:1e:dd:31:52:a1:08:6b:06:f0:d5:66:c0:15:ad:81:20:12:
         17:53:96:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----