Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39a23c98-17ee-3e03-8d11-64dd8521e114.roa
File:                     39a23c98-17ee-3e03-8d11-64dd8521e114.roa (raw, json)
Hash identifier:          7T+oMSoXWAC82djAvxNpi/SuKlTjnyNDQSTjCk7eJtM=
Subject key identifier:   73:B5:89:28:1F:16:EB:C4:73:62:02:09:F6:78:D7:66:4A:51:74:A2
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665A9B385C
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39a23c98-17ee-3e03-8d11-64dd8521e114.roa
Signing time:             Tue 09 Oct 2018 20:53:33 +0000
ROA not before:           Tue 09 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        184.72.0.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5a:9b:38:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  9 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=46791209-d72d-4607-a7af-baba784371f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:88:62:75:68:bd:b4:db:e6:12:b8:1a:39:a0:
                    c1:7c:ac:30:82:74:95:16:22:65:85:6d:56:c4:cd:
                    1d:e9:35:a4:02:c7:51:30:40:cd:61:45:13:03:c9:
                    f0:6e:10:d8:bf:8b:09:b0:ff:72:99:c1:50:48:24:
                    9e:97:cf:1a:ad:50:c1:d8:61:4c:d9:67:12:55:88:
                    eb:df:fa:e1:65:db:31:c1:40:86:10:0e:5c:b8:6a:
                    3e:16:59:b3:72:cd:26:2c:a6:50:cd:8b:49:51:e1:
                    22:52:44:63:2f:bf:3f:b2:60:55:84:05:b4:e3:07:
                    79:ba:4d:90:c4:19:09:66:cb:3d:70:28:1c:eb:0c:
                    36:28:60:13:0d:15:e6:fc:5f:7e:98:68:ad:40:a3:
                    26:b9:7d:20:8d:00:7b:42:03:8c:05:1e:5e:f1:a5:
                    a4:4b:49:54:4d:33:fd:22:90:e5:90:50:3e:06:c0:
                    26:68:a1:f0:6d:b4:03:4c:2d:0e:0d:92:e5:67:3c:
                    4e:44:37:43:a3:fb:55:a1:06:8d:41:8c:4d:42:c6:
                    9a:de:1b:1e:74:4e:a6:15:3b:2b:09:a3:e4:fe:92:
                    21:38:b5:92:ec:42:1d:e5:1e:22:f3:ba:57:ce:22:
                    71:1e:9c:96:80:de:b1:3c:7e:87:6b:fc:71:79:5b:
                    d1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B5:89:28:1F:16:EB:C4:73:62:02:09:F6:78:D7:66:4A:51:74:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39a23c98-17ee-3e03-8d11-64dd8521e114.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:36:de:e3:08:a9:27:9f:7f:78:d3:04:a6:b0:aa:83:9e:54:
         c8:8d:e8:89:e0:1b:74:5a:ff:75:52:49:9b:cc:37:6e:63:48:
         ad:3b:be:5e:95:6c:79:02:b9:07:07:f3:ed:41:b1:f2:6f:1f:
         df:18:fb:23:e8:da:52:11:08:a9:fc:8e:26:ae:52:27:df:90:
         d1:39:7a:62:e3:8e:2b:e9:14:5e:39:32:94:47:b0:14:64:cc:
         63:14:12:d2:75:14:86:21:dc:3b:8f:fa:ea:87:00:c9:fd:9d:
         41:e8:aa:5d:87:14:76:a3:1f:6b:c8:62:67:5c:c1:fa:21:b4:
         b8:b9:89:ed:0d:7c:42:ec:48:b5:30:e6:d8:90:10:0a:6d:bd:
         b9:3d:7d:cf:6d:49:59:cb:01:bd:fa:69:62:68:cf:ff:66:71:
         02:e1:d5:d7:b3:6b:ed:42:82:0b:67:eb:86:eb:a8:dd:14:75:
         73:3d:b6:b7:eb:d6:4a:6d:1e:a2:e8:64:b7:41:73:e4:cb:92:
         74:99:d7:f4:5d:06:bd:f5:65:5c:48:fb:9a:86:de:4d:18:12:
         fb:7b:a1:5c:d2:c3:43:b8:f0:f8:a1:c0:f8:14:9b:2c:5b:97:
         61:51:ce:de:b9:e6:ae:a3:cd:0f:b2:23:a9:57:69:b1:72:a5:
         b7:55:d4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----