Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/11663248-47e2-3b68-b5fb-49c90f9c54b3.roa
File:                     11663248-47e2-3b68-b5fb-49c90f9c54b3.roa (raw, json)
Hash identifier:          IpJySu1ou0NOPz5ydmP5G5KJ4I404vcuBBmlLc6Fz+E=
Subject key identifier:   44:5A:D4:C8:1B:C6:74:6D:9C:EC:7A:D0:A3:AD:1D:23:07:21:4A:E8
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C468C6DD
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/11663248-47e2-3b68-b5fb-49c90f9c54b3.roa
Signing time:             Wed 19 Dec 2018 03:01:00 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:68:c6:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=41da8174-4325-43d6-bbd8-305cfcf8e001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:04:5e:13:e2:85:db:bf:78:18:93:17:45:9a:
                    3d:9f:15:05:10:e9:bd:da:7d:8d:09:de:bc:19:9a:
                    25:d8:e4:8c:b4:b6:e0:63:96:a5:27:0a:61:2d:6b:
                    5e:18:7b:ad:24:a7:d1:c9:d7:82:ef:77:b0:bc:3e:
                    e5:35:7b:29:18:b8:21:fd:8b:b1:66:6d:d4:10:37:
                    e9:cb:b0:72:a4:72:e2:4b:30:bf:f0:3b:5a:90:4e:
                    68:1b:b5:6b:7e:e5:5b:b2:83:7a:12:99:61:98:14:
                    30:a7:de:8b:83:ac:d0:be:e1:b7:f0:31:b5:a1:f1:
                    e8:2f:45:da:ca:19:11:c5:c1:b0:c0:30:de:d6:f5:
                    71:d5:3a:ed:9e:55:f5:97:75:fd:b0:15:47:d6:ca:
                    92:5f:e5:e8:67:e9:9a:6b:3c:35:3b:b7:fa:e2:30:
                    46:2b:25:c7:2e:4b:70:ec:c6:5b:d0:d3:f0:fc:78:
                    41:5b:97:ee:e3:bc:0c:a8:3f:45:a0:14:fb:d2:2a:
                    d6:21:20:6c:bc:0d:19:7b:9c:8e:76:43:9f:0f:ec:
                    08:aa:46:65:19:4c:4a:bc:5a:c5:2f:1d:c5:f9:0d:
                    c6:c3:df:ae:75:99:1e:28:a1:51:6d:10:24:3b:de:
                    f8:cf:7c:e9:b0:d3:b0:00:dc:8f:73:42:c8:d0:d1:
                    7c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5A:D4:C8:1B:C6:74:6D:9C:EC:7A:D0:A3:AD:1D:23:07:21:4A:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/11663248-47e2-3b68-b5fb-49c90f9c54b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:06:5d:2e:8a:bf:4a:70:cd:8a:2a:63:6a:b9:95:da:b9:2f:
         b9:a8:1f:15:e4:9d:26:6d:4b:06:d0:78:3e:c4:b1:88:c3:2d:
         6e:cb:81:fe:b0:7a:af:17:ab:e5:56:9c:2f:00:01:ec:59:d3:
         9e:94:ad:8e:52:61:56:6b:60:ce:b4:d4:53:30:15:9f:74:31:
         44:2c:5d:4a:00:25:2d:82:af:88:02:c4:d3:36:f8:c4:b1:c8:
         00:14:63:a0:f5:ff:f1:19:79:73:44:aa:93:ce:ab:21:9c:87:
         05:1d:43:69:23:b1:7b:90:c4:57:0a:7e:7b:5c:d8:77:6f:f0:
         80:fc:36:e8:76:f6:0f:24:24:1f:8b:d9:76:8c:bc:81:0f:c6:
         7e:ac:b7:a8:b9:b4:ea:66:4f:e6:49:97:01:0a:1f:93:51:64:
         27:e2:07:9b:d0:95:a0:01:a2:79:44:c5:8e:08:b8:54:0b:ad:
         22:07:40:a9:8c:a7:2c:25:1a:6d:09:73:fe:73:d1:12:7a:45:
         4e:87:74:04:71:c9:d1:b7:9c:6e:07:50:c5:37:03:b9:65:62:
         a5:40:fe:f1:43:3b:6e:f3:58:46:ba:19:03:5d:44:5f:b6:88:
         b5:de:bf:38:4f:e5:da:32:20:af:14:3a:16:0b:be:c6:62:27:
         58:f7:13:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----