Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e047f54d-9140-3b6d-a21e-6052639925f1.roa
File:                     e047f54d-9140-3b6d-a21e-6052639925f1.roa (raw, json)
Hash identifier:          0kUg3GBXLlZyUH9RHy/6TpATocl5jsPhDfdbTvpXQlQ=
Subject key identifier:   59:A5:43:C1:64:B2:99:BA:99:C3:0B:ED:65:1A:1C:02:54:13:7C:09
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328576D51CC73C042CFC1663DE882D1
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e047f54d-9140-3b6d-a21e-6052639925f1.roa
Signing time:             Thu 04 Oct 2018 07:09:00 +0000
ROA not before:           Thu 04 Oct 2018 04:00:00 +0000
ROA not after:            Fri 16 Jun 2028 04:00:00 +0000
asID:                     16509
IP address blocks:        50.18.0.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:3d:e8:82:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  4 04:00:00 2018 GMT
            Not After : Jun 16 04:00:00 2028 GMT
        Subject: CN=e065af4e-9862-4b3f-b025-22333cba3335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ae:46:f8:a5:3c:7d:4d:3a:db:80:9b:20:6f:
                    21:47:b4:a8:a4:7b:7d:95:5b:09:43:bd:ef:1e:3c:
                    03:11:af:57:07:93:12:d7:f4:87:ba:bf:67:7a:c9:
                    59:29:f5:12:4f:f5:26:2b:9a:66:e2:62:3e:3d:f4:
                    2c:52:2b:65:37:48:64:24:b5:2e:39:0e:6a:5b:78:
                    ef:d6:b2:ea:98:5f:ef:09:1d:ab:7b:f7:3c:40:98:
                    95:d8:ed:a9:44:0b:d4:d1:70:59:16:a5:22:61:7f:
                    51:8d:fb:f1:d7:3d:7b:c0:3a:da:37:2f:5f:c1:a0:
                    1f:c3:7e:39:81:53:cd:01:ab:c3:59:fa:01:29:de:
                    46:b3:8a:ea:48:c9:43:60:54:89:f3:0f:3a:64:72:
                    7e:03:b5:84:c2:04:a0:f0:95:9f:b8:61:17:08:23:
                    f7:99:dd:3d:5b:77:79:e6:61:4a:47:f1:63:fa:05:
                    13:b9:db:e2:d4:45:f2:0e:b8:60:d0:fe:92:42:23:
                    c9:f6:81:52:01:0f:2a:2b:6b:b0:e6:21:93:9e:0a:
                    8c:50:26:82:f7:29:72:16:2e:11:0d:12:73:9c:01:
                    58:56:83:8c:d8:9d:7f:f2:c7:37:74:0c:2a:ae:05:
                    7f:e8:de:f9:a1:9a:ac:23:ca:d4:8c:02:25:85:17:
                    87:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A5:43:C1:64:B2:99:BA:99:C3:0B:ED:65:1A:1C:02:54:13:7C:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e047f54d-9140-3b6d-a21e-6052639925f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.18.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:41:21:ef:9e:b0:0e:d9:ea:9a:bb:ba:a0:31:f0:19:fb:a9:
         3b:08:d0:ee:3d:05:3e:33:82:53:49:36:85:41:d1:07:91:8e:
         2b:64:d5:92:82:16:f3:8a:31:c4:d0:4e:20:8e:10:26:2a:2b:
         3b:03:c8:23:6f:0b:30:90:60:18:9c:ba:93:be:b0:37:bb:a3:
         50:6f:af:e9:54:f2:7f:0c:fe:ad:b4:77:87:e0:f5:2a:a5:2b:
         48:38:11:39:fc:97:8a:dc:81:1f:b3:bf:89:a2:d9:bb:31:9a:
         dc:f4:5d:c1:27:db:93:4f:ce:65:14:20:64:85:70:01:f7:3d:
         6b:16:95:65:be:2c:b1:4e:9f:5e:62:a1:9f:3b:9f:77:95:0c:
         7c:77:67:ac:8c:99:a0:95:26:d9:11:ea:98:8d:d3:cf:43:39:
         41:24:80:81:af:c8:9c:02:17:f3:04:38:b8:7f:89:0c:2a:4c:
         62:7c:90:99:5d:24:68:c9:bb:16:09:b7:97:86:5b:aa:f1:00:
         7a:4d:44:8c:9f:c3:06:8b:03:d7:19:64:99:51:2b:d4:79:67:
         83:b7:28:a6:f7:a2:d6:d4:b2:cc:b8:79:97:82:19:f1:28:5e:
         ef:61:5d:e2:c0:26:61:95:d3:c3:f5:92:29:59:b6:73:45:3b:
         01:92:53:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----