Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/616ac39d-debe-37cd-b883-3230d8e3231a.roa
File:                     616ac39d-debe-37cd-b883-3230d8e3231a.roa (raw, json)
Hash identifier:          q/GcGkRic67/bl2rZB2uc8ehILhjl8I8oNH5IBRfWcE=
Subject key identifier:   BF:05:15:B5:9A:3A:6F:78:E4:74:3C:47:D1:1F:87:A9:C0:4C:FF:F6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328576D51CC73C042CFC166A33F1E4A
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/616ac39d-debe-37cd-b883-3230d8e3231a.roa
Signing time:             Tue 23 Oct 2018 23:25:14 +0000
ROA not before:           Tue 23 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        70.132.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:a3:3f:1e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 23 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=2e0f5010-dbe2-45ef-a404-9f8d57761642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:aa:ef:3a:17:1e:57:97:1d:34:a2:ea:65:04:
                    57:83:a7:9a:1d:f5:1b:55:70:ee:3e:1e:6b:af:e1:
                    03:9e:6d:84:16:c2:0e:d4:8e:ef:c9:09:71:5a:5c:
                    ca:27:56:36:30:4b:39:80:6b:51:4c:ec:4c:c9:36:
                    c0:11:4b:be:c8:31:a7:4d:49:a9:91:53:ca:44:65:
                    ae:68:a5:d4:b3:59:3b:22:ad:a9:a1:5a:73:9b:23:
                    75:63:c1:ac:5f:6a:35:8a:41:b8:65:af:dc:df:e5:
                    0a:5c:31:ed:ec:93:53:02:a1:ba:ad:31:3f:6b:ea:
                    34:f4:7b:72:f3:59:62:d7:f0:49:7c:85:40:c8:05:
                    35:bb:ea:e8:3f:d0:db:ea:3b:64:75:bc:4b:91:bb:
                    74:d5:1e:9f:65:55:a0:a3:cd:43:b2:28:e2:17:b9:
                    29:b5:ee:6c:ff:6e:0b:42:23:7d:d0:2f:e7:c8:91:
                    a2:0b:90:97:95:cd:bd:72:6b:13:ea:4b:34:4a:c9:
                    ac:0c:38:f2:e3:e6:9d:e5:1e:cf:73:f8:24:15:fd:
                    86:ba:a7:9e:90:fe:bc:98:76:8c:13:75:9b:16:18:
                    92:30:41:82:31:ec:e4:73:76:8d:b8:dc:7d:9c:3a:
                    73:4c:1f:76:9e:1f:6f:5e:07:90:18:60:e4:b8:25:
                    e5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:05:15:B5:9A:3A:6F:78:E4:74:3C:47:D1:1F:87:A9:C0:4C:FF:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/616ac39d-debe-37cd-b883-3230d8e3231a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.132.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:34:23:44:46:1f:f4:64:11:24:3d:66:86:2e:21:e9:e0:be:
         86:f9:28:68:13:da:7d:54:ed:99:28:c5:81:ec:fa:62:50:d2:
         09:d4:f7:35:c3:12:f4:54:63:7e:c5:9d:81:b9:c3:53:65:08:
         8e:63:52:15:1e:96:91:a0:87:03:01:de:e0:fd:92:86:e0:e2:
         f8:4c:4b:7d:2f:e2:72:bd:b5:04:ac:c0:f9:87:2b:7d:b7:57:
         44:37:53:5c:10:d7:70:ea:ca:71:ec:43:6e:3d:9b:d8:84:26:
         e1:55:39:36:08:28:12:f9:37:e3:70:ec:c6:40:60:4c:d8:4b:
         3f:f2:2c:ad:af:a0:2e:db:76:ab:e1:33:85:ec:ff:d4:b6:fd:
         6a:c8:cd:04:0f:b7:bd:15:4f:c0:b7:7c:58:f3:95:58:e9:4f:
         ae:e0:5e:0d:7a:95:72:65:23:dc:4e:10:ea:ae:07:d1:b7:55:
         7b:c9:b0:cb:4d:1a:be:92:1e:5d:4b:8f:46:96:02:20:e1:98:
         7e:88:c3:a7:5d:c4:27:00:b8:3e:21:6a:a2:0c:80:c1:60:c7:
         24:72:f4:4c:62:d5:52:ae:e9:01:06:6a:34:d0:91:87:76:ab:
         11:0f:8c:70:f3:71:aa:6e:2a:a1:01:8a:17:3a:43:64:af:89:
         29:1b:04:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----