Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d53bf4bb-9c7a-3d82-ac26-eddc9220c7a3.roa
File:                     d53bf4bb-9c7a-3d82-ac26-eddc9220c7a3.roa (raw, json)
Hash identifier:          hCkehurX0fHPGHiSWUXEbJrAboyQ9SFwKcP10AtOJU0=
Subject key identifier:   AF:7F:0E:94:EB:A3:82:F4:F9:77:12:F1:9A:EB:23:17:3B:03:FA:57
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328576D51CC73C042CFC166A33F2903
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d53bf4bb-9c7a-3d82-ac26-eddc9220c7a3.roa
Signing time:             Tue 23 Oct 2018 23:25:17 +0000
ROA not before:           Tue 23 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        63.32.0.0/14 maxlen: 14

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:a3:3f:29:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 23 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=54641d5e-8f35-42cb-9220-d776723d6c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8a:51:1c:69:e5:ad:a6:51:3e:9c:97:a3:4e:
                    cb:d7:de:66:f0:67:fa:e3:13:e5:4d:b1:49:a9:bc:
                    df:08:3b:2b:0d:95:54:6a:0f:c8:03:99:df:9d:24:
                    cc:54:de:08:2e:bf:f1:ac:d6:ea:2b:32:0b:5e:60:
                    89:8b:0f:44:2f:bd:1e:5d:f0:30:6f:a9:0c:e5:06:
                    5d:1d:f1:ad:7e:d5:09:bb:42:66:ea:53:f8:67:86:
                    b6:1e:ad:f8:6e:48:52:93:07:ae:7e:f0:6e:64:32:
                    fb:4a:e1:c2:25:6f:b1:ff:ba:00:9b:cc:f8:19:da:
                    aa:c7:ac:40:9e:f8:36:c6:79:10:2d:10:73:e4:fa:
                    da:99:1d:d0:f5:df:ce:72:2e:39:f2:f9:6a:c2:81:
                    f0:af:ce:4e:07:00:bb:c2:08:e4:68:85:71:7d:61:
                    f0:db:ae:9b:06:ff:1b:21:d3:b7:e6:1f:7f:95:52:
                    5a:73:74:fb:d8:b1:1f:f8:b7:12:1a:14:61:ee:f4:
                    24:53:a7:e2:e4:da:a2:87:1a:c6:36:eb:93:c2:5c:
                    0c:31:be:4d:3c:f6:54:fa:a0:59:b5:ad:e7:de:bd:
                    c2:ea:e8:6d:78:c7:92:7f:89:04:9b:31:f9:74:dd:
                    20:e1:3b:8f:07:42:c8:61:2a:0f:57:e7:e4:3f:0b:
                    68:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7F:0E:94:EB:A3:82:F4:F9:77:12:F1:9A:EB:23:17:3B:03:FA:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d53bf4bb-9c7a-3d82-ac26-eddc9220c7a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.32.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:81:27:49:73:16:a6:39:ae:c9:94:3c:50:a9:66:42:18:79:
         3c:36:ed:74:11:d6:e8:e4:97:9b:9c:fd:51:21:5f:a5:1f:8f:
         96:98:14:85:74:9d:2a:89:14:ea:62:29:e9:c2:3a:56:8c:22:
         23:36:1e:05:fa:e8:74:3b:fc:8e:7c:e8:3f:75:56:0e:38:a7:
         32:08:3b:2e:ef:88:11:ee:04:95:2a:f4:cf:e1:08:22:f6:7a:
         a7:d1:b6:22:ed:11:0d:cf:7a:df:5b:a0:ae:32:c7:55:7f:37:
         61:6b:04:b2:d6:44:4e:a6:02:8f:7f:f1:b0:50:92:f6:9c:49:
         8c:c3:69:ea:a4:e7:14:5e:9c:50:f9:ca:42:fc:92:86:99:96:
         3b:d5:8b:90:af:e0:a8:15:de:d5:7a:15:0c:00:2b:ff:d0:04:
         1d:6f:e4:fd:46:77:ce:71:6b:c7:5c:5b:1f:1e:75:57:f0:4b:
         9e:b9:53:82:73:21:88:24:18:44:25:41:f2:1e:b5:bf:ed:60:
         8b:e1:a9:b9:74:bc:bb:b8:5a:12:7c:ab:60:8f:3a:8c:ce:2f:
         6e:e1:c4:ed:4b:52:41:b4:9b:05:4a:a1:d5:0d:e3:ee:73:8d:
         7e:1f:ac:40:47:2a:62:b6:67:85:90:fd:a5:d8:9a:2e:6c:3a:
         a2:d8:d1:e1
-----BEGIN CERTIFICATE-----
MIIGPjCCBSigAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZqM/KQMwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJhMDRm
MjAeFw0xODEwMjMwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDU0
NjQxZDVlLThmMzUtNDJjYi05MjIwLWQ3NzY3MjNkNmM4YTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAPGKURxp5a2mUT6cl6NOy9feZvBn+uMT5U2xSam8
3wg7Kw2VVGoPyAOZ350kzFTeCC6/8azW6isyC15giYsPRC+9Hl3wMG+pDOUGXR3x
rX7VCbtCZupT+GeGth6t+G5IUpMHrn7wbmQy+0rhwiVvsf+6AJvM+BnaqsesQJ74
NsZ5EC0Qc+T62pkd0PXfznIuOfL5asKB8K/OTgcAu8II5GiFcX1h8Nuumwb/GyHT
t+Yff5VSWnN0+9ixH/i3EhoUYe70JFOn4uTaoocaxjbrk8JcDDG+TTz2VPqgWbWt
5969wurobXjHkn+JBJsx+XTdIOE7jwdCyGEqD1fn5D8LaBcCAwEAAaOCA1QwggNQ
MB0GA1UdDgQWBBSvfw6U66OC9Pl3EvGa6yMXOwP6VzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5
ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEwNGYyL2Q1M2JmNGJiLTljN2EtM2Q4
Mi1hYzI2LWVkZGM5MjIwYzdhMy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2Qw
LTFmZjg2ZmJhMDRmMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0
ZjIuY3JsMB8GA1UdIwQYMBaAFLa9HpQWWLj2T715GnMs7pbEa17qMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZm
YmEwNGYyLmNlcjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAj8gMFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQELA4IB
AQC0gSdJcxamOa7JlDxQqWZCGHk8Nu10Edbo5JebnP1RIV+lH4+WmBSFdJ0qiRTq
YinpwjpWjCIjNh4F+uh0O/yOfOg/dVYOOKcyCDsu74gR7gSVKvTP4Qgi9nqn0bYi
7RENz3rfW6CuMsdVfzdhawSy1kROpgKPf/GwUJL2nEmMw2nqpOcUXpxQ+cpC/JKG
mZY71YuQr+CoFd7VehUMACv/0AQdb+T9RnfOcWvHXFsfHnVX8EueuVOCcyGIJBhE
JUHyHrW/7WCL4am5dLy7uFoSfKtgjzqMzi9u4cTtS1JBtJsFSqHVDePuc41+H6xA
RypitmeFkP2l2JoubDqi2NHh
-----END CERTIFICATE-----