Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/13c468c0-19c6-3f8d-9874-54bbe2a7587f.roa
File:                     13c468c0-19c6-3f8d-9874-54bbe2a7587f.roa (raw, json)
Hash identifier:          t32OHpW/093kXWWrWzPcJajzzWZIr84VXXDeHKtRLrQ=
Subject key identifier:   37:52:DD:0A:16:FA:3A:04:4C:80:25:20:88:E8:23:BB:45:41:34:50
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1669997CE4D
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/13c468c0-19c6-3f8d-9874-54bbe2a7587f.roa
Signing time:             Mon 22 Oct 2018 02:25:54 +0000
ROA not before:           Mon 22 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     8987
IP address blocks:        205.251.236.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:99:97:ce:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Oct 22 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=92a76881-7b8f-411f-bdbf-ea3f5eca0829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:36:1f:6c:9c:2d:73:94:15:03:9b:b9:7d:ab:
                    12:b5:52:28:2b:f0:57:fa:52:40:5f:64:57:66:a8:
                    6e:d0:48:47:6d:1d:a8:52:28:fc:26:c5:30:a4:eb:
                    67:a8:ba:80:c4:c3:3b:31:c8:bc:2c:df:b8:c2:e8:
                    67:b0:71:24:c9:7a:3d:76:11:f8:c8:e5:2e:57:e4:
                    6b:27:59:ed:2a:46:b1:3b:13:47:1a:e4:9d:24:d9:
                    10:8a:ca:1d:8d:c8:d1:30:f6:08:63:5e:f9:b7:23:
                    67:3d:e6:66:8e:d0:6c:77:65:21:e8:14:69:20:77:
                    8a:5f:3d:94:e8:27:bf:b7:a4:ed:36:fa:cd:c6:fc:
                    ea:29:8e:18:86:3a:0c:45:68:f9:5e:10:33:8d:11:
                    60:33:54:3b:1b:fd:3c:40:f1:3b:f3:d7:34:4b:7b:
                    87:9a:3c:b5:d6:92:cf:97:c9:c9:d1:99:38:d7:3e:
                    08:cb:ce:8d:04:e3:ce:84:5e:f8:3e:02:e1:e1:fd:
                    68:97:90:0f:05:cd:34:0c:ca:e6:00:53:8b:9a:19:
                    e3:e3:ba:84:bd:87:cb:9a:13:1e:cd:e8:22:b0:c9:
                    b7:64:5d:13:20:ad:ce:60:69:34:21:e2:c2:72:15:
                    fc:c1:e7:57:ba:91:8d:06:cd:12:0e:e6:4d:48:61:
                    6f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:52:DD:0A:16:FA:3A:04:4C:80:25:20:88:E8:23:BB:45:41:34:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/13c468c0-19c6-3f8d-9874-54bbe2a7587f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:7a:b8:79:c3:c9:66:cf:88:db:61:9a:41:1d:26:9c:56:f7:
         79:b0:a6:4e:d2:4d:18:7b:58:5f:db:0c:3b:44:66:4f:82:9d:
         a0:b5:e1:ed:50:6b:0a:ed:5b:05:63:73:a8:a2:e7:81:94:05:
         48:87:49:ea:dd:ce:70:26:06:93:51:dd:8a:19:c0:e2:0d:4d:
         c0:fa:c6:61:bf:bf:4a:e7:d1:49:6c:0b:e7:70:ed:a2:c2:1a:
         03:82:6f:a6:d9:8d:72:3f:d3:52:8f:91:89:bf:75:75:c4:fe:
         47:14:82:51:86:59:b9:c5:69:5c:5b:24:eb:f4:28:2d:c3:52:
         03:a8:76:d4:80:47:63:bd:33:e3:94:d5:26:64:a2:a0:a0:1b:
         77:f9:80:19:49:94:93:5f:84:85:e4:dc:8e:bf:6c:b4:b4:3b:
         47:76:f2:51:0d:3c:d8:99:d9:ab:d3:3b:b2:48:7f:8f:08:fb:
         e5:19:d1:94:7c:dd:3a:d4:79:58:d0:ea:29:36:1b:e6:7d:c6:
         a8:4d:7e:54:82:91:b1:2a:6c:2f:87:50:82:79:3e:54:1b:2c:
         28:5d:80:bd:eb:f3:f1:e8:d7:ab:ad:06:84:2f:f5:f5:8c:bc:
         3b:65:d5:6a:83:84:1d:20:95:4d:dc:12:79:f1:6b:e1:d6:3e:
         03:d9:26:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----