Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3838b613-4720-37bb-94f2-c3601bd022b4.roa
File:                     3838b613-4720-37bb-94f2-c3601bd022b4.roa (raw, json)
Hash identifier:          MfHq4lkHoMRcw6afBB8NSANSkGumFBcAMUYUKKqDXgc=
Subject key identifier:   F0:F3:19:74:DD:11:86:21:A3:73:2F:5F:2F:4D:B5:74:0F:B2:F7:A5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328576D51CC73C042CFC166A33EC95E
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3838b613-4720-37bb-94f2-c3601bd022b4.roa
Signing time:             Tue 23 Oct 2018 23:24:52 +0000
ROA not before:           Tue 23 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        71.152.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:a3:3e:c9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 23 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=c068d47f-889c-40c2-a4ca-e7b732598194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:41:1e:91:55:0a:d7:e3:80:63:8a:cc:d8:cd:
                    08:ed:76:2d:6e:de:ad:c6:e3:c1:20:e8:04:12:cd:
                    31:30:15:95:e5:e4:58:b7:49:ef:8e:b5:be:39:ba:
                    b6:b0:55:d7:a3:46:df:cd:65:f3:45:85:76:1e:c1:
                    69:ea:4b:7e:d3:7d:90:0b:8f:50:1c:cb:55:70:2f:
                    9f:75:f5:b7:1c:db:1b:f7:26:12:8a:75:97:7f:43:
                    66:a3:5b:dc:fe:f6:ba:1e:1a:bc:d0:61:df:79:29:
                    2d:44:86:5b:e0:35:a0:26:49:65:5e:68:53:cc:50:
                    af:03:5d:93:66:82:32:62:37:a5:e5:c7:d0:d0:f5:
                    dd:d9:46:4f:af:3f:49:e4:48:70:bc:44:70:b4:17:
                    43:80:43:19:6c:08:3d:01:fd:cb:a0:fe:6e:fb:94:
                    88:83:6d:6c:61:ac:e8:3c:ac:bb:64:63:8c:79:4b:
                    1d:95:47:b3:fe:3e:22:0b:e6:14:a2:03:9e:f3:b1:
                    35:9d:4f:75:8b:bc:12:b0:62:ba:41:3e:7c:84:e6:
                    be:53:cb:f5:f4:97:30:aa:b7:76:41:96:ef:6f:69:
                    f4:73:3f:59:ee:08:69:90:2e:a2:97:6e:80:d9:03:
                    22:df:80:16:9a:a8:26:9a:b5:f6:21:2b:9b:14:17:
                    38:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F3:19:74:DD:11:86:21:A3:73:2F:5F:2F:4D:B5:74:0F:B2:F7:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3838b613-4720-37bb-94f2-c3601bd022b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.152.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:0d:b3:27:52:1e:9a:68:35:c4:f5:6d:56:ca:47:8d:a6:75:
         5f:d3:1b:46:32:56:66:d5:98:5a:e2:5b:7c:ca:2d:cc:ea:16:
         04:0b:e4:43:29:43:78:a3:23:a4:cc:16:45:78:8b:90:99:5b:
         55:23:91:27:60:3a:5d:5b:f0:29:93:16:0c:05:3c:c0:e2:cc:
         ec:a6:c4:ac:2e:a4:c5:01:5f:44:d7:d3:39:b6:1b:d6:6d:1f:
         bf:5d:32:ce:c1:b2:bb:d3:a6:c7:d2:d4:21:16:b0:9b:c3:fe:
         ea:9c:af:fe:a2:55:ce:f8:f7:3a:53:c0:9f:03:ed:56:79:3f:
         8a:16:6f:63:38:53:5f:63:38:0a:74:b5:a2:de:4e:02:3f:12:
         96:00:75:69:c1:b6:2f:6c:7e:a8:78:81:69:0d:1a:1f:b2:42:
         0d:5e:73:cc:e6:7d:78:78:0f:1e:4a:df:b9:56:f6:2b:d8:00:
         15:2c:22:c5:ad:4e:4d:5e:2a:b1:49:0c:a7:32:a7:b7:5a:5c:
         be:27:c9:fb:c4:79:c0:ed:01:48:18:3f:5d:84:41:f1:2d:a6:
         0b:6a:b3:8d:89:8f:67:46:fe:1f:62:ed:a0:9c:5a:e3:d6:ee:
         a8:64:1e:dd:50:c6:4c:e7:98:0c:0f:6a:de:33:fa:6d:c5:dd:
         48:0c:70:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----