Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0f283fb0-1acb-3f0b-97f3-9d9a0efa6e84.roa
File:                     0f283fb0-1acb-3f0b-97f3-9d9a0efa6e84.roa (raw, json)
Hash identifier:          qG8QFnTe28eFglnX8NB+AGX1XNm3fk1/9eex0tOUgtM=
Subject key identifier:   89:31:32:BD:DD:22:AE:89:08:71:20:6D:FB:46:B6:AB:CD:A1:B7:3B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C468D7CF
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0f283fb0-1acb-3f0b-97f3-9d9a0efa6e84.roa
Signing time:             Wed 19 Dec 2018 03:01:04 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:68:d7:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=55d65373-b6c5-4e54-ac9f-5d1d16725f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:23:ff:89:5a:26:90:62:e8:04:83:04:e1:ba:
                    fc:af:9f:43:c5:e2:f4:9d:96:af:c0:b2:7d:c8:d0:
                    72:a4:91:6a:c5:77:a9:0f:b6:ef:f7:43:ad:57:fd:
                    9c:95:9d:d7:d1:09:5c:82:b9:d0:b8:64:30:9c:57:
                    80:10:5f:9c:49:d9:d2:7e:18:92:fa:dc:66:42:82:
                    f5:65:ba:f1:31:f5:e4:9a:0f:d9:1f:83:84:ba:cc:
                    c9:6f:7c:21:c2:73:fa:c4:80:fe:94:c2:02:f7:06:
                    03:cb:22:ab:c8:eb:62:77:fe:dd:6f:fd:e7:f1:e3:
                    e4:00:4b:6e:97:9a:a2:0f:7c:cd:93:1c:b6:cd:ce:
                    74:0e:7e:2b:c0:40:fa:99:08:44:47:2b:c1:37:65:
                    6b:35:fe:b5:e9:1a:0f:08:93:e4:11:fd:59:c9:70:
                    3e:be:8f:22:66:f6:62:f7:1f:39:45:ff:c2:81:4d:
                    d6:a3:49:c3:f2:ad:5c:af:e3:ac:1b:a4:f1:92:27:
                    ca:a6:b9:e2:c5:5d:59:fe:76:e1:da:a4:23:26:a7:
                    ab:40:d2:00:9e:04:8e:88:25:9d:66:e8:5c:af:c6:
                    6a:8a:18:7e:d0:46:3c:98:ac:d1:08:2f:6e:14:2f:
                    99:08:9a:9f:96:db:87:40:8c:c3:92:ee:db:f2:87:
                    79:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:31:32:BD:DD:22:AE:89:08:71:20:6D:FB:46:B6:AB:CD:A1:B7:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0f283fb0-1acb-3f0b-97f3-9d9a0efa6e84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:87:3c:e9:70:e8:d3:17:5d:57:02:9e:7e:1a:9a:9b:46:f7:
         01:ee:d1:79:2c:0e:fb:13:67:81:16:a5:61:cc:a4:5a:04:d3:
         64:48:3d:77:07:5d:f3:39:04:24:26:de:f0:ea:b5:6d:0e:ae:
         0e:e4:5c:32:88:72:86:b2:fb:fe:6d:cf:59:ec:25:ec:4d:e8:
         5b:97:a8:9e:6c:88:e4:66:94:6b:c8:2f:7f:07:eb:37:d0:f4:
         3c:47:c9:ae:d7:49:0b:4d:05:6b:b9:2f:78:e3:a8:5f:4f:a7:
         bf:7b:88:50:ba:31:9d:44:d1:a6:6a:76:ae:3b:c5:65:dd:56:
         3b:55:47:e0:51:71:35:f8:21:b6:10:0b:f4:1d:67:ad:4f:c5:
         23:8a:26:b7:74:c9:c9:40:28:ea:e7:b9:a9:9f:12:4b:6c:37:
         75:30:50:ed:5f:82:ee:ac:3e:81:78:17:22:7c:49:02:13:46:
         dc:20:ce:14:9a:1d:b0:8c:8f:5e:92:7f:00:93:c7:b5:93:01:
         72:b2:af:25:41:93:cf:de:e1:5b:d1:26:22:1e:fd:6e:d3:b3:
         9e:40:e1:57:48:c3:a6:b8:b3:e0:91:56:f9:c4:8d:32:a9:29:
         f5:de:11:42:d5:dd:f6:99:c3:ea:ea:36:cb:fb:66:0f:53:c9:
         d5:7b:73:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----