Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b64bde8-ef11-42f5-a1b7-8949e435de70/d4dd34a8-5f08-3bba-9397-5ae7cb6033f0.roa
File:                     d4dd34a8-5f08-3bba-9397-5ae7cb6033f0.roa (raw, json)
Hash identifier:          qLTwJE/fqiRXlvUTI/yu6U2rnjA2CGJ7LOvPZlM3Usg=
Subject key identifier:   83:68:E6:BF:9E:0B:6C:A3:07:0A:2E:84:BB:A7:4B:8E:35:9B:9E:1F
Certificate issuer:       /CN=6b64bde8-ef11-42f5-a1b7-8949e435de70
Certificate serial:       010D0C9F4328576D51CC73C042CFC1691155CB22
Authority key identifier: 83:B9:06:6E:B8:57:B8:41:8C:2A:F0:90:90:45:C6:66:B7:91:4B:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b64bde8-ef11-42f5-a1b7-8949e435de70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b64bde8-ef11-42f5-a1b7-8949e435de70/d4dd34a8-5f08-3bba-9397-5ae7cb6033f0.roa
Signing time:             Thu 21 Feb 2019 18:33:49 +0000
ROA not before:           Mon 28 Jan 2019 05:00:00 +0000
ROA not after:            Sun 28 Jan 2029 05:00:00 +0000
asID:                     13916
IP address blocks:        208.83.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:69:11:55:cb:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b64bde8-ef11-42f5-a1b7-8949e435de70
        Validity
            Not Before: Jan 28 05:00:00 2019 GMT
            Not After : Jan 28 05:00:00 2029 GMT
        Subject: CN=383e81c0-9b10-46e2-a909-f5d763d9480f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:46:83:97:1e:0b:72:4b:fb:43:4c:bf:d1:69:
                    25:57:d5:e7:c8:06:bb:60:43:28:75:1f:44:13:35:
                    d0:0c:49:f8:f1:a5:e5:01:6a:ee:17:8b:ee:34:22:
                    ea:39:dd:50:a1:8e:66:94:df:12:d6:d9:6e:50:fc:
                    15:20:fa:ca:b5:f6:60:1f:59:55:79:7f:62:1d:ba:
                    ce:1b:5b:3f:19:64:51:6e:e7:b3:77:25:26:af:80:
                    ed:fe:5f:6a:ce:67:48:bb:f3:fd:2a:27:1c:a6:a1:
                    f3:ba:a0:a5:56:c5:5c:06:46:53:9f:7a:35:9a:40:
                    21:fa:ad:e4:b5:6e:3c:c4:c2:d5:95:84:c1:28:9a:
                    9b:8d:7d:cc:10:d1:ba:8f:61:37:6c:25:24:12:06:
                    37:8b:d2:0a:ac:b2:12:fd:db:52:93:a7:09:45:85:
                    8b:9f:08:4f:28:26:02:e5:aa:81:59:d6:1c:10:49:
                    90:90:3e:46:6c:1e:5c:2e:2a:8c:a6:b7:ae:f2:8a:
                    78:b0:13:e9:78:ea:0a:ae:0c:cf:43:45:d8:12:5d:
                    48:45:63:a2:d0:b8:6f:7f:3e:4e:2d:03:c7:e1:33:
                    f7:22:08:17:1c:88:ed:27:98:6d:47:aa:57:d9:8e:
                    3f:7d:ac:03:a4:42:56:c0:73:af:5a:98:d0:15:20:
                    9f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:68:E6:BF:9E:0B:6C:A3:07:0A:2E:84:BB:A7:4B:8E:35:9B:9E:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b64bde8-ef11-42f5-a1b7-8949e435de70/d4dd34a8-5f08-3bba-9397-5ae7cb6033f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b64bde8-ef11-42f5-a1b7-8949e435de70/6b64bde8-ef11-42f5-a1b7-8949e435de70.crl

            X509v3 Authority Key Identifier:
                keyid:83:B9:06:6E:B8:57:B8:41:8C:2A:F0:90:90:45:C6:66:B7:91:4B:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b64bde8-ef11-42f5-a1b7-8949e435de70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.83.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:37:0a:a8:85:12:0b:b9:86:a8:b1:63:2f:f1:5f:e1:c4:84:
         c6:28:53:8f:77:26:d8:a3:4b:27:c7:8e:fd:49:40:17:8b:e0:
         56:23:c7:a7:00:f5:83:e0:d7:72:77:bc:b0:db:62:99:61:d6:
         47:21:71:2d:fc:b0:a4:47:80:6e:02:c9:c8:56:d5:44:20:77:
         92:4b:38:c0:1a:c2:73:1b:ee:cf:83:fb:dd:df:23:96:05:68:
         c9:8d:9b:14:c8:1a:8c:35:14:78:4e:5f:46:ba:0b:14:d5:70:
         86:df:30:45:82:65:3b:93:45:33:40:74:21:ad:e8:58:74:0a:
         29:65:35:f6:94:f4:ff:eb:cb:7f:23:2c:37:1d:7d:f5:86:d1:
         d6:1b:65:20:10:8d:b7:8e:8e:03:2c:31:51:4c:5c:a1:f3:a7:
         e2:3c:d5:cb:73:a3:e3:7a:8c:f8:81:83:c2:d0:35:5e:9f:31:
         2e:f3:d4:8f:bf:56:b1:bc:4a:12:53:cb:45:a7:e3:8b:25:17:
         29:7a:98:e0:45:44:f5:c5:53:fb:87:2a:74:b6:93:a7:ae:6d:
         b1:31:84:9e:a9:da:8f:d3:7b:d5:28:3f:19:57:d6:f7:8d:fe:
         b4:62:a0:ae:ff:f8:78:b1:4a:28:44:20:0d:eb:14:6a:cc:7b:
         3d:1a:da:d6
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BaRFVyyIwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDZiNjRiZGU4LWVmMTEtNDJmNS1hMWI3LTg5NDllNDM1ZGU3
MDAeFw0xOTAxMjgwNTAwMDBaFw0yOTAxMjgwNTAwMDBaMC8xLTArBgNVBAMTJDM4
M2U4MWMwLTliMTAtNDZlMi1hOTA5LWY1ZDc2M2Q5NDgwZjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOhGg5ceC3JL+0NMv9FpJVfV58gGu2BDKHUfRBM1
0AxJ+PGl5QFq7heL7jQi6jndUKGOZpTfEtbZblD8FSD6yrX2YB9ZVXl/Yh26zhtb
PxlkUW7ns3clJq+A7f5fas5nSLvz/SonHKah87qgpVbFXAZGU596NZpAIfqt5LVu
PMTC1ZWEwSiam419zBDRuo9hN2wlJBIGN4vSCqyyEv3bUpOnCUWFi58ITygmAuWq
gVnWHBBJkJA+RmweXC4qjKa3rvKKeLAT6XjqCq4Mz0NF2BJdSEVjotC4b38+Ti0D
x+Ez9yIIFxyI7SeYbUeqV9mOP32sA6RCVsBzr1qY0BUgnxMCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSDaOa/ngtsowcKLoS7p0uONZueHzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmI2NGJk
ZTgtZWYxMS00MmY1LWExYjctODk0OWU0MzVkZTcwL2Q0ZGQzNGE4LTVmMDgtM2Ji
YS05Mzk3LTVhZTdjYjYwMzNmMC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzZiNjRiZGU4LWVmMTEtNDJmNS1hMWI3
LTg5NDllNDM1ZGU3MC82YjY0YmRlOC1lZjExLTQyZjUtYTFiNy04OTQ5ZTQzNWRl
NzAuY3JsMB8GA1UdIwQYMBaAFIO5Bm64V7hBjCrwkJBFxma3kUt8MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvNmI2NGJkZTgtZWYxMS00MmY1LWExYjctODk0OWU0
MzVkZTcwLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtBTiDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAlDcKqIUSC7mGqLFjL/Ff4cSExihTj3cm2KNLJ8eO/UlAF4vgViPHpwD1g+DX
cne8sNtimWHWRyFxLfywpEeAbgLJyFbVRCB3kks4wBrCcxvuz4P73d8jlgVoyY2b
FMgajDUUeE5fRroLFNVwht8wRYJlO5NFM0B0Ia3oWHQKKWU19pT0/+vLfyMsNx19
9YbR1htlIBCNt46OAywxUUxcofOn4jzVy3Oj43qM+IGDwtA1Xp8xLvPUj79WsbxK
ElPLRafjiyUXKXqY4EVE9cVT+4cqdLaTp65tsTGEnqnaj9N71Sg/GVfW943+tGKg
rv/4eLFKKEQgDesUasx7PRra1g==
-----END CERTIFICATE-----