Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fbe0835a-5f9b-3d90-aaed-f38f09d82072.roa
File:                     fbe0835a-5f9b-3d90-aaed-f38f09d82072.roa (raw, json)
Hash identifier:          mEu9Zn2sGXYTYmH94wkXCcL2hRflsdWfHIRGg4jxGzM=
Subject key identifier:   21:BA:99:28:15:7A:C9:73:C2:59:73:C4:A1:B5:CB:01:7C:36:39:2A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676229D7A7
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fbe0835a-5f9b-3d90-aaed-f38f09d82072.roa
Signing time:             Fri 30 Nov 2018 01:09:28 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.8.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:d7:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=39d28c82-7976-46a9-a5ea-18131ed388cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6f:3b:f6:ea:95:88:fa:54:5c:0a:94:c4:c4:
                    c5:8e:58:36:09:f4:f1:47:85:d7:d4:f7:7c:55:3f:
                    9b:37:5a:f6:2a:47:68:20:9f:6a:f9:f2:57:5d:c2:
                    b4:75:f5:fb:d0:b2:67:0c:0c:39:d0:63:cd:bd:cc:
                    4e:8e:e0:f7:bb:28:83:e9:53:c9:77:78:80:ec:b0:
                    79:a3:c0:bb:00:24:e4:66:d3:a6:a3:bd:c1:a2:df:
                    40:bc:bb:bf:d1:ba:e2:ec:d7:dc:c1:57:d6:26:e4:
                    48:48:b5:55:79:6c:3b:07:e0:bb:ae:58:db:fa:8d:
                    84:4f:ea:95:3f:4a:f1:73:28:35:3f:af:81:5b:f3:
                    93:ab:64:b1:29:60:58:b9:31:2d:7e:35:77:dd:fd:
                    3a:fc:75:3f:7d:c3:bb:d1:61:d3:15:25:e9:52:45:
                    ec:e8:1c:5a:c8:8a:6f:35:9e:e7:23:ed:a2:7f:3a:
                    d6:4e:1c:68:0e:70:02:60:bd:ff:cc:24:bf:4b:a3:
                    d0:38:9d:09:42:41:47:86:bf:9c:16:d6:98:3f:19:
                    73:33:fb:07:49:e1:39:12:c1:75:a4:2f:aa:70:5b:
                    46:49:61:a6:7f:2b:de:79:b1:51:06:12:d9:a7:13:
                    62:46:66:d7:58:e4:d4:18:09:56:d5:18:26:3c:58:
                    32:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:BA:99:28:15:7A:C9:73:C2:59:73:C4:A1:B5:CB:01:7C:36:39:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fbe0835a-5f9b-3d90-aaed-f38f09d82072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:33:ea:44:bc:18:71:e1:ae:73:cf:dd:05:bf:f4:52:07:bd:
         43:df:72:60:13:29:bf:13:21:13:69:95:f3:c5:62:f1:e7:5f:
         80:79:61:2b:29:a9:ae:83:cf:9d:62:ae:4d:2e:83:16:7d:27:
         99:33:f7:9a:0d:49:ec:b1:b9:d5:81:a0:d7:c7:2e:ca:e2:71:
         72:aa:94:02:46:d7:73:cc:0b:d6:02:39:75:4a:9d:10:a1:2c:
         23:c8:60:1b:01:0c:b7:f0:d4:7a:2c:3f:60:04:a8:06:a8:72:
         13:eb:29:a9:bc:e7:6e:19:b5:ed:8d:76:ac:05:eb:67:79:4b:
         15:30:d2:86:26:92:58:c5:65:2c:ad:54:1d:07:d0:10:7e:8b:
         3c:50:10:8d:d0:ef:65:f2:81:ed:44:a9:05:d9:70:60:0f:b9:
         d7:f5:29:ba:94:71:4d:bc:aa:e7:6d:24:bd:66:97:c9:a7:b5:
         3d:04:dc:98:44:9c:22:89:5b:c1:06:9b:2e:5b:14:d6:53:49:
         56:44:20:31:e7:db:43:0f:1b:11:18:68:b6:7e:d0:c9:bd:91:
         c0:9e:15:05:1a:7c:52:5e:ca:d3:74:c1:60:33:14:73:c6:d5:
         a8:6e:3e:c1:ab:3d:74:6c:18:f9:3c:31:78:64:a7:d1:45:93:
         ad:b3:99:83
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ2Ip16cwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh
ZTAeFw0xODExMjkwNTAwMDBaFw0yNzExMjcwNTAwMDBaMC8xLTArBgNVBAMTJDM5
ZDI4YzgyLTc5NzYtNDZhOS1hNWVhLTE4MTMxZWQzODhjZjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMlvO/bqlYj6VFwKlMTExY5YNgn08UeF19T3fFU/
mzda9ipHaCCfavnyV13CtHX1+9CyZwwMOdBjzb3MTo7g97sog+lTyXd4gOyweaPA
uwAk5GbTpqO9waLfQLy7v9G64uzX3MFX1ibkSEi1VXlsOwfgu65Y2/qNhE/qlT9K
8XMoNT+vgVvzk6tksSlgWLkxLX41d939Ovx1P33Du9Fh0xUl6VJF7OgcWsiKbzWe
5yPton861k4caA5wAmC9/8wkv0uj0DidCUJBR4a/nBbWmD8ZczP7B0nhORLBdaQv
qnBbRklhpn8r3nmxUQYS2acTYkZm11jk1BgJVtUYJjxYMl0CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQhupkoFXrJc8JZc8ShtcsBfDY5KjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5
NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlL2ZiZTA4MzVhLTVmOWItM2Q5
MC1hYWVkLWYzOGYwOWQ4MjA3Mi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2
LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm
YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm
MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKKeCDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAJDPqRLwYceGuc8/dBb/0Uge9Q99yYBMpvxMhE2mV88Vi8edfgHlhKymproPP
nWKuTS6DFn0nmTP3mg1J7LG51YGg18cuyuJxcqqUAkbXc8wL1gI5dUqdEKEsI8hg
GwEMt/DUeiw/YASoBqhyE+spqbznbhm17Y12rAXrZ3lLFTDShiaSWMVlLK1UHQfQ
EH6LPFAQjdDvZfKB7USpBdlwYA+51/UpupRxTbyq520kvWaXyae1PQTcmEScIolb
wQabLlsU1lNJVkQgMefbQw8bERhotn7Qyb2RwJ4VBRp8Ul7K03TBYDMUc8bVqG4+
was9dGwY+TwxeGSn0UWTrbOZgw==
-----END CERTIFICATE-----