Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0823f9c3-01a8-3a5b-8437-31a8666b789b.roa
File:                     0823f9c3-01a8-3a5b-8437-31a8666b789b.roa (raw, json)
Hash identifier:          TLax216ogTvH0ryMbGN59mm+pUeqPRRR/nLz+uVNJes=
Subject key identifier:   13:1B:54:DC:3B:21:C7:A3:DF:1C:7D:11:BF:2C:4C:0A:9C:8D:F6:81
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B34F0A
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0823f9c3-01a8-3a5b-8437-31a8666b789b.roa
Signing time:             Sun 21 Oct 2018 08:17:28 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.119.216.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b3:4f:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=ba2f1f11-91f7-4bcd-977e-7523c3aa6e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8d:50:d4:c8:17:2e:6f:07:c0:b7:1a:b4:56:
                    e7:c2:af:1e:49:db:47:5f:d6:7a:7e:1b:02:3e:9a:
                    cb:e3:b0:a5:26:ee:07:cf:14:fe:a4:33:0c:90:2e:
                    8c:31:5c:03:dd:f7:75:09:1f:52:7f:94:5e:f7:75:
                    ec:39:49:23:b5:14:61:f4:7a:20:5a:0a:99:ad:f6:
                    03:dc:98:1f:2a:62:dd:ac:88:16:ae:5e:50:03:40:
                    d0:d6:8f:48:97:c8:bc:d0:a0:cc:81:1f:95:97:1d:
                    ab:bd:bd:00:bc:e7:f6:02:ac:cb:80:b1:d6:f1:e0:
                    f3:4c:88:ed:5c:b2:34:a3:98:c1:b6:a2:d2:2d:1e:
                    36:48:ae:a2:b1:65:fa:7e:74:56:02:fb:9d:b3:e3:
                    0e:25:c3:df:27:e7:d1:49:f8:95:8b:9e:d6:80:f3:
                    20:8e:af:8e:dd:a1:60:cd:8f:96:4f:b3:ac:67:c4:
                    ca:81:6a:41:03:4f:47:4f:93:72:f9:ed:91:c2:01:
                    ef:47:4e:21:ce:e3:c0:24:3e:e6:8d:9b:56:6c:ed:
                    5a:a6:7f:1f:82:d5:4e:12:c9:75:c9:49:1d:0a:e6:
                    77:f8:3d:f8:cd:34:4d:ff:60:7c:ac:2a:ea:0a:b4:
                    f4:fc:c1:21:3c:58:26:98:eb:d7:91:95:a0:a4:e7:
                    35:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1B:54:DC:3B:21:C7:A3:DF:1C:7D:11:BF:2C:4C:0A:9C:8D:F6:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0823f9c3-01a8-3a5b-8437-31a8666b789b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.119.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:4c:e9:d5:14:c3:51:33:a5:8e:d6:27:ee:3d:2a:16:a3:63:
         f8:2a:30:b3:18:4d:22:01:a8:0b:e7:4f:44:d7:4f:66:e6:ac:
         d2:24:36:34:54:b4:85:b4:48:d5:84:83:29:22:1a:83:b7:4a:
         a5:78:e1:08:ec:a9:69:eb:3e:2e:f3:da:33:e3:01:f2:02:0d:
         84:83:6d:0b:11:3e:2e:21:e8:57:99:4c:83:4c:ca:89:e0:1e:
         b1:ab:6a:6e:36:83:94:48:2f:c1:fc:94:53:15:01:6c:46:df:
         43:7e:a4:40:b9:8c:77:12:44:e1:d9:06:f0:b3:64:d5:24:4c:
         c2:22:6c:89:2d:50:b3:fa:9c:68:ec:61:2f:74:88:d1:d5:c6:
         ec:e9:5b:e0:49:62:9b:f0:98:06:61:78:36:0b:82:76:ca:e4:
         9f:da:0d:6c:98:ef:41:3e:ac:d2:35:e3:ca:1d:5a:2a:76:bb:
         10:14:0f:6a:25:f6:be:f3:14:89:00:54:71:70:7b:c0:1c:2a:
         73:88:b4:26:d4:ec:4a:ca:c9:92:da:8b:87:80:6c:79:8c:5a:
         e7:78:57:c2:47:fd:b3:1f:9a:4a:f1:99:01:1d:62:8b:ca:44:
         b9:cf:3a:ac:f9:c0:da:1e:91:3d:a2:f4:ba:2a:96:29:38:f8:
         57:d2:e3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----