Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d0177bf-88da-387d-85ee-7b7de908238f.roa
File:                     3d0177bf-88da-387d-85ee-7b7de908238f.roa (raw, json)
Hash identifier:          T8TXZx+VboX/dVO+rJD357SWOt+zLZhbv5i3rYjIwlQ=
Subject key identifier:   B2:B8:2D:BA:F1:A8:10:8A:7F:66:11:32:CD:B8:97:2D:1D:FB:67:F1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328576D51CC73C042CFC166A33E3660
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d0177bf-88da-387d-85ee-7b7de908238f.roa
Signing time:             Tue 23 Oct 2018 23:24:15 +0000
ROA not before:           Tue 23 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        70.132.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:a3:3e:36:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 23 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=50de62ce-527b-4fdf-98d2-9a1a0751f126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e5:d7:fb:39:8a:46:2a:7c:05:d9:29:a3:50:
                    ca:e0:d3:2e:16:3d:66:e4:cc:ee:93:1e:8b:7c:a6:
                    ea:84:32:57:f1:1a:ef:c9:c4:04:19:d0:77:89:36:
                    5a:70:5b:81:fb:71:eb:7d:7e:6b:17:c7:ae:4b:06:
                    b8:7f:c3:0e:55:eb:d4:d6:3b:b3:0e:5b:01:84:4d:
                    07:0f:70:d1:d3:c6:c6:c0:e0:a6:03:7f:a3:63:77:
                    44:1b:d6:88:7d:98:29:b9:35:31:d0:2a:b2:3b:cb:
                    d4:36:ba:1b:a7:71:b6:70:db:50:61:ae:62:d6:a3:
                    84:96:21:82:89:99:a2:74:44:b1:dc:a6:11:4f:22:
                    10:b6:17:1f:10:17:9d:fd:32:ac:bb:da:b5:e2:0b:
                    1a:1b:0c:9f:a8:36:ba:c3:07:e7:b1:69:7b:e7:f8:
                    10:f5:ad:0a:3a:2e:ef:87:40:14:92:ac:68:0b:e9:
                    67:39:dc:e2:95:ea:aa:e0:f1:5c:e1:a2:5a:73:83:
                    89:7a:05:34:1a:63:7d:59:cf:a9:be:68:29:c9:da:
                    60:15:b7:aa:90:12:22:76:6f:3c:82:de:fb:f7:64:
                    20:75:1b:70:84:fa:24:18:9e:34:6f:11:f2:87:8b:
                    12:09:a3:91:e7:c4:37:f5:6f:89:5a:c3:15:1e:01:
                    cf:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B8:2D:BA:F1:A8:10:8A:7F:66:11:32:CD:B8:97:2D:1D:FB:67:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d0177bf-88da-387d-85ee-7b7de908238f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.132.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:7b:e3:2a:fe:7e:3c:31:ad:5e:b9:af:26:a8:ce:74:bd:7c:
         51:f0:ce:b7:ac:64:bc:00:08:14:b8:02:c8:96:aa:08:c1:b1:
         e1:c9:fe:22:de:e6:61:1e:fd:c9:0b:cb:56:5d:fa:84:37:74:
         09:91:66:71:ed:a1:c7:83:e9:4b:ef:4a:8d:35:27:1b:93:6c:
         0c:f4:b5:5c:84:4c:41:1d:2f:94:1a:8b:41:6f:31:ed:2f:29:
         49:3c:4b:a1:2d:6a:bb:fd:25:fb:5a:59:53:c6:53:e9:7a:1a:
         6c:eb:57:d2:04:cc:88:33:13:a5:ec:e3:ca:b2:96:4d:f6:6b:
         9a:9f:83:4d:f9:2a:c4:0d:80:da:ac:0f:48:cc:26:9b:b6:27:
         0a:c3:84:86:10:5f:ea:b7:8d:e6:a1:4c:fe:7f:36:ca:30:61:
         68:29:90:0d:5c:e0:5b:df:2f:6f:f7:60:09:b4:e6:7a:1c:16:
         33:89:0e:92:3c:1f:a9:0f:c5:c6:ee:12:fb:c8:27:bb:15:ff:
         4d:7d:fe:52:36:62:84:6b:9e:d9:17:8a:9e:40:61:7c:db:d3:
         40:3f:dc:27:23:9c:cb:45:e1:cc:ae:74:3b:41:5b:eb:06:a3:
         3f:28:6e:82:21:6d:de:e5:7c:e7:ef:ec:d7:66:80:75:04:e7:
         4f:8c:98:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----