Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a7012da-5256-39fc-b304-1b0212d537b0.roa
File:                     0a7012da-5256-39fc-b304-1b0212d537b0.roa (raw, json)
Hash identifier:          BkibW2fDzo+dcR14t7i6oFoed0JPWal9+mmGR3Mt6Wg=
Subject key identifier:   15:09:2B:ED:47:C8:01:B6:94:E8:D3:4E:C7:FD:55:4E:14:37:4A:E7
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C46951EB
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a7012da-5256-39fc-b304-1b0212d537b0.roa
Signing time:             Wed 19 Dec 2018 03:01:35 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:69:51:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=833874f0-6e13-44a5-9d4d-b0b08e098c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:71:e6:c1:0e:95:e6:14:f1:5c:c2:31:e7:04:
                    93:98:e6:01:7d:32:18:a9:01:ce:25:10:4b:63:fc:
                    1d:15:0d:fb:37:3a:ab:03:63:f9:57:0d:bc:5a:98:
                    83:94:c3:aa:89:73:99:30:10:1a:c0:25:54:d8:a8:
                    2b:96:2c:e4:81:60:15:2a:33:a9:c2:61:a2:0d:43:
                    ab:41:e8:1f:9f:5f:94:8c:8b:97:91:b9:c8:72:17:
                    01:ff:e8:cb:a5:07:7f:e3:ff:f0:1d:00:c1:c1:31:
                    bd:22:7f:95:b8:4b:bd:ab:5f:6f:c5:21:1b:2d:70:
                    df:33:bc:70:4b:a3:88:7f:4f:9e:60:c6:bb:cd:6b:
                    0a:03:30:ee:1d:f8:44:c9:cf:d0:45:52:44:f3:48:
                    ab:38:06:9e:96:6c:f6:e0:06:ea:44:27:bb:5b:cc:
                    9a:3b:d4:b4:35:f5:0f:1c:e5:35:86:3f:67:28:f2:
                    07:d4:55:f0:b9:e8:1d:db:08:2f:87:27:77:a4:a3:
                    9a:dc:b4:18:31:17:34:fb:f8:76:3b:6e:58:e9:42:
                    35:d1:75:10:cb:b4:7f:be:9a:12:44:49:5e:c9:26:
                    42:a3:b1:52:d1:cf:21:3e:32:ca:1e:ae:11:d3:a9:
                    7e:a0:e6:68:e9:18:a2:d7:24:ed:e3:af:c5:71:6c:
                    f1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:09:2B:ED:47:C8:01:B6:94:E8:D3:4E:C7:FD:55:4E:14:37:4A:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a7012da-5256-39fc-b304-1b0212d537b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:b6:8e:e4:34:e6:56:e5:c1:db:c8:95:38:5c:02:04:50:3c:
         14:7f:28:9b:f5:5e:5d:85:64:c1:43:59:03:c3:2d:5d:be:e5:
         b8:f7:f9:fe:b8:6b:1a:e4:ff:01:c8:c5:1b:62:03:d3:dc:37:
         dd:1b:7d:8b:1f:3c:74:88:1e:16:af:d9:6f:ed:18:ef:89:46:
         9c:8a:93:d7:c7:3d:1d:2e:36:cb:66:43:e8:02:a2:fa:55:97:
         c9:46:8f:e4:14:7a:4b:40:b1:10:a4:bd:74:20:5e:37:4b:ac:
         e4:9d:ca:bf:8f:80:01:e4:44:62:c9:56:23:66:e3:ad:d3:57:
         b5:95:93:c8:6a:35:a0:45:d9:11:20:6a:a9:25:14:b1:d0:7d:
         10:01:fe:80:b6:11:f7:98:a6:c3:be:0e:fb:4a:07:51:12:9e:
         3e:66:3f:7d:df:44:84:82:7c:28:1b:59:78:84:7f:72:ac:3f:
         f8:99:ac:84:3c:0d:a2:0e:4c:ac:50:30:e4:28:55:c9:56:7d:
         88:a3:e8:56:2c:23:25:19:83:c3:c5:07:db:45:44:27:f1:b4:
         ce:4b:58:4c:f0:16:ad:1e:19:6b:8c:db:9f:91:6d:8e:64:e2:
         8d:c3:e7:00:53:ca:21:ed:53:86:f8:79:12:31:56:0e:c7:98:
         62:12:36:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----