Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/8c3c663e-85d4-3ed8-b467-90349ea62706.roa
File:                     8c3c663e-85d4-3ed8-b467-90349ea62706.roa (raw, json)
Hash identifier:          WUKBExo6sLaLUkgZC99eXBC2MgUxGzy5YYiVPpEoCs0=
Subject key identifier:   C6:51:0C:69:C6:87:4E:46:79:2F:6F:61:2D:B2:57:60:5F:24:5A:8A
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328576D51CC73C042CFC163172325C1
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/8c3c663e-85d4-3ed8-b467-90349ea62706.roa
Signing time:             Mon 30 Apr 2018 15:19:29 +0000
ROA not before:           Fri 27 Apr 2018 04:00:00 +0000
ROA not after:            Thu 27 Apr 2028 04:00:00 +0000
asID:                     16509
IP address blocks:        205.251.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:63:17:23:25:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Apr 27 04:00:00 2018 GMT
            Not After : Apr 27 04:00:00 2028 GMT
        Subject: CN=8e511d3c-a47a-44c1-8f54-b6c3fdb115dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:57:48:24:b7:81:34:6a:b4:9f:87:5c:09:
                    85:fb:71:58:9a:16:4a:7a:d0:d7:ee:a8:6d:0a:8e:
                    42:7e:c8:b5:57:75:a7:b8:9f:dc:d8:a8:08:4f:71:
                    23:6f:c5:f8:78:28:49:5d:e5:ed:54:61:b2:50:1e:
                    05:13:49:62:c9:5b:22:05:80:44:ee:08:49:db:16:
                    08:ba:fb:be:ef:8f:ae:e7:55:f2:d6:ad:80:4a:ac:
                    01:4e:7a:69:96:a5:70:8f:a9:fd:8d:8c:4b:91:7f:
                    2d:5b:28:e4:2a:f4:e2:58:2a:3f:f2:9e:ff:54:b8:
                    19:1f:2f:d3:73:88:c8:d0:b9:c6:1e:1e:14:81:bc:
                    b7:34:51:5e:73:fc:9c:a3:c8:d2:cf:d7:2c:68:50:
                    6a:47:fb:df:06:32:3a:94:6d:5e:a9:c4:7a:6d:4d:
                    13:56:35:af:a0:e2:12:dd:1e:3a:11:08:09:a6:aa:
                    da:a0:4d:4b:4c:fa:73:48:61:47:2e:c7:24:f5:d5:
                    a1:78:e5:e2:60:66:cd:76:da:44:38:db:54:97:a8:
                    73:89:90:66:90:7b:6a:57:f4:b8:1b:8a:41:e7:41:
                    a6:5d:07:4d:32:a4:c7:4b:a8:74:0e:0e:73:54:53:
                    94:3b:ac:46:ff:4d:a4:1b:e3:49:fe:0a:b4:08:71:
                    f5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:51:0C:69:C6:87:4E:46:79:2F:6F:61:2D:B2:57:60:5F:24:5A:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/8c3c663e-85d4-3ed8-b467-90349ea62706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:7d:c3:92:d1:9e:cc:a7:07:f4:7d:71:7d:44:7e:c6:22:e9:
         ad:26:b6:bc:69:bf:4d:28:24:73:94:20:f4:19:80:5f:0b:ab:
         84:ba:32:4c:cc:d7:50:fb:46:aa:1e:26:1d:fc:4d:a6:2c:45:
         5b:f2:12:94:b6:ad:06:b1:ba:85:57:7f:29:ad:ae:00:e2:b7:
         9a:1d:af:ec:33:de:89:93:c6:f3:f9:f7:c0:71:e2:89:db:9f:
         e2:88:fb:8c:49:69:a9:37:47:ee:fa:e9:a4:29:67:7e:70:45:
         fb:2b:17:50:93:42:31:39:a1:fd:7a:ea:a3:c7:c8:a9:22:8d:
         86:35:a9:72:3b:7c:50:67:f2:63:84:a6:42:ba:5a:01:27:ba:
         b5:79:18:c3:08:51:ab:dd:60:7d:1b:25:c1:21:a9:90:bb:ee:
         10:68:b7:06:1e:09:2a:aa:6d:fe:41:41:cf:e3:bc:3c:0c:b2:
         a7:88:66:9a:74:12:18:6f:8d:d1:37:76:4e:c1:1a:10:aa:80:
         5e:fd:1d:06:02:ac:15:11:23:e5:14:b2:64:f0:c4:eb:e0:74:
         1e:3b:96:47:b6:9c:df:51:33:6d:65:e1:44:27:15:e4:e6:fc:
         f2:af:b7:42:47:7c:60:fe:d8:fe:a2:bc:f2:70:91:17:14:e3:
         11:61:ca:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----