Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e98dccad-2f1d-308e-ae52-f051fab325d8.roa
File:                     e98dccad-2f1d-308e-ae52-f051fab325d8.roa (raw, json)
Hash identifier:          s7PLTNpQlkDOwqdya0Ez/jO2IF+tWK+y7RqBEMeDkAs=
Subject key identifier:   92:5B:F3:4D:2D:A1:E1:6F:A9:B3:4A:9D:19:6D:47:7F:BC:20:A6:09
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328576D51CC73C042CFC16581A7E782
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e98dccad-2f1d-308e-ae52-f051fab325d8.roa
Signing time:             Tue 28 Aug 2018 17:49:49 +0000
ROA not before:           Tue 28 Aug 2018 04:00:00 +0000
ROA not after:            Fri 16 Jun 2028 04:00:00 +0000
asID:                     16509
IP address blocks:        50.18.208.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:65:81:a7:e7:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 28 04:00:00 2018 GMT
            Not After : Jun 16 04:00:00 2028 GMT
        Subject: CN=e5038940-e80e-443d-a45b-7a4870272868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:aa:ed:bd:f3:05:a6:f5:fb:22:ef:64:9c:f1:
                    fc:32:de:8d:40:e0:c6:4f:51:aa:45:71:7c:be:d9:
                    3a:ae:9c:3e:7c:b4:ba:45:1f:79:9c:a4:17:ec:f3:
                    74:64:94:49:44:82:08:cf:36:44:b4:e3:8c:8e:22:
                    46:6e:c6:01:f0:bf:fc:1c:40:fd:fd:9a:f6:b4:d8:
                    68:24:31:df:f0:ca:a3:28:81:90:a9:08:df:e6:62:
                    07:c2:63:eb:bb:38:e7:f2:a1:21:96:31:37:91:9a:
                    f9:d9:68:11:2a:bb:2b:c6:4c:ab:41:2d:97:15:f0:
                    7b:25:b1:8b:9a:6b:8e:86:3f:91:5c:16:34:2a:7e:
                    b8:f5:47:44:fb:2b:01:a7:4f:29:71:8e:72:c7:8a:
                    7a:4f:dd:4a:14:a8:b7:5d:55:df:02:f5:7f:ac:3b:
                    a9:de:98:fe:b4:5b:87:2e:c2:da:0b:52:52:62:25:
                    89:7e:e4:62:17:9e:8d:90:7c:9d:41:d2:6d:a3:00:
                    01:6a:74:35:8f:68:cc:1c:0d:b1:2d:e0:15:e7:4b:
                    0c:ff:f6:f5:3e:76:18:db:9b:74:4f:db:74:1c:de:
                    8b:ef:86:6f:07:6b:cc:c9:a7:3a:5e:67:91:c0:ac:
                    94:6c:58:0e:e1:ae:92:1d:8f:ae:47:53:aa:b7:25:
                    96:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5B:F3:4D:2D:A1:E1:6F:A9:B3:4A:9D:19:6D:47:7F:BC:20:A6:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e98dccad-2f1d-308e-ae52-f051fab325d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.18.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:77:ae:2d:d0:0b:d7:6c:a4:64:3a:02:d9:32:4c:b8:13:f3:
         56:77:71:c8:19:25:db:7b:35:a4:c5:d6:54:03:81:56:52:0c:
         14:a9:46:f5:d2:89:87:fe:50:00:31:49:2f:e6:bc:8a:38:bc:
         a2:1d:25:4c:61:d8:c4:bf:66:79:a3:1c:9f:4c:bc:3d:54:04:
         32:52:fe:fa:ce:9d:d2:e1:66:c7:4d:93:ec:22:c8:2a:1a:5b:
         5f:fc:5d:bd:b2:4b:b9:e7:7e:80:f4:70:2c:44:6e:a9:74:b0:
         3c:f4:e4:6e:4c:18:91:59:64:cd:5f:96:ae:b8:8e:97:98:ab:
         2a:ff:99:ae:2a:6a:f9:31:86:6b:1d:1c:99:d9:b7:d2:b4:16:
         5f:8e:c9:17:3c:92:f3:be:18:7b:27:b7:50:90:fb:bb:60:12:
         db:5f:73:47:91:87:8a:f2:0c:32:89:4e:4e:11:87:7c:de:19:
         5b:25:3e:20:f7:7b:a7:a0:4e:da:ac:d6:05:05:da:00:4d:36:
         29:c4:02:05:dc:29:48:20:97:dc:52:70:00:e8:f0:5b:37:03:
         b9:91:4f:6e:c2:0e:60:3b:49:87:67:f2:59:38:88:17:08:40:
         32:12:eb:7d:30:46:96:8b:d3:a3:69:b1:ac:16:ff:3d:c2:19:
         cb:61:f5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----