Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff0d1-a587-45dd-97cb-fded4c7866bd/56ff4827-a0f0-38fa-8955-93c460bcbde6.roa
File:                     56ff4827-a0f0-38fa-8955-93c460bcbde6.roa (raw, json)
Hash identifier:          otJG/OvEPVSmk8DgmfWzk+cZBCoRw/cKZKOsyOyorD8=
Subject key identifier:   67:87:18:72:CC:3F:F9:2A:17:50:AF:A0:D9:D9:B5:32:1F:A9:A9:6D
Certificate issuer:       /CN=5deff0d1-a587-45dd-97cb-fded4c7866bd
Certificate serial:       010D0C9F4328576D51CC73C042CFC166829F511B
Authority key identifier: 6F:D6:17:7D:30:7D:B4:A7:67:8B:D8:EF:CC:05:52:B8:5E:70:3A:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff0d1-a587-45dd-97cb-fded4c7866bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff0d1-a587-45dd-97cb-fded4c7866bd/56ff4827-a0f0-38fa-8955-93c460bcbde6.roa
Signing time:             Wed 17 Oct 2018 15:22:51 +0000
ROA not before:           Wed 17 Oct 2018 04:00:00 +0000
ROA not after:            Tue 17 Oct 2028 04:00:00 +0000
asID:                     62597
IP address blocks:        198.51.44.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:82:9f:51:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5deff0d1-a587-45dd-97cb-fded4c7866bd
        Validity
            Not Before: Oct 17 04:00:00 2018 GMT
            Not After : Oct 17 04:00:00 2028 GMT
        Subject: CN=6a547246-bf34-41c0-b6da-297ce765ad16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:dd:9f:a6:bf:40:ee:87:19:b9:c5:07:83:8f:
                    4f:06:42:c8:a4:44:71:01:f6:eb:2d:a1:cf:a7:17:
                    21:a3:f6:6a:eb:85:6c:1a:e3:b6:51:14:3a:ca:68:
                    ef:9f:25:d4:76:13:f6:c8:be:f5:57:20:a7:1c:1c:
                    85:12:59:d3:9f:c7:e4:18:ca:63:6d:2d:35:a2:af:
                    29:a4:bc:0b:f1:b7:c7:b3:ce:24:bc:68:45:4c:d2:
                    87:41:84:2b:2e:87:4d:22:1a:8a:43:b0:e9:aa:09:
                    cd:a3:c3:d8:73:a7:e8:c1:a8:9d:b8:85:34:7e:8e:
                    f5:78:ad:b2:83:14:21:4b:5d:61:b5:83:4f:83:64:
                    19:11:7a:5a:fd:bc:37:d5:7c:e3:9b:3e:c3:82:3a:
                    02:76:e9:67:82:d1:ff:ec:3a:8f:91:22:99:f8:09:
                    e1:91:a9:f6:90:40:2c:70:fc:e0:03:a2:3e:19:7f:
                    62:83:e9:fe:35:ba:f2:98:c6:17:77:ce:20:94:47:
                    68:29:38:b9:66:66:43:9f:f7:a6:1b:21:1e:4e:1c:
                    a4:20:a5:46:f3:02:b8:f2:21:d7:54:18:8f:78:d2:
                    57:cd:15:4e:74:45:fa:4b:09:dd:7a:e6:9d:d7:73:
                    b5:9b:ba:cc:c3:e2:a7:1c:ee:12:a0:ac:4a:0e:bb:
                    ac:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:87:18:72:CC:3F:F9:2A:17:50:AF:A0:D9:D9:B5:32:1F:A9:A9:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff0d1-a587-45dd-97cb-fded4c7866bd/56ff4827-a0f0-38fa-8955-93c460bcbde6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff0d1-a587-45dd-97cb-fded4c7866bd/5deff0d1-a587-45dd-97cb-fded4c7866bd.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D6:17:7D:30:7D:B4:A7:67:8B:D8:EF:CC:05:52:B8:5E:70:3A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff0d1-a587-45dd-97cb-fded4c7866bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.51.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:e6:4c:6a:c8:c5:3a:d7:fc:2f:0f:89:1c:a5:12:f0:eb:91:
         77:b2:2e:85:1a:75:e4:49:2b:1c:82:7e:bb:fb:1a:40:a4:d3:
         61:d8:ba:e3:b3:83:89:e5:ad:12:b8:9c:83:b6:bd:61:cb:7f:
         19:3a:58:dd:d3:7d:1f:40:9c:f3:8c:4f:ce:8b:95:b5:b3:a5:
         7b:79:76:d3:a6:88:2a:ce:b2:bf:dd:11:0f:99:df:f3:03:98:
         09:47:36:22:d5:64:e8:5c:de:04:b8:ef:66:d2:16:a1:24:f9:
         a3:46:34:b1:8d:de:58:f2:b0:ea:ce:c0:d5:dd:97:0b:03:e0:
         ba:84:d4:68:bc:fa:33:94:85:6f:21:d4:1c:1d:0b:92:3c:2c:
         dd:c8:5b:27:cf:59:37:19:db:aa:0f:c9:b6:04:7c:f9:c8:41:
         32:fa:c4:64:13:77:67:7b:a3:cd:4a:6f:b5:17:03:42:5a:46:
         8d:05:8b:ff:62:72:fd:e2:4f:3e:68:0d:f0:ce:29:81:d3:77:
         6b:d4:f8:8f:f0:aa:ab:49:93:0a:98:98:b9:3e:61:47:3c:02:
         10:09:74:cc:21:19:0b:00:c6:6d:09:41:47:84:34:3c:c0:9a:
         13:b7:c8:27:89:46:ee:99:5a:f0:a1:9e:cd:9c:33:ae:28:a8:
         2e:3c:25:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----