Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/11687564-3cd0-3e2a-9d7c-e22abc21d6c8.roa
File:                     11687564-3cd0-3e2a-9d7c-e22abc21d6c8.roa (raw, json)
Hash identifier:          lWZnpbDJnU+3aEImFJZnSVNAthFqZmwwi7dgnE2p2GI=
Subject key identifier:   9D:7F:26:39:D7:F3:65:00:35:EC:63:3C:9B:84:6F:90:FF:E2:6A:7F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C4698D4E
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/11687564-3cd0-3e2a-9d7c-e22abc21d6c8.roa
Signing time:             Wed 19 Dec 2018 03:01:51 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:69:8d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=5bf8bf97-453c-4c6c-be20-f1f0a6c842f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f2:00:31:69:2d:ca:85:82:9a:d0:03:b8:95:
                    ad:92:ee:73:48:6a:86:f7:8c:be:07:74:3e:c3:b9:
                    73:b8:8a:30:ce:ef:5d:b4:ce:fa:15:66:fb:a6:ef:
                    1e:93:02:86:85:05:43:24:60:54:f9:9f:ea:6c:56:
                    ea:eb:d5:cd:b3:65:9d:47:d1:6d:40:9d:2a:f5:7a:
                    b8:7e:54:37:01:8e:cd:1f:b9:99:19:13:b9:b1:f9:
                    46:11:61:98:54:ed:28:41:44:e8:65:7d:e7:ce:60:
                    98:8d:e9:fa:66:8a:45:95:08:3e:28:be:7d:db:61:
                    c6:83:a2:cd:4f:27:7e:a2:4a:19:06:21:21:5b:c8:
                    ac:b2:1a:f5:02:88:6c:51:79:b8:5c:4a:1c:07:45:
                    f8:23:ec:23:fb:fe:08:70:46:52:74:94:23:54:97:
                    e2:10:03:d8:f4:08:20:f5:4e:17:fa:fb:42:24:de:
                    f5:11:e4:b7:15:45:2c:f0:5a:7e:ea:c2:42:48:8a:
                    17:fd:51:6e:fc:3d:c6:51:04:3e:23:4e:c1:cf:37:
                    15:94:06:37:9f:97:04:76:ab:ed:bc:66:8a:d3:fb:
                    e9:a7:c0:4e:40:ef:07:02:65:62:1e:17:43:41:cb:
                    a8:78:2a:1e:6d:6b:11:3f:51:26:75:48:dc:b5:8c:
                    b6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7F:26:39:D7:F3:65:00:35:EC:63:3C:9B:84:6F:90:FF:E2:6A:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/11687564-3cd0-3e2a-9d7c-e22abc21d6c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:66:95:d7:85:41:72:b3:c7:d5:76:2c:3d:9f:79:52:80:64:
         13:45:f6:b4:4e:ae:16:41:51:7f:03:30:5e:a5:2b:78:14:15:
         b5:e0:78:80:ef:84:4b:f2:a7:18:b3:16:53:9a:67:96:b1:48:
         7f:b2:2c:b4:91:4f:e3:15:86:8c:bf:91:34:cf:34:54:83:64:
         ae:b8:c9:2b:b1:22:c3:80:ef:33:83:f6:48:a1:e9:f6:ec:7f:
         1b:74:8b:95:1f:c0:c2:66:5f:1d:93:63:9a:19:fc:f4:b0:ad:
         4e:8e:9f:6a:76:92:1d:ec:63:3c:9b:04:62:90:f1:7e:6a:bc:
         92:b1:bc:1e:06:3b:24:e0:57:18:a9:f9:e3:b5:df:10:a8:49:
         23:8c:16:d8:6d:6e:63:b8:9e:13:07:5e:a9:d4:7a:df:6d:68:
         94:1e:a0:90:c6:ad:3f:30:63:f1:e3:58:32:df:85:26:06:86:
         33:c7:0e:22:59:96:f8:89:96:79:9c:52:36:9e:4b:a6:06:d6:
         7d:69:c0:a8:b1:6e:39:22:5d:54:65:68:83:38:c4:4b:a1:d9:
         1b:34:16:80:e9:0d:a2:20:ae:0c:0a:96:da:c9:5a:be:90:be:
         bb:07:14:62:57:97:b5:bd:9e:d6:84:3f:cc:a0:52:16:dd:60:
         db:80:d9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----