Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/663118b4-4eb5-3713-819d-41f16023c3cd.roa
File:                     663118b4-4eb5-3713-819d-41f16023c3cd.roa (raw, json)
Hash identifier:          KihzPNO6N3mU2GV6P1cg88Dp5AblKyZiT0GL1xFC4WU=
Subject key identifier:   BF:0F:4D:4F:6C:AE:52:1D:8B:E0:51:B0:36:C4:9B:EC:10:A3:4A:62
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328576D51CC73C042CFC16581A839FE
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/663118b4-4eb5-3713-819d-41f16023c3cd.roa
Signing time:             Tue 28 Aug 2018 17:50:10 +0000
ROA not before:           Tue 28 Aug 2018 04:00:00 +0000
ROA not after:            Fri 16 Jun 2028 04:00:00 +0000
asID:                     16509
IP address blocks:        104.153.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:65:81:a8:39:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 28 04:00:00 2018 GMT
            Not After : Jun 16 04:00:00 2028 GMT
        Subject: CN=a7f3cbac-c470-45d0-bcc7-5dab61f7863a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7d:bf:14:fe:2a:f4:c3:93:6c:77:41:77:07:
                    49:21:16:7a:95:7b:e9:bd:ec:63:f7:43:e7:b4:f9:
                    42:7c:86:c2:23:2a:ad:e1:e7:64:26:47:af:9e:50:
                    c0:c9:7b:0d:90:f6:5d:51:1a:22:41:7e:16:17:d9:
                    f7:68:d4:d8:75:09:91:71:87:80:83:41:0c:f1:01:
                    dc:df:cd:97:b4:8d:1e:0d:6c:e0:81:2c:f1:7d:03:
                    98:8d:c9:15:b6:0f:d9:72:be:16:7b:12:a9:64:61:
                    71:09:c6:cd:40:28:19:5e:dd:39:65:05:fb:57:9b:
                    ac:89:61:8c:1e:54:16:47:c1:19:86:1b:2b:eb:18:
                    d8:ed:65:b1:f9:3f:f0:09:b9:61:87:ad:db:af:ab:
                    a7:6f:4f:86:f9:de:b2:35:90:41:ba:fe:29:dc:e2:
                    40:f1:df:bc:08:45:f6:00:48:99:53:8a:40:de:a8:
                    39:11:fb:39:78:ec:37:ea:61:60:60:28:8e:a3:4f:
                    bf:eb:0f:3c:fd:75:43:6f:3a:b8:f2:cb:bb:8d:1b:
                    a5:1c:b9:90:09:87:a8:6d:56:52:03:2a:04:8d:70:
                    dc:d8:4b:01:e5:99:7e:3e:ea:2b:36:8d:bc:ac:9d:
                    1c:2f:e7:ac:0d:5b:82:ed:c1:88:e9:5b:1c:e2:e6:
                    01:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0F:4D:4F:6C:AE:52:1D:8B:E0:51:B0:36:C4:9B:EC:10:A3:4A:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/663118b4-4eb5-3713-819d-41f16023c3cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:d5:41:93:5a:ca:4d:8b:8d:cb:d9:c1:f6:da:60:9b:cb:8a:
         39:b2:52:eb:d0:16:ad:51:d4:95:e1:2a:c4:39:ab:df:90:e4:
         95:50:2b:ef:9d:31:f9:1d:40:05:9f:36:3c:14:06:d6:ed:87:
         47:a2:03:7d:30:5d:cb:28:57:a8:47:d5:af:ab:5f:21:c9:28:
         d2:e8:09:1d:8c:93:f0:28:ba:17:ec:29:ba:9c:7a:85:ec:a7:
         75:5e:ee:3c:7c:d6:37:16:ce:27:48:b2:0b:15:e2:89:b5:cf:
         b3:19:62:b5:9c:b2:59:53:e9:9c:07:ed:34:a9:b6:e8:0d:5e:
         3a:05:3b:6e:bc:d6:9c:31:74:67:b0:52:93:21:16:9d:a0:0c:
         bb:10:51:08:25:3e:74:55:3d:00:32:65:04:2b:87:5d:84:a0:
         d7:26:08:60:ac:ce:a0:e4:18:e5:fa:dd:0b:84:74:30:b5:91:
         0a:9e:57:4a:27:2a:1e:e0:87:5c:e2:fa:a4:a8:e6:88:0b:70:
         20:8d:57:ce:06:fa:93:dd:ac:8c:e7:a6:fc:a3:6b:c6:c9:19:
         14:0b:e7:f2:c7:93:74:bf:65:86:54:dd:86:c5:72:29:2d:2e:
         2e:82:5a:15:e6:3d:4c:e7:52:60:43:50:30:4b:12:b0:34:f0:
         e8:0c:5c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----