Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ada647f1-b831-3713-b0a5-ca798f6e9481.roa
File:                     ada647f1-b831-3713-b0a5-ca798f6e9481.roa (raw, json)
Hash identifier:          tM7dFEEQnRBEvTpNr67GzHs1jIBTVf346Ura48yX4kg=
Subject key identifier:   68:F4:88:94:03:D6:D9:AD:C9:52:4E:31:0A:40:FD:B7:AB:BA:DC:65
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328576D51CC73C042CFC166A33E3032
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ada647f1-b831-3713-b0a5-ca798f6e9481.roa
Signing time:             Tue 23 Oct 2018 23:24:13 +0000
ROA not before:           Tue 23 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        71.152.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:a3:3e:30:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 23 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=421ee9d2-96bd-43ec-9113-6dde0b318f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7e:e7:ba:be:a9:7a:59:cf:29:6c:c3:89:ae:
                    79:cc:f7:4d:d8:ea:a9:d4:0e:29:94:a0:58:8c:bc:
                    23:cb:3b:c2:f5:f6:8d:72:98:9c:10:0e:4d:95:b8:
                    a2:da:a5:3e:cf:bd:d5:6b:40:ec:dc:a1:a2:59:3a:
                    d4:65:88:b2:42:4e:6a:66:a3:3f:7b:13:d6:0a:76:
                    b8:bc:7c:df:b1:87:04:b9:ea:18:fc:3a:89:03:3d:
                    9c:03:9f:4c:af:9d:1c:43:58:55:a8:53:07:2f:3a:
                    b3:30:84:3c:4f:1a:09:8c:07:08:45:4a:c1:79:91:
                    4c:13:4e:c9:c0:a3:79:1c:d4:75:9f:90:90:9b:a8:
                    16:63:0d:1d:55:c1:b4:95:59:4a:81:a1:c5:cf:3d:
                    ae:3c:fa:d1:41:16:fc:69:61:a9:35:da:00:be:8b:
                    0b:8d:fd:f4:34:61:9e:16:f6:30:1d:3f:da:f8:08:
                    6d:ed:bf:93:28:d0:94:61:a6:02:72:ed:bf:97:ba:
                    30:94:89:ae:48:d1:36:ad:43:d5:91:3f:64:d4:1c:
                    db:ee:35:f9:f1:2c:5d:a3:8a:04:dc:08:ec:11:ba:
                    35:f5:2c:80:b0:bb:1e:c0:74:5f:09:a5:19:85:6d:
                    3e:7e:1e:ac:4a:74:32:d5:00:ae:f3:1c:3b:ef:af:
                    fc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F4:88:94:03:D6:D9:AD:C9:52:4E:31:0A:40:FD:B7:AB:BA:DC:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ada647f1-b831-3713-b0a5-ca798f6e9481.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.152.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:d1:7a:c8:f1:22:85:f9:7d:5d:43:af:43:30:28:97:73:98:
         a8:a7:5f:8a:5a:cb:30:9c:4d:38:53:e7:1c:4a:50:ea:7d:ca:
         9a:45:b7:ce:72:84:b1:e4:14:c7:c6:6f:c4:af:35:39:e2:a0:
         16:1a:38:b1:de:4c:5a:de:96:93:2b:d7:96:41:a7:d8:59:09:
         02:0a:b1:49:db:b1:1b:9c:7e:a7:c2:b0:65:06:45:ae:a2:4b:
         b8:27:4c:31:1a:af:ad:cb:6e:77:1a:3d:1c:a2:c8:fe:11:f2:
         ee:ae:d4:86:f0:4a:e6:c7:64:ca:e7:9f:cc:55:34:4b:66:71:
         1f:b9:c8:83:66:3e:86:ea:7c:be:44:00:94:aa:09:fc:5f:44:
         44:71:d2:3c:79:d1:0a:b4:5d:45:39:8f:5a:2a:9d:f4:a2:30:
         ec:71:90:43:2b:95:c6:dc:df:cf:ae:b3:1d:d2:af:fc:eb:f0:
         b9:86:82:48:f5:cb:02:6e:ea:ed:e0:97:4c:31:c9:39:49:51:
         1e:85:f2:24:d2:e6:a7:af:7c:97:e4:54:63:6a:b9:10:b7:df:
         bb:21:95:8b:58:15:7f:ae:e8:8a:24:de:49:c9:2b:cf:7d:32:
         8b:17:01:34:ab:7f:7a:13:00:7f:8c:8c:65:60:a6:96:6a:fa:
         06:cc:c5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----