Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b358ba45-fa1e-3fc7-a9b7-560362eee652.roa
File:                     b358ba45-fa1e-3fc7-a9b7-560362eee652.roa (raw, json)
Hash identifier:          j3C9OO6e2EOs/PdOn4kfYRLtUH66sDdcILWzDfMseoc=
Subject key identifier:   63:DA:E6:D6:FB:5D:7F:D4:8C:A0:23:13:FC:5B:B2:3D:E9:22:EF:AD
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328576D51CC73C042CFC166A33EC0EF
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b358ba45-fa1e-3fc7-a9b7-560362eee652.roa
Signing time:             Tue 23 Oct 2018 23:24:50 +0000
ROA not before:           Tue 23 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        71.152.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:a3:3e:c0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 23 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=85d12b37-09ce-4e63-a9f8-b284f9338b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0a:8c:0b:34:30:e7:90:5e:e1:5f:8b:7b:4c:
                    57:b6:36:6e:53:15:3d:48:00:9a:98:48:3e:22:fa:
                    f8:7b:fd:14:ff:4d:ba:c3:2a:ab:d1:99:a0:6d:a7:
                    81:50:e1:b6:00:cb:3d:14:3b:49:cc:e1:92:64:c4:
                    c6:a5:3f:86:9d:9a:0a:8d:68:b5:b1:03:4f:07:e5:
                    f5:f7:18:5a:2f:8a:50:b4:97:4a:5d:ac:6f:20:8a:
                    dc:85:07:00:c6:97:1f:9b:0d:b4:0c:b3:34:15:46:
                    29:62:bb:3c:75:3f:6f:66:32:99:e8:42:55:1a:73:
                    76:b4:de:76:b3:b6:bf:87:48:ba:a4:88:3e:32:1b:
                    8a:4d:ca:5f:8c:5b:62:0f:c1:6f:5c:d3:59:e5:4d:
                    d8:00:3f:6b:0b:6b:e0:52:12:67:4d:50:87:6a:06:
                    c1:2c:a7:ef:32:76:cb:5d:a0:87:fa:67:87:bc:c8:
                    42:c6:2d:4c:f3:58:d3:4a:08:27:bc:ec:9c:42:55:
                    59:5d:69:48:0a:d0:5d:42:b2:d0:fd:81:cf:2b:04:
                    51:f6:b9:29:62:d8:e3:a1:23:8f:fb:2d:60:90:d4:
                    41:11:50:94:98:bf:b4:81:ba:05:af:13:26:bf:a6:
                    a4:43:c4:68:a8:61:51:18:4b:9f:ef:1e:e5:e4:21:
                    a1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DA:E6:D6:FB:5D:7F:D4:8C:A0:23:13:FC:5B:B2:3D:E9:22:EF:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b358ba45-fa1e-3fc7-a9b7-560362eee652.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.152.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:ae:22:e6:de:c1:8f:0c:35:4c:03:a5:9d:22:9d:1e:8d:05:
         34:d0:ab:67:9e:c0:a7:12:6a:08:fa:56:99:50:a0:6a:35:ec:
         ae:e6:e7:1a:33:07:35:7a:04:b1:90:f8:5d:62:6e:b0:1e:8d:
         8f:52:af:71:ea:66:82:33:f0:ac:f4:c4:1c:ca:94:17:ea:28:
         b9:9d:d6:21:39:c6:db:86:a1:b8:4f:c9:d5:af:ed:a2:3f:47:
         fc:0b:85:46:4b:4d:18:ba:b3:8f:a7:ec:f3:ea:1a:d4:23:14:
         74:8c:36:e9:5c:04:05:81:4e:d7:a8:ab:b0:97:d5:a9:7f:3c:
         b2:81:de:8a:90:ab:14:c1:1a:e1:f9:d6:c0:99:96:61:99:3a:
         c0:35:ab:88:84:06:f3:5b:da:bf:4a:f4:bd:09:33:1c:16:6d:
         73:3b:5c:63:9f:2c:c1:52:cb:21:45:61:3c:a3:b8:ae:74:02:
         1e:52:11:0d:02:95:49:35:e9:47:bf:f8:84:aa:c2:05:54:5d:
         20:ce:9c:d6:94:01:54:ad:e4:dd:fb:84:77:51:72:1b:dc:83:
         c5:f5:b4:f3:5c:54:27:86:9b:33:3c:9b:7a:ee:bd:b9:bb:af:
         14:60:60:ab:b3:34:09:d3:ed:7e:ec:40:e3:b4:8e:04:54:69:
         63:44:59:12
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZqM+wO8wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJhMDRm
MjAeFw0xODEwMjMwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDg1
ZDEyYjM3LTA5Y2UtNGU2My1hOWY4LWIyODRmOTMzOGI0MjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALMKjAs0MOeQXuFfi3tMV7Y2blMVPUgAmphIPiL6
+Hv9FP9NusMqq9GZoG2ngVDhtgDLPRQ7SczhkmTExqU/hp2aCo1otbEDTwfl9fcY
Wi+KULSXSl2sbyCK3IUHAMaXH5sNtAyzNBVGKWK7PHU/b2YymehCVRpzdrTedrO2
v4dIuqSIPjIbik3KX4xbYg/Bb1zTWeVN2AA/awtr4FISZ01Qh2oGwSyn7zJ2y12g
h/pnh7zIQsYtTPNY00oIJ7zsnEJVWV1pSArQXUKy0P2BzysEUfa5KWLY46Ejj/st
YJDUQRFQlJi/tIG6Ba8TJr+mpEPEaKhhURhLn+8e5eQhoW0CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBRj2ubW+11/1IygIxP8W7I96SLvrTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5
ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEwNGYyL2IzNThiYTQ1LWZhMWUtM2Zj
Ny1hOWI3LTU2MDM2MmVlZTY1Mi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2Qw
LTFmZjg2ZmJhMDRmMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0
ZjIuY3JsMB8GA1UdIwQYMBaAFLa9HpQWWLj2T715GnMs7pbEa17qMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZm
YmEwNGYyLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAEeYCjBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAPK4i5t7Bjww1TAOlnSKdHo0FNNCrZ57ApxJqCPpWmVCgajXsrubnGjMHNXoE
sZD4XWJusB6Nj1KvcepmgjPwrPTEHMqUF+oouZ3WITnG24ahuE/J1a/toj9H/AuF
RktNGLqzj6fs8+oa1CMUdIw26VwEBYFO16irsJfVqX88soHeipCrFMEa4fnWwJmW
YZk6wDWriIQG81vav0r0vQkzHBZtcztcY58swVLLIUVhPKO4rnQCHlIRDQKVSTXp
R7/4hKrCBVRdIM6c1pQBVK3k3fuEd1FyG9yDxfW081xUJ4abMzybeu69ubuvFGBg
q7M0CdPtfuxA47SOBFRpY0RZEg==
-----END CERTIFICATE-----