Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f8c103d6-fb78-3e4e-97d2-21f88de9d678.roa
File:                     f8c103d6-fb78-3e4e-97d2-21f88de9d678.roa (raw, json)
Hash identifier:          J0YvAVphT9bm4rmws0PasBF878I+3Zr0e7Zh7e8cZ7U=
Subject key identifier:   CC:E6:56:31:56:20:57:7F:48:AA:27:9D:73:71:24:DD:60:8C:FB:33
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328576D51CC73C042CFC1669B67B4D1
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f8c103d6-fb78-3e4e-97d2-21f88de9d678.roa
Signing time:             Mon 22 Oct 2018 10:52:36 +0000
ROA not before:           Mon 22 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        76.223.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:9b:67:b4:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 22 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=e4bb9cbb-6eca-41d5-9c0c-26d614011af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:71:78:0b:97:6c:c0:d5:96:e4:dd:2e:cb:ef:
                    20:c3:36:f0:0e:5e:ae:12:e0:2a:a2:f9:88:f3:d3:
                    9b:0c:ca:9f:a8:7e:db:f1:61:aa:31:08:72:48:ed:
                    ee:21:a3:7d:af:ef:29:f4:35:c7:75:b1:b4:11:bf:
                    5d:ee:24:04:57:8d:2a:1a:47:1a:60:d5:f3:21:92:
                    a0:b8:24:f9:6f:f3:18:ed:51:62:e4:96:e4:7c:df:
                    76:05:44:8c:d9:3f:4d:f0:8b:f8:63:47:35:9f:03:
                    01:9a:49:32:9e:87:86:af:27:16:e0:2e:58:fd:cd:
                    ee:43:1b:ad:75:0a:58:ea:d7:55:e8:ee:f0:bc:1c:
                    1a:53:a1:55:7d:2b:bf:d6:dc:a6:13:f5:7f:0c:98:
                    f3:3b:fb:9e:55:41:cc:ec:84:79:0f:09:33:8e:45:
                    cf:3b:d5:a7:b5:91:c3:8e:00:b6:93:92:84:9c:d5:
                    30:a4:14:4f:83:1d:18:b8:f5:7b:6a:d5:3f:df:16:
                    53:8f:20:41:3f:b6:b3:86:13:b9:a5:af:07:ba:d6:
                    d7:c7:99:d8:c9:4d:2b:92:e5:5e:38:2a:fc:86:8c:
                    0d:72:03:57:79:1e:cb:ff:43:a8:8b:27:fd:9a:d7:
                    a5:e0:7b:c5:74:ae:2f:01:66:5b:f4:17:9c:fe:2c:
                    d0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E6:56:31:56:20:57:7F:48:AA:27:9D:73:71:24:DD:60:8C:FB:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f8c103d6-fb78-3e4e-97d2-21f88de9d678.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:63:bb:87:0e:46:c9:bd:b4:79:77:75:20:99:39:b4:3c:86:
         33:f1:6a:c7:33:37:2c:f4:23:be:6d:e6:0a:99:2b:8b:2f:bf:
         5c:2f:22:3e:65:11:13:ab:f1:95:65:75:15:14:4e:25:f9:fa:
         fc:c5:a0:36:0d:56:b9:23:e5:79:4c:35:cc:de:27:5d:e6:bd:
         52:4e:ae:fa:8b:32:10:0f:93:f7:94:22:15:cb:20:46:f8:08:
         8b:a3:ff:54:07:4a:fe:7c:40:86:a2:b9:e2:0e:43:83:22:b8:
         b1:10:d9:a1:21:04:ad:d8:93:40:2e:0c:ab:36:da:7a:a5:e9:
         aa:e7:7e:56:30:ee:6a:90:20:83:38:08:1b:f5:78:7a:13:20:
         4e:29:ae:7e:7b:c6:ee:63:f1:16:f0:d5:45:8b:0f:a7:86:76:
         9b:7c:af:9b:db:57:3a:c3:4c:85:9c:bf:61:dd:92:01:78:c8:
         a4:ad:ad:92:ed:ed:3e:12:ad:9f:36:91:0a:4b:5c:d4:42:2e:
         5e:cf:f8:cd:02:27:ef:3a:8f:33:7f:60:c2:09:00:56:38:36:
         0d:c6:b7:86:64:b0:ab:3e:03:61:d7:81:5a:ea:72:07:64:61:
         74:4b:96:6b:1e:52:4f:cf:09:1a:71:f3:90:a1:59:88:fb:89:
         9b:37:91:0a
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZptntNEwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJhMDRm
MjAeFw0xODEwMjIwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJGU0
YmI5Y2JiLTZlY2EtNDFkNS05YzBjLTI2ZDYxNDAxMWFmNjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAM1xeAuXbMDVluTdLsvvIMM28A5erhLgKqL5iPPT
mwzKn6h+2/FhqjEIckjt7iGjfa/vKfQ1x3WxtBG/Xe4kBFeNKhpHGmDV8yGSoLgk
+W/zGO1RYuSW5HzfdgVEjNk/TfCL+GNHNZ8DAZpJMp6Hhq8nFuAuWP3N7kMbrXUK
WOrXVeju8LwcGlOhVX0rv9bcphP1fwyY8zv7nlVBzOyEeQ8JM45FzzvVp7WRw44A
tpOShJzVMKQUT4MdGLj1e2rVP98WU48gQT+2s4YTuaWvB7rW18eZ2MlNK5LlXjgq
/IaMDXIDV3key/9DqIsn/ZrXpeB7xXSuLwFmW/QXnP4s0IUCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTM5lYxViBXf0iqJ51zcSTdYIz7MzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5
ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEwNGYyL2Y4YzEwM2Q2LWZiNzgtM2U0
ZS05N2QyLTIxZjg4ZGU5ZDY3OC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2Qw
LTFmZjg2ZmJhMDRmMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0
ZjIuY3JsMB8GA1UdIwQYMBaAFLa9HpQWWLj2T715GnMs7pbEa17qMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZm
YmEwNGYyLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAEzfozBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAQWO7hw5Gyb20eXd1IJk5tDyGM/FqxzM3LPQjvm3mCpkriy+/XC8iPmURE6vx
lWV1FRROJfn6/MWgNg1WuSPleUw1zN4nXea9Uk6u+osyEA+T95QiFcsgRvgIi6P/
VAdK/nxAhqK54g5DgyK4sRDZoSEErdiTQC4MqzbaeqXpqud+VjDuapAggzgIG/V4
ehMgTimufnvG7mPxFvDVRYsPp4Z2m3yvm9tXOsNMhZy/Yd2SAXjIpK2tku3tPhKt
nzaRCktc1EIuXs/4zQIn7zqPM39gwgkAVjg2Dca3hmSwqz4DYdeBWupyB2RhdEuW
ax5ST88JGnHzkKFZiPuJmzeRCg==
-----END CERTIFICATE-----