Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/15eaad48-8454-32d1-9efa-cc9cb3b03817.roa
File:                     15eaad48-8454-32d1-9efa-cc9cb3b03817.roa (raw, json)
Hash identifier:          TVGT2cx7x51UCaXkoWKyAMYamKduwYVih41wcpTdfsY=
Subject key identifier:   C6:F3:E4:CF:BA:3A:3B:BF:97:78:93:9A:DD:A5:CD:9D:82:1E:6B:71
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC166776962A8
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/15eaad48-8454-32d1-9efa-cc9cb3b03817.roa
Signing time:             Mon 15 Oct 2018 11:08:07 +0000
ROA not before:           Mon 15 Oct 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        129.250.113.248/29 maxlen: 29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:77:69:62:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct 15 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=ce9223fb-fbb9-47da-8879-e746bb259466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8b:6a:f1:51:ff:f5:e4:a4:7a:eb:3f:b1:e6:
                    63:10:22:0e:0a:a4:ba:45:0b:f2:36:e9:e9:e1:6f:
                    73:ad:a9:ef:73:af:89:f5:4a:d4:5f:69:f9:bb:e3:
                    cc:02:67:e4:6d:42:97:5c:27:4e:72:1e:e2:04:55:
                    2c:80:63:a1:e4:ae:31:7c:f9:3a:83:23:4d:81:44:
                    7a:dc:c6:37:76:29:de:48:bc:77:dc:18:e4:5e:81:
                    a9:91:0f:15:bd:9e:a0:4b:e2:da:5c:8a:0a:1b:bf:
                    f8:b5:8e:86:6f:bc:33:f0:41:dc:ba:27:d9:0b:a5:
                    f7:78:1f:ec:14:30:81:f4:c5:ec:27:4d:cc:52:9f:
                    94:2d:6e:9b:1b:8a:ae:fe:f8:95:94:35:72:aa:a4:
                    c8:f8:a0:01:10:07:97:27:71:23:2e:44:41:19:ca:
                    c9:20:0b:05:94:64:10:9d:fc:7e:61:d3:2a:04:7b:
                    03:ec:28:a4:56:46:2e:f3:46:b5:59:a5:26:58:da:
                    56:0a:da:15:e0:46:35:c8:d6:48:a1:c3:b7:ef:91:
                    73:89:dd:a9:36:69:28:83:e3:a6:2d:0c:05:cc:80:
                    40:66:2a:b8:06:41:5c:9f:26:80:d6:6e:99:0f:62:
                    cb:d6:9c:96:dc:92:e1:25:91:3f:d6:57:8e:78:c6:
                    bb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F3:E4:CF:BA:3A:3B:BF:97:78:93:9A:DD:A5:CD:9D:82:1E:6B:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/15eaad48-8454-32d1-9efa-cc9cb3b03817.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.113.248/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:43:38:16:f4:75:55:fa:19:38:96:f9:ed:7f:de:8d:f7:c5:
         75:82:50:0d:d5:ea:5c:4a:be:40:37:b4:3b:90:a9:75:c3:3c:
         aa:c5:f2:a3:a2:03:13:db:5b:03:f4:fb:49:26:c0:b4:e8:57:
         dc:47:0f:6e:84:bc:04:ae:fc:ad:54:fd:63:49:9a:a0:d4:14:
         f0:d5:f5:eb:b0:c3:e3:1a:fb:56:8c:82:05:ad:23:69:42:9c:
         1b:35:a9:8a:92:90:e5:d1:67:d9:ab:22:e2:27:f1:c7:18:a8:
         b8:7f:9d:49:81:a3:71:27:fb:83:2d:e1:78:a6:97:f9:66:58:
         ea:e8:8d:9f:69:09:ee:f9:fb:d9:4e:de:7c:c5:3a:42:cd:a0:
         4c:b1:c2:8e:23:e6:e2:3e:b3:79:69:26:82:13:0d:f1:6d:58:
         cb:55:1f:e2:81:78:6f:13:93:2c:48:50:3d:20:80:ba:f2:6d:
         c7:b6:91:ce:2f:d9:dc:9a:64:fa:ea:2e:a9:dd:48:c2:6a:1c:
         8c:9e:c8:db:bc:98:e5:19:3f:e3:73:35:4e:f1:bb:68:b4:ca:
         54:77:1f:90:9a:cf:3c:14:b1:6e:61:6b:57:22:c3:25:9a:2f:
         e4:d9:8b:8e:44:5e:e2:eb:63:4d:e1:82:cf:27:16:bc:a4:31:
         d1:71:2a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----