Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/b2ad557b-75cb-310b-8f18-1eb5280d21c4.roa
File:                     b2ad557b-75cb-310b-8f18-1eb5280d21c4.roa (raw, json)
Hash identifier:          Wy94Jbz/85t0qO1js3Edu05c0eHrRs1LjgOLaEA9gx4=
Subject key identifier:   16:2C:19:13:A3:BB:92:6A:98:A2:22:CE:BE:11:B6:F3:97:B9:73:4E
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328576D51CC73C042CFC163171B4C18
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/b2ad557b-75cb-310b-8f18-1eb5280d21c4.roa
Signing time:             Mon 30 Apr 2018 15:10:55 +0000
ROA not before:           Fri 27 Apr 2018 04:00:00 +0000
ROA not after:            Thu 27 Apr 2028 04:00:00 +0000
asID:                     38895
IP address blocks:        205.251.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:63:17:1b:4c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Apr 27 04:00:00 2018 GMT
            Not After : Apr 27 04:00:00 2028 GMT
        Subject: CN=d1eb32c7-61cb-4f5f-a199-f7db43f507b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7f:86:50:86:f7:95:14:b3:99:f6:8a:ce:69:
                    a3:eb:d3:fe:e1:5c:0d:2f:11:cd:c7:27:9a:3e:a8:
                    47:60:7a:d4:07:80:e3:87:31:35:24:af:28:48:4e:
                    9b:52:37:c4:78:a6:1d:05:91:6b:72:ac:e7:41:3b:
                    60:0f:67:2b:82:79:60:13:f0:0e:ef:79:9e:34:5b:
                    db:37:d8:cd:89:4b:04:99:50:c1:26:5f:4d:1e:79:
                    72:59:07:0d:81:53:85:52:c0:5a:46:5c:c5:0b:0e:
                    80:69:c7:48:d9:96:da:7d:98:51:ee:d5:08:a4:5c:
                    fc:ec:60:dd:19:d2:2c:13:3f:7d:1d:b4:49:19:75:
                    40:14:23:a3:de:56:60:05:25:fc:cc:15:b0:57:0a:
                    a5:f6:ba:c3:bd:84:05:c8:09:ae:16:74:13:41:f5:
                    01:fe:a4:4f:65:f8:f1:03:7a:ad:38:77:c7:eb:1f:
                    fa:46:d5:09:1c:ba:4a:96:a0:46:0f:36:bb:af:ff:
                    72:a7:ba:5f:19:bf:34:1a:b9:10:c2:30:ac:b3:27:
                    2d:6e:eb:2f:23:44:32:a5:99:96:e2:0e:f2:5c:23:
                    40:30:b4:da:7c:94:3c:27:1d:6c:06:c2:82:0c:d2:
                    d6:76:1f:07:05:ea:3b:2e:b2:0e:09:a0:a2:63:3b:
                    73:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2C:19:13:A3:BB:92:6A:98:A2:22:CE:BE:11:B6:F3:97:B9:73:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/b2ad557b-75cb-310b-8f18-1eb5280d21c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:5b:c1:42:26:6f:90:16:0c:bf:61:b5:c4:06:9a:b3:80:9e:
         4d:d9:a9:3c:c7:ec:1b:d8:d0:26:33:aa:6b:44:83:1f:f8:a6:
         54:79:cb:7f:bc:5c:de:42:c5:74:91:a1:51:65:b0:79:1e:f3:
         e6:36:e6:e0:fe:6b:f2:90:c5:fc:35:11:f4:ff:3f:39:e6:5f:
         9b:61:b4:9b:7c:54:15:61:25:62:2a:7f:82:b3:c9:13:d2:27:
         a7:57:9f:50:28:ec:bb:bc:5b:7b:67:8c:95:bc:ad:8d:2c:cf:
         8b:13:ea:72:f4:3c:83:c5:4b:aa:da:50:f1:c9:a2:64:94:b4:
         b6:da:d0:c5:24:37:8e:e6:33:e2:56:00:de:63:f0:ba:ab:fb:
         28:2b:b4:37:d4:12:20:c9:be:85:78:ea:81:fc:56:89:ac:89:
         6d:70:2d:31:a9:2a:e3:0f:93:7e:26:f1:68:0f:cd:06:b2:5a:
         d4:d5:87:dd:5b:55:ed:62:8e:1a:30:65:b4:b2:70:6f:84:0e:
         74:7e:69:8e:dc:98:f7:e0:e5:46:d8:9f:23:16:2e:ad:10:0e:
         92:fa:b4:9c:84:bc:b4:c8:3e:69:8b:f1:e5:b9:1c:f4:02:e9:
         28:b8:47:ef:04:f7:17:96:18:ee:cd:60:f0:71:44:44:2a:3e:
         4e:a9:b6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----