Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1035ab61-af38-33ba-98fe-aa586ccd5902.roa
File:                     1035ab61-af38-33ba-98fe-aa586ccd5902.roa (raw, json)
Hash identifier:          LeEigOtQOmykbctebpj4wsHbOo1gsnSBNWUMlXcz9cQ=
Subject key identifier:   52:F3:23:3D:5D:87:F7:40:56:0F:F6:79:2E:A0:F3:51:0F:29:C8:87
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665C070F77
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1035ab61-af38-33ba-98fe-aa586ccd5902.roa
Signing time:             Wed 10 Oct 2018 03:30:58 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.12.0.0/15 maxlen: 15

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:07:0f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=f6d4995a-ca6d-4263-ae9c-c2058cef86cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:87:85:53:d1:02:92:65:56:9d:62:53:8b:33:
                    83:f5:5e:3f:ec:36:d9:2a:8c:0c:84:5b:96:72:71:
                    38:78:c0:1a:74:60:46:b0:19:f4:c0:4d:4c:39:22:
                    ce:d3:c3:bb:cd:70:ea:9b:5d:51:c4:63:80:9a:4b:
                    25:bc:93:a8:0b:ab:17:db:b5:72:ed:d0:7a:7d:be:
                    4f:7c:18:78:ea:37:d2:2a:30:0b:6a:e1:2d:5f:52:
                    f2:62:f9:52:f5:6b:c8:b3:b5:37:c0:80:93:64:27:
                    9a:68:9a:f9:da:27:4b:f1:29:0b:43:1e:f2:40:db:
                    bc:c2:96:e2:44:59:7b:34:71:7c:d3:6f:5b:3d:31:
                    c6:1c:45:25:69:c5:a7:86:bf:af:11:56:29:57:8e:
                    af:00:a1:e8:d3:c4:fc:85:fa:15:9a:f5:52:5b:9f:
                    52:64:8e:d9:b8:38:b0:fc:a2:f6:4a:64:4b:eb:f9:
                    7c:26:e1:6a:ca:25:ed:b4:3f:43:cc:f6:f8:fd:a7:
                    6f:19:b9:e7:3e:29:2f:4b:09:98:ef:c8:27:26:3b:
                    90:6e:12:b2:4b:ff:76:97:d1:83:35:a6:f8:0e:9a:
                    f0:30:3f:ad:b3:f6:15:af:9f:a0:bf:a5:b0:0c:57:
                    85:b0:6e:41:ac:24:76:c2:8c:ba:85:87:63:70:40:
                    44:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F3:23:3D:5D:87:F7:40:56:0F:F6:79:2E:A0:F3:51:0F:29:C8:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1035ab61-af38-33ba-98fe-aa586ccd5902.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.12.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:b7:b9:2c:fa:c8:25:d5:3f:41:1d:d8:ab:2c:6d:9c:e0:26:
         61:59:48:13:e2:cb:0c:30:1c:78:2a:37:a2:60:45:be:05:d4:
         5c:c9:8a:c9:7e:bb:39:86:05:b9:5b:fb:14:41:a0:f0:7a:c1:
         fe:15:b8:f0:6e:9e:23:b5:13:be:7b:5a:5c:43:a8:44:96:36:
         86:64:b9:d0:7b:c9:2a:93:e3:e6:62:05:70:6b:a6:79:fa:78:
         89:b3:68:99:30:fe:9e:c9:9f:0d:fb:76:7a:0e:e9:66:b9:28:
         3c:20:b9:48:50:a1:db:d8:38:7e:04:90:13:ff:31:36:e3:56:
         e6:09:f8:4e:d2:e8:a6:3a:b0:d3:57:f4:1c:57:3d:31:cc:de:
         71:56:a7:f0:6d:4f:04:80:50:fe:a1:fe:bb:7c:f8:27:ea:ea:
         9b:49:3a:f0:ed:9b:36:3d:a8:52:e9:71:2c:9d:e0:1f:28:d1:
         71:f9:43:14:c2:e0:ed:65:48:73:19:2c:d4:52:6a:9b:50:d0:
         1c:bf:d2:b7:dd:a5:68:99:b8:ed:ba:2e:d3:b5:02:c3:19:49:
         94:71:8e:4c:ff:bb:e4:ec:18:88:bf:66:5b:6a:b7:0d:5f:e6:
         f8:3b:2a:54:b2:fc:59:ea:ca:ca:18:91:9c:78:7a:f7:ff:37:
         17:6a:28:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----