Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe6fbc97-004d-3715-9858-26e5918af12b.roa
File:                     fe6fbc97-004d-3715-9858-26e5918af12b.roa (raw, json)
Hash identifier:          BbQl5E0YGAWj4zCFxNktthJ56E8vvM5JFshm/je5uSs=
Subject key identifier:   1C:E2:D2:7F:1F:2F:20:61:A4:F2:9A:9D:83:9B:D2:38:D2:E8:AE:04
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16762285E01
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe6fbc97-004d-3715-9858-26e5918af12b.roa
Signing time:             Fri 30 Nov 2018 01:07:51 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        104.20.176.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:5e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=bb2ecd5d-68ef-4f82-94e9-d7e572e904ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:71:19:de:c7:24:37:75:b4:38:52:d9:1a:67:
                    e4:82:52:d6:02:38:f6:77:65:75:1c:06:20:6a:b0:
                    d9:aa:21:b8:14:6f:7a:1a:0d:44:cf:32:be:4e:61:
                    eb:e8:6c:81:c2:f4:02:fd:44:e2:bf:85:06:af:81:
                    a4:02:99:84:f4:ee:d3:e0:f4:cc:46:d2:d3:b6:31:
                    84:2c:02:c4:08:cd:68:25:04:c8:af:25:15:f1:72:
                    e4:27:07:54:b7:bd:83:16:14:4b:68:fe:0a:ec:b6:
                    35:41:a7:00:7b:46:4a:74:9b:d3:c7:60:06:05:d5:
                    b0:d7:fc:68:56:10:8b:17:41:30:81:c5:a7:2f:6a:
                    0c:39:0e:ce:23:42:ae:0a:ba:13:3f:f9:3c:2f:af:
                    91:62:84:eb:d8:e4:9c:1a:47:ed:ae:da:1c:b6:c8:
                    9c:b6:d3:99:a7:01:74:fc:12:54:14:16:5b:ce:62:
                    84:ef:eb:25:cf:8b:61:2a:27:f4:ad:3c:22:47:01:
                    37:ef:86:d1:e7:0a:ae:fa:8a:fa:50:05:1b:52:68:
                    12:24:93:39:99:31:4c:1b:5b:9a:32:25:f4:f5:e2:
                    1b:1c:dd:ed:f6:ac:1c:b9:a9:38:14:02:29:8a:af:
                    2d:b6:d8:63:e0:cd:56:12:92:e4:4c:8a:f6:8d:67:
                    d3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E2:D2:7F:1F:2F:20:61:A4:F2:9A:9D:83:9B:D2:38:D2:E8:AE:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe6fbc97-004d-3715-9858-26e5918af12b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.20.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:ef:5d:37:d8:e5:d9:98:bd:44:ed:7e:c9:27:63:17:9b:40:
         de:29:68:9a:dd:e2:13:25:b8:a9:12:e4:c0:db:bd:37:27:65:
         d8:fa:6f:86:57:e2:13:a8:ea:2d:1c:ae:7a:32:7c:ec:91:9a:
         e4:ed:4f:63:3d:17:da:7e:c0:85:40:57:6f:77:1c:04:82:41:
         fd:e6:ab:95:a2:10:fa:de:5f:59:67:49:8c:3b:5f:8b:89:4d:
         59:c7:05:42:0f:a7:d1:61:35:8a:c3:c0:95:da:3e:c1:98:44:
         bb:5d:2a:68:97:7d:3a:32:34:18:af:58:22:63:ae:f1:de:b3:
         6c:55:1e:94:08:af:72:a8:c5:46:24:bb:a2:c8:d9:d5:d0:25:
         3f:93:4a:aa:c7:34:20:31:dc:7e:bb:bb:e4:5d:b2:3b:7f:5b:
         a5:6b:f8:a5:41:dd:0b:40:ea:69:a9:68:f6:ce:80:2a:92:6e:
         ca:28:5f:48:e0:d9:df:ba:d1:74:90:53:df:d1:8b:3e:72:c9:
         7c:26:07:5a:12:7a:27:8f:51:e9:fe:53:d3:cc:3b:dc:0f:96:
         f6:a3:10:e9:85:ad:66:4a:fd:f2:93:58:9b:f5:a5:17:ff:d7:
         9d:3b:ef:a5:48:66:56:68:0a:77:67:83:22:8c:7d:8a:b9:5c:
         91:13:f8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----