Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/a9618359-171e-308c-a493-9f9cdc30d252.roa
File:                     a9618359-171e-308c-a493-9f9cdc30d252.roa (raw, json)
Hash identifier:          cTeq08oz9mgeBa532cggRVY+0/JVwr9w95slDXEXljM=
Subject key identifier:   39:D7:BE:8F:5D:3E:EF:B6:DF:60:0D:87:B7:B0:AF:2D:80:9E:6B:47
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665C7ACFE7
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/a9618359-171e-308c-a493-9f9cdc30d252.roa
Signing time:             Wed 10 Oct 2018 05:37:24 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        207.171.176.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:7a:cf:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=0f2b62e6-5120-4595-ac6b-52b8d3620593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:68:c7:1d:25:f1:cd:b8:d3:21:b9:dc:a4:c9:
                    da:c0:89:05:53:f5:8c:dd:83:5b:9c:93:47:89:cf:
                    07:25:81:e8:f8:fb:08:37:4c:bb:c0:74:b0:56:be:
                    f8:5e:ce:28:ca:52:da:10:23:98:db:e1:a3:11:22:
                    a1:d8:50:19:5a:f9:71:a6:65:02:b7:54:e3:e7:de:
                    b9:0b:a7:af:c5:c9:4c:c3:05:c1:c6:d9:29:2f:af:
                    4d:44:63:f6:68:d3:42:da:b3:8b:b9:7e:f3:26:bf:
                    e4:21:b0:87:e4:cb:e8:d8:07:5a:01:0a:07:5e:26:
                    95:48:81:30:e7:47:37:83:58:6c:b6:dd:03:ce:7f:
                    21:4d:82:44:dc:a4:67:19:fa:bf:cc:b4:6c:af:b0:
                    7c:08:00:ec:d4:41:05:98:4d:b9:33:e5:5a:40:97:
                    d2:10:6b:c3:ef:f8:d0:7e:0d:a5:4e:cf:10:08:1a:
                    f7:0f:8e:0a:a0:72:55:57:40:b8:92:c1:79:14:7a:
                    42:46:66:43:74:6e:62:8b:91:e3:ee:46:d4:cd:3b:
                    55:61:18:76:71:07:11:f9:85:e1:50:94:d7:e7:6c:
                    26:a8:f1:71:61:78:e6:e9:3a:26:bd:b3:21:8b:c0:
                    7e:57:ec:68:8d:f4:42:46:82:d5:e5:6b:0c:b6:46:
                    84:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D7:BE:8F:5D:3E:EF:B6:DF:60:0D:87:B7:B0:AF:2D:80:9E:6B:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/a9618359-171e-308c-a493-9f9cdc30d252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.171.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:82:8e:56:3a:bb:11:fc:3d:56:60:6d:8e:af:78:50:f6:00:
         5d:19:e5:09:ee:87:44:ec:c8:95:dc:a1:48:35:b3:59:fe:f4:
         32:a0:4a:71:79:19:0a:a3:48:22:6f:85:22:02:6d:2c:98:d8:
         8f:50:7b:7c:d1:6b:09:dc:3a:e7:c1:9e:43:5e:8c:f3:e5:41:
         23:35:52:8b:7e:b3:58:4f:0d:1a:5d:27:ff:e8:8e:db:87:c8:
         40:e7:37:70:33:e7:4d:8b:de:5f:2c:83:46:21:23:a6:d8:17:
         2e:52:b2:62:1e:1d:c0:c1:1e:ea:4a:8b:47:fc:d0:9b:ef:85:
         8a:6f:63:b0:6b:9d:e7:79:a2:20:de:ee:8e:4e:82:a4:5f:1c:
         78:07:33:30:07:62:01:77:6d:0f:ba:56:43:c5:08:6f:0c:8b:
         56:8d:c7:03:63:d0:d4:fc:f6:4c:80:f3:b2:4b:c9:39:91:8d:
         d9:76:9e:0c:ec:c3:8c:57:cd:b5:fc:cf:c5:01:01:3d:08:64:
         98:f7:ae:2f:00:2a:11:54:bb:73:98:01:9c:06:0c:ef:11:a1:
         4d:c3:a4:13:80:98:9f:9e:ca:6e:74:ca:aa:9f:5a:93:46:9c:
         91:57:b6:0c:f0:19:c8:10:06:15:a7:f7:58:c6:22:b8:68:f6:
         9f:3a:c3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----