Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b3034673-ebee-3902-841f-5cdd1625b8df.roa
File:                     b3034673-ebee-3902-841f-5cdd1625b8df.roa (raw, json)
Hash identifier:          nH5NdewXDYrzOHH6mRBnLE6wXQ95QQJiLpri4WdMzgA=
Subject key identifier:   8D:FE:23:BE:76:FE:10:18:E8:FE:71:F3:62:35:3D:51:0F:5F:F9:A6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328576D51CC73C042CFC166A33F4A0B
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b3034673-ebee-3902-841f-5cdd1625b8df.roa
Signing time:             Tue 23 Oct 2018 23:25:25 +0000
ROA not before:           Tue 23 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        70.132.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:a3:3f:4a:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 23 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=8767da7b-b075-4beb-b529-4568f4390d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b4:03:6f:42:6a:0e:48:8c:5b:03:4f:be:f7:
                    41:f8:12:74:ad:fe:3e:cf:58:e8:ab:be:7b:6f:a8:
                    1d:c4:66:cc:52:44:e3:0f:be:6c:7a:e0:69:0a:8c:
                    35:a9:f8:4c:ff:5a:d5:f5:44:fe:16:3e:12:f2:77:
                    77:91:46:5c:02:3d:5a:e8:ea:14:c2:06:48:19:88:
                    52:55:b7:1e:06:f5:2b:60:2f:98:f0:72:bf:43:14:
                    78:b6:6c:06:49:02:e5:75:83:50:7e:71:a5:bf:cd:
                    41:20:e7:48:9f:7c:a2:ba:d6:0f:3c:2a:ca:75:95:
                    e5:b8:c7:5c:59:6b:b1:e4:d8:5b:53:48:22:c1:82:
                    fb:e3:93:44:ff:e8:af:65:2a:c9:f5:d1:d9:9b:5f:
                    6a:4d:20:b4:23:2e:ac:6d:e8:91:b1:eb:5d:6e:8e:
                    c7:37:9a:50:18:fa:b8:9a:75:2b:58:29:e4:84:4e:
                    2c:bd:44:a9:87:b7:c3:52:86:7d:bf:a7:9a:24:43:
                    2c:dd:0b:14:a3:76:91:f6:83:39:6b:a5:54:1b:88:
                    9c:9c:2f:5d:fb:a6:1d:81:8c:b3:69:22:6e:e1:86:
                    cd:3c:6b:99:e9:1d:de:c8:92:6e:2c:01:62:87:fb:
                    62:52:2b:fb:03:26:f7:73:85:21:21:ff:b4:b7:bc:
                    d2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:FE:23:BE:76:FE:10:18:E8:FE:71:F3:62:35:3D:51:0F:5F:F9:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b3034673-ebee-3902-841f-5cdd1625b8df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.132.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:8b:41:65:f5:9e:2d:a6:3e:cf:0b:5e:b4:81:58:6c:73:74:
         1e:b8:53:c2:ce:70:02:59:83:c8:c4:c6:60:66:0d:d2:74:34:
         1c:75:c5:dc:04:6e:1c:25:82:8e:89:08:4d:ed:d6:90:8f:83:
         5f:69:3c:cb:d4:e6:d4:5e:46:83:b5:dd:67:c8:6a:6f:83:fa:
         be:1a:a3:b3:cb:bb:64:65:e7:e3:07:70:98:5a:c5:cc:3f:03:
         74:69:56:74:dc:b8:16:93:3a:32:2f:3f:cb:a7:91:cf:2c:9c:
         c6:55:13:35:3f:84:97:58:e3:a6:0d:10:4d:c2:1c:d3:1f:b8:
         83:09:aa:ba:7d:53:b6:4b:b8:04:19:46:21:53:03:bb:85:8c:
         be:ed:5d:e0:f0:8b:1c:7d:ae:4d:12:bf:7b:eb:4c:85:eb:8c:
         18:09:ed:6f:d0:e3:6a:db:be:e4:51:18:ed:25:eb:a6:e0:17:
         30:d2:df:66:41:b6:bc:9b:8d:c2:df:08:45:c6:79:f0:bc:ae:
         24:4d:ca:01:14:76:51:e3:54:b7:97:e3:43:af:00:71:24:92:
         57:61:e3:ce:80:25:3b:e2:a4:70:02:03:67:a5:d7:1d:43:ba:
         d8:85:d9:f1:45:e1:b2:ce:df:d3:5a:53:12:e3:eb:42:1a:34:
         00:75:58:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----