Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/100c6049-69b5-376f-a47b-6d5415800009.roa
File:                     100c6049-69b5-376f-a47b-6d5415800009.roa (raw, json)
Hash identifier:          ZWe8yaMASkRc02TOAA2WgTNtikeIlluru0PPUM/x5fk=
Subject key identifier:   DD:2F:92:E0:7A:3E:50:2D:DC:E6:32:05:AC:4F:13:D6:91:FF:65:9D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C4A7CAA5
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/100c6049-69b5-376f-a47b-6d5415800009.roa
Signing time:             Wed 19 Dec 2018 04:09:50 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.231.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:a7:ca:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=bcd0f51c-c1c9-48a0-8d45-4c1b3c93cb97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d6:14:79:1f:cc:7a:f8:75:f4:f4:2d:83:77:
                    a4:ef:41:b0:61:88:ae:97:93:ca:22:ed:fd:07:a9:
                    ab:49:35:bc:a0:93:82:df:64:62:20:2e:30:7a:34:
                    74:5b:41:3d:b5:8c:3c:ed:81:8e:ab:66:00:1e:e1:
                    23:21:f4:00:84:49:a9:31:90:f7:e4:2f:2c:47:f7:
                    03:bb:0f:88:3c:3c:22:d3:89:c4:37:93:96:c2:9e:
                    2b:04:1b:b7:4d:7e:e9:ba:86:64:4d:cc:04:86:78:
                    e6:e2:eb:79:23:ea:e5:d3:fa:f6:cc:8e:84:79:ac:
                    09:34:b9:60:c6:0f:93:d8:4e:51:db:19:00:1f:72:
                    ea:20:b7:b0:9e:e6:ae:28:53:fd:aa:5a:e5:7a:1f:
                    07:f9:73:6d:a5:b6:d3:89:b1:bc:4a:61:fd:00:bd:
                    39:76:fc:9c:20:bd:97:41:6c:e3:c2:a2:47:57:8d:
                    1b:13:2b:38:23:b3:2d:49:7d:5b:08:66:51:ec:b6:
                    6b:5e:a4:47:fd:b5:24:d8:f5:6c:0f:f3:7e:71:fa:
                    82:80:a8:98:5e:60:d1:39:99:64:ed:05:cf:78:03:
                    fd:ef:1e:be:5a:bf:48:f2:dc:c7:e1:c0:76:ca:7c:
                    5b:f0:3b:dc:8e:15:93:f6:05:7b:49:8c:f2:1e:d2:
                    f6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2F:92:E0:7A:3E:50:2D:DC:E6:32:05:AC:4F:13:D6:91:FF:65:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/100c6049-69b5-376f-a47b-6d5415800009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.231.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:0d:44:16:34:29:bc:79:6f:4f:52:06:4b:aa:0a:9d:66:8b:
         2d:d3:50:2f:26:73:39:e3:67:80:1e:7f:94:1e:9e:c0:67:e3:
         3b:15:64:60:ea:5e:70:7f:7e:b8:da:98:b6:75:71:d8:a1:10:
         60:00:de:ee:3b:78:ed:26:e0:d2:1c:91:45:06:c3:9b:5c:7a:
         a2:cf:ef:0e:7c:15:90:a3:5a:3e:92:71:05:bf:a9:55:d5:69:
         38:40:58:3b:17:32:8a:19:88:1a:23:57:c2:bb:1d:34:b9:e7:
         f5:c5:ce:e1:b8:0b:15:2c:49:73:6f:1d:6d:99:5a:20:bc:cc:
         d3:8e:ac:84:a5:22:69:e7:40:42:e7:06:83:4b:67:cd:1b:ae:
         19:56:f9:70:2d:fa:43:c0:68:95:74:ef:54:72:a8:39:65:95:
         f3:cb:ed:6a:41:b4:21:ac:46:ee:93:86:80:23:3f:96:a5:a6:
         70:93:2b:71:f4:7b:69:31:ab:0b:e6:b7:ac:ae:01:4c:c7:ea:
         a9:e3:5c:90:89:37:5e:1f:b3:1b:ea:eb:21:81:30:97:90:b9:
         c5:9d:91:bd:31:28:56:60:b8:6c:45:d4:5d:22:cb:b6:ff:1c:
         11:4f:35:c4:94:1c:0a:0d:9f:10:a8:fe:4b:bd:34:dc:95:c9:
         b4:6a:96:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----