Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/cdbfc4e4-10f9-31d9-9d2a-bfce4ecfdf02.roa
File:                     cdbfc4e4-10f9-31d9-9d2a-bfce4ecfdf02.roa (raw, json)
Hash identifier:          SmrQ2svDqN0B+m3fKTKDdOr/Zi+2wN5itIzxiAqSSZU=
Subject key identifier:   36:27:C7:6F:EA:B8:B4:46:7D:E5:72:DE:CA:3A:82:F5:82:42:A7:B7
Certificate issuer:       /CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665A4BADB4
Authority key identifier: 6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/cdbfc4e4-10f9-31d9-9d2a-bfce4ecfdf02.roa
Signing time:             Tue 09 Oct 2018 19:26:41 +0000
ROA not before:           Tue 09 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        50.112.128.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5a:4b:ad:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
        Validity
            Not Before: Oct  9 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=cf141c8a-04fe-45dc-872f-66f779061b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:dc:56:10:34:70:70:70:af:ce:7c:46:51:
                    bd:79:76:88:de:8d:9f:99:4d:36:4b:e8:89:93:6f:
                    57:e0:3b:1d:ef:b4:5d:5c:55:2b:0e:a6:f0:50:c7:
                    01:e8:c2:f4:1b:d2:0e:3f:90:21:c7:a0:f0:20:48:
                    89:30:5f:6b:b2:47:64:45:c4:8e:d9:86:c9:4a:19:
                    9e:54:73:ef:dd:d2:09:7e:1b:95:49:91:0c:60:15:
                    01:0a:70:01:f7:58:83:d9:8a:40:56:2d:96:1b:69:
                    a9:56:ac:3a:cd:48:86:e6:00:8e:b4:86:c7:55:1d:
                    83:91:65:12:5f:6e:3a:dc:42:a9:85:b6:db:4c:4d:
                    64:b2:dc:04:87:c7:d6:2d:c4:10:c1:cb:fc:bb:6e:
                    4c:8f:92:5c:55:a3:de:92:91:c5:5e:26:eb:15:96:
                    9c:ec:dd:7b:fa:b3:03:91:8f:49:74:f1:b8:a5:de:
                    f6:a4:2e:0a:ad:2b:8b:74:37:d5:de:fa:ca:e1:65:
                    8f:73:e0:a2:3e:4f:79:28:92:8e:d2:a2:5d:fa:42:
                    f5:ee:36:ae:02:9a:23:65:c9:8c:b1:34:c9:95:49:
                    8b:ca:98:91:33:65:3f:19:79:62:aa:9f:65:94:c8:
                    1b:c8:13:35:a9:5d:36:93:5c:47:b6:dd:03:3a:d8:
                    71:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:27:C7:6F:EA:B8:B4:46:7D:E5:72:DE:CA:3A:82:F5:82:42:A7:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/cdbfc4e4-10f9-31d9-9d2a-bfce4ecfdf02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.crl

            X509v3 Authority Key Identifier:
                keyid:6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:a1:ba:05:55:fd:2b:54:84:4e:84:b1:ee:f4:a9:36:c1:dc:
         6d:cd:e3:6c:1f:5b:eb:ce:4b:8d:7a:02:9e:05:92:3a:80:e9:
         25:41:be:c4:94:61:7e:96:d0:dc:10:80:3b:47:6a:33:77:1b:
         02:ef:b4:9c:89:f1:be:56:1e:f5:7c:16:4e:ec:b1:3a:65:81:
         31:f0:45:b9:9f:f5:c4:70:1b:cb:27:f5:5e:46:e3:cf:3d:9a:
         77:59:b0:a4:ef:c1:b5:cf:24:79:b3:a1:b1:27:d4:b0:82:98:
         ac:a6:e9:31:9e:9b:30:00:d3:5e:78:ea:0a:0c:9e:ac:9f:9b:
         d4:e1:55:99:be:14:af:ec:d9:e7:dd:ec:4e:1c:4d:39:44:64:
         60:ec:bf:75:81:67:35:d6:d7:a9:fb:0c:84:4f:75:a2:7b:2e:
         bc:c2:6a:56:c3:8d:fe:eb:fd:46:c8:b5:82:88:05:83:5b:b6:
         91:2d:4b:43:db:6b:da:8a:c1:00:1a:98:a2:95:92:cb:33:2b:
         e2:04:2d:e9:29:55:6d:7c:4f:77:9c:f0:c2:42:ef:8f:47:46:
         8f:c4:d1:cc:4d:6c:bb:6c:82:1f:0a:9b:b7:80:79:93:6b:66:
         d2:f3:4a:cc:5e:0f:84:81:e6:d2:f2:5b:61:0d:89:78:78:94:
         90:ff:7e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----