Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/36c096b9-370a-3037-ad1e-627a9cc89507.roa
File:                     36c096b9-370a-3037-ad1e-627a9cc89507.roa (raw, json)
Hash identifier:          K25anV5dXI/V2iDxna0L6UbUnujtZEcGpu228op5/Y8=
Subject key identifier:   33:E1:CA:DE:54:56:65:5A:6D:9E:8F:40:91:51:AE:E6:F5:27:FB:79
Certificate issuer:       /CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665C06F50A
Authority key identifier: 6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/36c096b9-370a-3037-ad1e-627a9cc89507.roa
Signing time:             Wed 10 Oct 2018 03:30:51 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        50.112.160.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:06:f5:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=75d36ad1-52e3-44c7-8fcc-07c9aa5d88e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0b:a9:00:cb:fc:bb:b0:dc:c9:41:33:f8:91:
                    88:08:89:53:9f:af:b3:61:e2:42:41:86:2b:3a:78:
                    85:c3:0e:81:da:6c:f8:64:0f:ad:5f:a4:0f:db:c3:
                    59:81:39:87:fc:68:85:a2:07:4f:36:05:7d:fa:53:
                    44:14:3d:07:83:04:d7:0a:fe:55:4c:ea:60:55:66:
                    aa:d1:7c:c4:89:f3:df:00:b6:b6:53:ba:cd:e2:9d:
                    6d:4b:9b:b3:cf:4c:db:7d:cb:38:3b:e6:a8:19:f2:
                    37:b9:83:e1:a7:eb:f5:7b:ca:ab:4a:20:a7:21:42:
                    42:d9:5a:8f:17:c9:53:34:da:c9:de:84:fd:3e:15:
                    aa:8d:6b:1d:45:8f:be:28:5c:c7:c3:20:fc:98:2d:
                    39:7b:e4:2a:01:60:23:38:f1:52:ba:b9:b5:be:d6:
                    fc:ee:aa:ba:f5:1a:7a:12:7a:ee:b7:fd:59:50:51:
                    75:da:45:e9:07:45:6a:ca:4b:94:01:eb:2b:fc:fe:
                    92:ca:ac:a1:3d:46:3e:bf:be:71:48:af:5e:a6:af:
                    24:92:c3:da:7d:09:9f:9b:97:32:78:81:a8:d7:b5:
                    26:02:7f:5d:0f:22:61:c7:cb:92:fb:8a:d8:b4:04:
                    10:82:49:c2:0b:29:70:d7:7e:f4:69:8d:b2:9e:24:
                    55:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E1:CA:DE:54:56:65:5A:6D:9E:8F:40:91:51:AE:E6:F5:27:FB:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/36c096b9-370a-3037-ad1e-627a9cc89507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.crl

            X509v3 Authority Key Identifier:
                keyid:6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:90:e8:1e:5d:f6:6d:54:ba:52:5d:e3:81:84:b2:dd:5f:07:
         cc:33:89:b7:24:18:d9:61:00:db:35:a1:c0:4e:d9:4d:0f:85:
         a5:68:a2:55:3c:e7:ae:08:de:71:f5:8b:6b:47:8c:b4:54:ee:
         5e:dc:0a:40:f2:43:83:57:94:07:90:63:cb:5a:f6:c5:79:81:
         37:83:4a:ab:29:24:e1:02:a9:b8:97:4f:fc:31:df:96:4b:d7:
         71:7f:a3:28:2f:1d:80:a2:ec:28:50:27:a2:19:e2:6a:2f:da:
         dc:d5:5f:5e:e1:85:68:f6:26:78:79:b0:b1:ce:60:1c:46:62:
         42:a6:f7:16:59:6e:7d:f6:71:78:6d:46:12:dc:7c:58:eb:66:
         79:90:92:c9:de:e3:6c:1e:33:ed:c1:22:db:f3:e4:92:2a:66:
         e5:35:03:25:f2:26:51:dc:a1:61:c9:ac:74:ee:fe:a0:6b:4b:
         95:1b:f4:0f:37:4d:2f:27:e7:06:46:e7:d8:92:c8:bf:3f:be:
         04:9b:f3:f7:75:f1:b8:cb:e7:14:10:7b:e8:82:01:9f:bb:51:
         e8:2c:07:96:e2:4d:b3:53:14:78:bc:a3:97:8f:12:75:0b:e7:
         f6:e9:39:0d:71:41:7a:fc:cc:6e:8d:e6:23:74:ef:84:4b:31:
         64:26:8b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----