Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/62695d9c-1298-37fb-9e68-629b59f0a6d4.roa
File:                     62695d9c-1298-37fb-9e68-629b59f0a6d4.roa (raw, json)
Hash identifier:          akJqpwFvbh6ZatBMlzoRM2RQwPknU5sbWXylWzRiVIs=
Subject key identifier:   01:B3:0F:22:BD:DE:75:47:14:A4:29:53:55:2D:FB:5D:92:F7:0C:13
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16588B6DC88
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/62695d9c-1298-37fb-9e68-629b59f0a6d4.roa
Signing time:             Thu 30 Aug 2018 02:43:30 +0000
ROA not before:           Wed 29 Aug 2018 04:00:00 +0000
ROA not after:            Fri 27 Aug 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        162.159.0.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:65:88:b6:dc:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 29 04:00:00 2018 GMT
            Not After : Aug 27 04:00:00 2027 GMT
        Subject: CN=040c57e3-1692-4b81-9679-187b335103f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fe:d5:03:6a:22:91:bb:99:eb:e0:41:c3:b4:
                    33:c7:d4:4b:eb:61:58:b5:2a:95:26:a2:2d:51:39:
                    5f:3f:f0:fb:ec:89:d7:cb:f2:f3:94:b1:b3:56:c0:
                    5a:af:cf:10:9f:1b:2d:91:1b:a4:12:3a:da:35:2c:
                    e7:49:10:b4:20:1f:97:ec:bd:c5:26:37:ea:dc:bc:
                    56:e8:27:b0:13:af:70:a8:8c:97:f2:73:d0:4d:65:
                    09:59:19:80:16:cc:f5:6b:02:ac:cb:67:b1:eb:b5:
                    0f:57:9f:3f:75:56:50:d8:8c:2a:6c:58:95:d4:99:
                    d8:e6:3a:10:c5:5b:46:83:97:e6:c4:45:f8:32:a5:
                    11:a9:bb:4c:b5:9f:93:c7:3d:d7:01:54:a6:8b:c6:
                    26:57:d4:52:4d:e6:64:6a:d7:23:b1:08:75:50:d4:
                    58:27:64:3e:6a:04:91:d7:14:91:6b:61:26:7b:39:
                    05:83:e7:53:13:46:f9:6d:37:28:85:55:7a:59:5d:
                    d6:92:9d:ab:41:af:67:ab:26:ad:43:71:75:0c:ca:
                    ef:6f:d3:eb:c8:70:19:b2:31:ee:d1:a8:fc:0f:42:
                    46:bc:d7:2a:07:72:1c:2a:e0:e0:ec:3e:b4:51:5c:
                    af:da:8a:d6:24:54:ed:c5:22:e7:67:80:4c:68:e9:
                    77:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B3:0F:22:BD:DE:75:47:14:A4:29:53:55:2D:FB:5D:92:F7:0C:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/62695d9c-1298-37fb-9e68-629b59f0a6d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:25:72:87:b7:15:ab:52:3c:f7:99:18:6c:86:aa:6c:66:7d:
         c8:33:7f:64:1f:27:2c:eb:0c:b0:8a:1b:7d:82:fe:42:3e:25:
         37:f1:f1:3f:4e:a2:74:79:1a:85:2c:b1:ea:f4:23:d5:49:2f:
         e1:c3:ed:27:bf:c4:13:02:d8:4c:61:c4:ba:3d:ad:f1:2a:41:
         20:9f:2a:e3:dd:07:de:91:00:0e:90:cd:87:c2:73:fb:82:43:
         47:b9:0f:5f:29:e8:dc:7c:07:9f:30:64:b3:22:01:89:00:85:
         25:65:bb:74:d7:43:f0:59:b0:e6:17:fe:ec:e9:66:03:4c:5f:
         3d:86:3c:32:ec:3d:5a:da:08:25:27:d5:5d:18:29:04:cb:fa:
         be:72:ba:0f:9c:75:53:0f:b6:b0:f8:5f:3e:41:0f:f7:31:48:
         54:a5:f6:b1:f5:00:79:85:2c:21:eb:8e:76:9d:00:04:1c:a8:
         00:25:39:ed:7c:15:d1:21:75:e3:d8:42:ff:45:73:b3:9a:9e:
         e2:d6:64:08:6f:79:be:fe:df:28:86:3f:ac:ee:d8:90:b5:80:
         b4:54:c4:21:cc:3d:61:69:fa:91:8a:67:78:af:63:77:e0:20:
         4b:2c:38:fc:b3:e2:a8:9d:f4:ea:b2:4d:61:21:6c:07:e0:c3:
         18:1d:a0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----