Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1bf505f-df14-3992-b5f1-3bf56e9baa0a.roa
File:                     f1bf505f-df14-3992-b5f1-3bf56e9baa0a.roa (raw, json)
Hash identifier:          fpSdo3JdJJoFVtm030+cS5TJgivLJCGYvWLZZuF4OPI=
Subject key identifier:   A6:36:B4:EB:E5:8E:2F:70:06:BA:76:7D:4E:DB:B4:9D:82:A8:46:A9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328576D51CC73C042CFC1669AB46A3B
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1bf505f-df14-3992-b5f1-3bf56e9baa0a.roa
Signing time:             Mon 22 Oct 2018 07:36:46 +0000
ROA not before:           Mon 22 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        76.223.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:9a:b4:6a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 22 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=ed9645a7-5312-474f-bb66-53ebc8a10c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a9:e7:45:ab:81:f1:98:61:a2:a8:74:33:1e:
                    d7:ae:16:23:e0:60:16:4b:a8:7d:3b:e2:cb:f2:cc:
                    48:4b:80:bb:30:3a:83:6a:e3:9e:3e:14:58:7a:1c:
                    d7:20:56:b0:b0:01:2c:ae:36:1f:6a:cb:ba:d1:f8:
                    6c:8c:dd:3d:0e:76:58:52:50:e8:7e:fe:7b:e4:eb:
                    d0:bf:64:af:7e:14:4b:28:19:6b:42:80:2b:42:6a:
                    1f:cf:f4:53:75:c0:19:23:e2:d3:77:2f:eb:2e:b7:
                    73:dd:a7:80:0d:7d:2f:5a:6d:52:1e:6b:6a:1c:d5:
                    e2:d6:ff:a6:94:6b:7c:05:8f:39:9a:9c:14:a9:89:
                    09:58:43:0a:57:13:92:61:70:e3:c4:82:86:0f:4c:
                    74:ed:91:d3:59:6a:d3:27:c3:62:e0:83:6c:7d:73:
                    1c:c2:9e:f7:89:3a:7d:53:37:e0:29:d9:e7:2b:83:
                    d6:82:f0:ed:98:92:b4:1f:39:66:19:4f:b1:51:93:
                    14:7a:51:66:eb:40:bb:fd:13:e3:c8:fe:12:12:2e:
                    2f:cd:c4:6c:9d:88:2c:28:78:44:51:55:62:08:ad:
                    7b:e9:1b:09:14:57:63:fb:73:34:92:0e:fc:14:2c:
                    75:8c:93:29:1c:59:2e:e2:82:97:d9:83:30:42:7e:
                    2b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:36:B4:EB:E5:8E:2F:70:06:BA:76:7D:4E:DB:B4:9D:82:A8:46:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1bf505f-df14-3992-b5f1-3bf56e9baa0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:79:df:7f:01:82:0c:f1:7b:d8:f6:d8:27:0d:69:38:4a:1c:
         b1:a6:e3:15:8c:7b:3b:b3:1d:11:0c:17:31:24:e3:35:e2:ca:
         e3:46:9d:12:6c:4c:40:cd:fc:9f:77:88:df:29:70:e7:40:fc:
         ab:17:ed:b7:8a:2a:84:cc:1c:28:e3:08:83:17:21:27:ce:06:
         c1:aa:43:b2:94:88:c5:4e:bc:97:bd:1a:8e:9a:d1:a2:bc:d7:
         00:95:44:32:47:23:2b:53:41:51:ea:44:c9:a3:9c:67:b4:5d:
         90:b1:d6:45:7a:21:d5:96:61:0b:bb:ef:97:0b:c9:60:a2:5e:
         ad:6b:b2:77:50:00:5d:a9:8d:30:fb:e0:9a:61:e0:ef:9d:52:
         7b:83:74:e7:17:6f:11:72:49:f2:40:97:29:98:a3:3d:7c:1e:
         da:e9:1d:f5:55:75:dd:a1:ae:1c:97:c4:f9:9e:a1:da:61:f8:
         46:f4:64:42:a8:ad:1a:d0:1a:19:31:1c:ad:9d:00:e9:c2:16:
         39:0a:18:86:05:d4:d5:f3:a9:da:1a:09:7e:3a:f1:fa:8d:31:
         35:6f:5a:75:6b:c4:18:22:f7:f3:aa:b1:98:b2:af:17:6f:db:
         12:ee:73:9b:a3:cb:76:f8:9f:ed:b4:ac:57:87:b2:db:5c:ba:
         f1:9e:0e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----