Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190/99cdb6df-2d93-3c2f-8ae9-3a10f125d278.roa
File:                     99cdb6df-2d93-3c2f-8ae9-3a10f125d278.roa (raw, json)
Hash identifier:          SfzbMAiBTTRrdmKs1kqvGW29aB7Qx7MuIbfdhrFdeg0=
Subject key identifier:   CD:5C:C5:8C:66:1C:F5:71:D0:7D:35:FD:1C:7A:AD:BC:02:1A:DD:B0
Certificate issuer:       /CN=8a69f9d3-746f-47a4-971f-36ee3a52a190
Certificate serial:       010D0C9F4328576D51CC73C042CFC168E6E244A7
Authority key identifier: 16:B3:E8:A9:FC:0C:22:F4:68:BE:86:8C:B0:69:47:3E:55:3A:B0:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190/99cdb6df-2d93-3c2f-8ae9-3a10f125d278.roa
Signing time:             Wed 13 Feb 2019 12:43:34 +0000
ROA not before:           Tue 20 Nov 2018 05:00:00 +0000
ROA not after:            Mon 20 Nov 2028 05:00:00 +0000
asID:                     16509
IP address blocks:        45.223.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:68:e6:e2:44:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a69f9d3-746f-47a4-971f-36ee3a52a190
        Validity
            Not Before: Nov 20 05:00:00 2018 GMT
            Not After : Nov 20 05:00:00 2028 GMT
        Subject: CN=029a7ec1-c0c8-40cf-aa53-36afd5c8c845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:52:a5:1f:0e:40:36:97:ae:74:7c:0e:22:1b:
                    09:13:d6:f4:00:85:e3:60:c0:61:2c:04:ad:dd:51:
                    b4:b8:02:2c:32:c2:fa:01:b4:cf:35:ab:69:d0:a0:
                    e4:75:66:df:d7:ad:cf:8b:5d:c0:94:a8:86:93:68:
                    f0:4a:6a:78:51:16:53:68:da:6c:1d:c5:95:ce:9f:
                    f1:2c:02:ea:e7:a5:cf:76:33:43:0a:8c:2d:97:76:
                    ea:6b:a0:2d:14:2b:c6:b6:5e:5f:54:0d:ac:e7:3a:
                    f4:89:31:2f:d7:68:1e:31:cd:9c:25:aa:32:4d:f3:
                    9d:c6:6e:cb:15:ee:b1:84:0f:50:2b:df:67:45:3c:
                    61:90:7e:d9:06:41:d3:85:a1:4c:32:f7:d5:dc:87:
                    66:ef:42:de:3e:38:81:72:de:8c:8a:2f:61:cc:6b:
                    f1:01:30:a4:4f:c0:42:36:5b:7b:ca:b5:56:9e:1e:
                    ac:29:ac:68:06:9e:b0:d8:31:d1:ad:42:73:ce:b0:
                    28:4e:bd:4f:fa:94:c6:c1:a4:b6:18:35:62:28:32:
                    54:63:78:e9:75:d3:4a:6a:a5:f4:f8:50:1c:6d:a2:
                    ba:9b:17:27:7a:72:3f:da:85:87:19:07:ee:af:32:
                    73:37:68:f4:d8:c2:e0:5a:f6:74:cb:35:f8:60:70:
                    44:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:5C:C5:8C:66:1C:F5:71:D0:7D:35:FD:1C:7A:AD:BC:02:1A:DD:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190/99cdb6df-2d93-3c2f-8ae9-3a10f125d278.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190/8a69f9d3-746f-47a4-971f-36ee3a52a190.crl

            X509v3 Authority Key Identifier:
                keyid:16:B3:E8:A9:FC:0C:22:F4:68:BE:86:8C:B0:69:47:3E:55:3A:B0:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.223.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:17:f2:f4:41:4b:8b:99:85:24:0a:43:24:99:3f:80:8a:5b:
         cf:28:44:59:f5:0c:7a:8a:a6:85:f2:c6:d3:98:62:42:2a:b0:
         06:04:ef:8b:56:63:c8:8a:7e:96:3a:d9:96:93:f0:5c:02:53:
         e5:b9:66:de:4b:d5:9e:55:49:8a:6d:a8:cd:91:0a:f1:a1:16:
         e0:c9:18:26:49:04:55:5b:31:99:c9:4c:00:08:b0:00:b6:fc:
         17:0a:e0:aa:fb:db:7a:21:c5:7d:26:c0:d1:b5:c6:fa:36:cf:
         32:ea:4b:8a:d7:69:e6:3d:c1:ce:2c:a3:09:7f:a7:87:73:e1:
         9d:07:75:f7:a8:69:13:71:e6:0f:b5:e2:96:c0:6b:fe:b6:53:
         76:ff:83:bd:0f:1b:69:6a:fc:d0:a8:68:18:6c:cb:6d:25:aa:
         59:40:65:c7:a2:b3:cd:8f:39:99:02:30:aa:de:3a:6e:38:df:
         24:59:65:d3:a7:0e:41:1e:c9:23:4c:87:2b:f9:52:23:51:44:
         29:48:3a:c9:30:37:fa:27:14:68:6c:da:1d:72:06:6a:b2:7c:
         71:e8:e2:c0:5b:fe:ee:16:8d:a9:e3:f9:d8:62:c2:9d:f7:4e:
         17:5e:92:fc:70:0f:ed:fc:97:a8:1a:5b:6e:20:48:f8:70:4f:
         3a:d5:e3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----