Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/adc041ca-70be-39aa-b454-dc06c27b502d.roa
File:                     adc041ca-70be-39aa-b454-dc06c27b502d.roa (raw, json)
Hash identifier:          NaK3vmVj5lGKZvoG7dqu1wuFBasVI9MJVrBB5wndnJA=
Subject key identifier:   12:A1:66:0B:07:74:30:48:88:F7:3C:E4:B5:3A:B7:C7:00:92:54:12
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328576D51CC73C042CFC166A33EDA8A
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/adc041ca-70be-39aa-b454-dc06c27b502d.roa
Signing time:             Tue 23 Oct 2018 23:24:57 +0000
ROA not before:           Tue 23 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        70.132.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:a3:3e:da:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 23 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=b2f31479-40c0-468c-86e2-a989a9a4615a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ce:fe:f2:6f:49:7d:90:67:e7:f3:7a:21:b7:
                    9a:42:35:f9:91:c0:7d:69:8a:9f:20:93:e9:08:28:
                    35:dd:f3:f4:ce:ed:5b:9e:d3:d0:0e:a1:9c:63:31:
                    70:d7:88:db:b3:ae:b1:6d:96:15:8e:a1:33:ad:5d:
                    d4:d6:2d:8a:be:a3:42:d9:50:f1:9f:f7:21:11:a2:
                    2f:08:ce:2d:8c:2a:3e:9a:86:d6:9e:ac:6f:1c:d2:
                    2c:de:55:88:ba:2f:79:2d:30:91:66:4e:6b:42:95:
                    3b:42:5c:ed:c1:fe:d5:b0:c1:fa:35:74:a0:ce:9e:
                    50:1e:7a:a6:b3:97:88:d2:8d:f3:b1:c1:c5:d0:b7:
                    7f:1f:f6:d3:4a:68:18:62:b1:90:4f:57:f9:72:b6:
                    05:02:91:f8:b7:49:54:ae:6d:2e:a9:96:5e:78:1a:
                    c8:d9:e1:63:d8:a6:31:dc:c0:ec:51:33:fe:a4:19:
                    c4:e6:25:71:eb:b4:c9:1c:ee:bd:12:12:84:ea:56:
                    95:a7:cc:03:ea:4e:84:51:fd:e8:b9:42:08:a6:e3:
                    f2:13:66:ef:dd:92:e5:ec:6a:66:1b:b0:6a:52:c4:
                    77:37:4e:fe:ed:e5:a1:65:7a:70:82:2e:d0:7f:e4:
                    85:8e:38:bf:37:44:94:f4:d6:56:b6:61:5c:a3:79:
                    6a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A1:66:0B:07:74:30:48:88:F7:3C:E4:B5:3A:B7:C7:00:92:54:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/adc041ca-70be-39aa-b454-dc06c27b502d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.132.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:79:4a:67:06:3b:ab:80:3a:58:e8:54:c8:15:e7:a9:eb:79:
         cc:02:e9:88:4c:19:5f:be:4d:85:d5:3a:12:7d:36:7a:3e:62:
         d5:93:b5:b9:d5:87:51:95:f1:43:4e:47:5c:cb:82:90:a2:20:
         03:d9:28:88:54:8c:ac:05:73:57:1e:5a:b5:b3:46:69:a3:d3:
         f6:e9:2d:68:4c:61:48:3e:80:af:b2:55:aa:2b:eb:8e:f7:4c:
         60:03:12:90:a8:a1:74:76:88:0b:e9:f2:9b:11:e8:99:db:d5:
         bf:de:1b:cc:cb:ca:88:07:41:e3:66:a5:79:4f:71:32:5d:c0:
         5b:97:11:e8:57:e9:2a:ef:42:ec:5b:23:d4:ec:c3:74:28:12:
         17:c4:8b:5c:be:a3:e5:1d:de:c8:3f:1b:fa:29:5a:8c:eb:6b:
         60:2c:0a:8f:72:57:52:09:e6:0f:4f:66:c0:55:63:f4:6c:b5:
         4c:d3:38:18:b6:fe:13:e2:fd:28:60:87:53:88:e8:a7:ab:85:
         75:3e:24:8a:eb:f6:d8:a9:4d:36:8c:46:ac:bf:f3:60:b3:5b:
         16:51:bb:50:2e:a5:c3:b1:fb:20:66:ac:e2:65:39:9f:ac:7b:
         25:38:03:60:89:f5:86:2c:5e:e8:d5:af:ed:08:8d:d1:4d:16:
         2f:e1:64:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----