Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ebc7a59c-8aa0-3584-8a44-463fe3235a12.roa
File:                     ebc7a59c-8aa0-3584-8a44-463fe3235a12.roa (raw, json)
Hash identifier:          4uts/SAVMbEbu2GmL4GR6YJNrQUBbj2UiBLgZrAKAbA=
Subject key identifier:   05:0F:7B:67:0C:33:A3:AB:E0:2F:62:4C:7A:FE:B3:36:42:9B:D5:D1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328576D51CC73C042CFC166A33EB761
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ebc7a59c-8aa0-3584-8a44-463fe3235a12.roa
Signing time:             Tue 23 Oct 2018 23:24:48 +0000
ROA not before:           Tue 23 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        70.132.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:a3:3e:b7:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 23 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=5fc50d54-6e09-494e-b876-bec921854dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:46:a6:ac:e2:82:1a:09:eb:ba:47:e3:09:
                    91:c6:85:1c:2f:2e:70:23:a5:cb:7f:03:1b:82:4d:
                    aa:7c:b8:4b:46:bc:1d:74:d2:b3:b4:ff:ce:6b:f8:
                    44:47:d5:0d:15:97:9b:db:9e:6f:70:ad:b5:5d:da:
                    8b:cd:72:b1:84:17:97:a5:4e:83:79:1b:ab:87:e8:
                    81:64:b6:b0:c4:d0:43:49:5d:a3:1b:7e:7f:82:5d:
                    48:e9:78:f5:ab:2e:28:b7:88:4f:a4:33:34:54:cc:
                    43:10:22:28:c1:6d:4b:41:e8:e1:23:f1:dd:f8:c4:
                    c2:0e:2a:fd:13:59:3e:cf:2b:58:60:fc:1b:7e:d9:
                    d7:33:60:88:16:74:ec:2d:b8:4e:8a:04:ce:39:aa:
                    c6:42:6e:c6:ef:01:ab:e4:00:f5:ef:67:22:32:c0:
                    5f:cc:68:f4:bf:2e:e9:cb:eb:1f:34:2e:b4:43:97:
                    cd:44:e4:fd:06:61:40:fe:2c:f3:aa:8f:0b:fc:3f:
                    2c:07:6a:39:77:91:91:a3:4f:2c:0a:e2:4d:6b:59:
                    d4:c4:57:67:ad:ae:7d:b3:43:08:32:4a:02:bf:07:
                    15:30:99:bb:0b:19:d2:a0:a4:8c:72:03:62:39:56:
                    59:ba:ae:1a:24:b7:22:fb:c7:ed:6f:e0:70:e1:8f:
                    a6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0F:7B:67:0C:33:A3:AB:E0:2F:62:4C:7A:FE:B3:36:42:9B:D5:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ebc7a59c-8aa0-3584-8a44-463fe3235a12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.132.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:bc:4e:ee:a1:41:a0:ee:cd:a6:32:c6:56:03:00:4a:fc:0d:
         d7:a8:a5:a7:ce:d3:95:11:ef:5f:1f:85:6b:f4:0d:1f:a9:07:
         cc:0d:1f:21:66:6b:97:e5:bb:41:f2:5b:1c:d7:37:78:89:7d:
         d3:bf:40:9c:99:f0:b4:ad:99:27:a9:20:b8:49:fd:8f:77:bd:
         a2:51:57:99:3b:50:81:2d:34:1d:05:80:b8:c9:10:11:91:dc:
         6a:58:b9:a6:9b:e1:8d:fb:65:de:f0:a8:9f:9c:1f:22:c9:78:
         bd:c0:76:8d:3e:9a:56:2f:c4:93:b8:ea:53:95:da:41:df:ef:
         2d:a2:8c:88:9b:db:77:e0:ac:50:4b:2e:68:85:55:ec:8a:28:
         34:1b:7d:60:8c:5d:c6:e0:0a:76:4f:ed:8b:ac:fd:9b:e3:b0:
         d2:29:ce:05:65:50:2c:46:ab:c3:57:2c:c7:0e:42:c2:be:11:
         9d:86:50:82:3d:ae:eb:f6:c9:d4:b1:c9:00:05:aa:b8:0c:72:
         5f:d9:b1:fd:32:8a:9c:88:3d:f8:a4:d9:50:8a:e8:38:56:13:
         da:ac:9e:83:95:b2:8c:c6:8f:91:d7:ab:bc:46:41:ce:bc:8f:
         de:af:e2:c6:a1:4f:3d:6a:f6:66:b6:e6:a5:b4:21:56:17:ec:
         c5:0a:2e:56
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZqM+t2EwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJhMDRm
MjAeFw0xODEwMjMwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDVm
YzUwZDU0LTZlMDktNDk0ZS1iODc2LWJlYzkyMTg1NGRmYzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALRSRqas4oIaCeu6R+MJkcaFHC8ucCOly38DG4JN
qny4S0a8HXTSs7T/zmv4REfVDRWXm9ueb3CttV3ai81ysYQXl6VOg3kbq4fogWS2
sMTQQ0ldoxt+f4JdSOl49asuKLeIT6QzNFTMQxAiKMFtS0Ho4SPx3fjEwg4q/RNZ
Ps8rWGD8G37Z1zNgiBZ07C24TooEzjmqxkJuxu8Bq+QA9e9nIjLAX8xo9L8u6cvr
HzQutEOXzUTk/QZhQP4s86qPC/w/LAdqOXeRkaNPLAriTWtZ1MRXZ62ufbNDCDJK
Ar8HFTCZuwsZ0qCkjHIDYjlWWbquGiS3IvvH7W/gcOGPpvsCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQFD3tnDDOjq+AvYkx6/rM2QpvV0TCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5
ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEwNGYyL2ViYzdhNTljLThhYTAtMzU4
NC04YTQ0LTQ2M2ZlMzIzNWExMi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2Qw
LTFmZjg2ZmJhMDRmMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0
ZjIuY3JsMB8GA1UdIwQYMBaAFLa9HpQWWLj2T715GnMs7pbEa17qMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZm
YmEwNGYyLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAEaEBTBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAgrxO7qFBoO7NpjLGVgMASvwN16ilp87TlRHvXx+Fa/QNH6kHzA0fIWZrl+W7
QfJbHNc3eIl9079AnJnwtK2ZJ6kguEn9j3e9olFXmTtQgS00HQWAuMkQEZHcali5
ppvhjftl3vCon5wfIsl4vcB2jT6aVi/Ek7jqU5XaQd/vLaKMiJvbd+CsUEsuaIVV
7IooNBt9YIxdxuAKdk/ti6z9m+Ow0inOBWVQLEarw1csxw5Cwr4RnYZQgj2u6/bJ
1LHJAAWquAxyX9mx/TKKnIg9+KTZUIroOFYT2qyeg5WyjMaPkdervEZBzryP3q/i
xqFPPWr2ZrbmpbQhVhfsxQouVg==
-----END CERTIFICATE-----