Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/13ff54ba-fe9c-3b51-aa64-ab2145ce7984.roa
File:                     13ff54ba-fe9c-3b51-aa64-ab2145ce7984.roa (raw, json)
Hash identifier:          yCQwagmusUH9PKwd6W78t1Gd9oWZKtEJXm39uA4/ois=
Subject key identifier:   ED:73:43:7F:5F:59:34:14:E4:8A:3F:31:36:0C:4E:8D:63:C3:54:37
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C468E911
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/13ff54ba-fe9c-3b51-aa64-ab2145ce7984.roa
Signing time:             Wed 19 Dec 2018 03:01:09 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:68:e9:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=4c3ba0d5-605f-4286-9702-01a6b56c1155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:79:e2:e1:71:49:06:e8:35:c1:fd:08:ad:0a:
                    27:18:84:49:fe:e3:17:46:ca:34:e6:e2:a9:89:ff:
                    c6:ff:eb:32:c4:ca:a7:8c:a4:99:dd:2e:c6:47:c2:
                    95:fa:00:6c:76:ad:95:a1:c5:69:97:0e:8c:44:b9:
                    23:19:7d:57:d8:f7:37:c7:0c:6d:2b:ee:26:68:86:
                    02:a2:5a:3f:bc:36:16:38:16:d1:81:ff:74:a8:9f:
                    61:cb:45:6f:00:85:c6:02:2c:6a:04:81:fa:05:29:
                    89:d9:da:26:b9:01:c0:2d:1f:66:23:db:6d:4a:a6:
                    5a:f8:5c:00:8c:22:35:b4:b1:b3:a6:b4:82:38:cf:
                    ca:f5:c5:2b:25:92:b6:de:c2:81:d8:cf:d7:3a:f4:
                    40:b2:3c:e9:cf:b2:9f:2c:4f:9c:7b:29:a6:29:cd:
                    c9:a9:52:97:3f:43:00:5d:c5:b6:80:de:3d:6f:e3:
                    99:76:68:59:ca:60:fe:ca:48:0e:64:8c:0b:cf:65:
                    8c:6d:c3:1f:e0:83:1b:45:d5:2f:00:16:ea:ed:69:
                    4a:a4:12:78:91:dd:1f:0c:d0:6b:7c:62:bd:b8:7c:
                    fe:ca:ad:4a:de:23:12:a5:5c:66:c8:a8:4b:6a:d2:
                    54:68:70:f9:7c:17:25:b0:f6:b2:76:cd:be:79:d2:
                    fa:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:73:43:7F:5F:59:34:14:E4:8A:3F:31:36:0C:4E:8D:63:C3:54:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/13ff54ba-fe9c-3b51-aa64-ab2145ce7984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:1f:cb:73:43:f4:27:a8:41:84:79:20:11:4b:14:fc:2d:0c:
         43:16:cf:ec:65:88:63:61:38:c3:c3:55:05:c9:26:d6:0e:1b:
         24:e6:81:72:44:b1:0d:44:63:b1:a8:e6:19:95:f2:69:63:20:
         a2:21:a3:d6:a9:57:8d:c4:b5:ee:12:78:64:43:ee:9b:64:2e:
         16:aa:1e:8e:31:66:64:14:b1:1d:f9:f3:c7:58:f3:d4:a5:a0:
         de:7f:a7:84:6a:c7:12:e5:30:71:ab:cb:20:d0:20:af:a1:0c:
         ae:d6:09:99:3c:bb:d5:42:a1:40:02:26:7d:fc:9c:89:68:5a:
         65:9c:f7:cf:9b:cd:55:e4:c3:99:a3:e9:0c:9b:a8:f0:70:74:
         dd:64:04:40:f1:ec:90:78:9f:51:bd:b0:09:9b:0d:7e:dc:ef:
         b4:f3:0b:6a:09:94:bb:2c:6f:ae:f9:84:5f:7c:bb:f2:b9:c1:
         97:8f:21:12:a0:a4:9b:53:cf:cc:1b:37:8e:ce:a2:f7:2b:39:
         73:5d:c9:4f:29:88:ca:bb:f1:a2:76:28:46:01:a6:1b:96:ce:
         be:b0:4d:3f:b0:11:0d:fc:0b:5f:1d:d5:10:27:b7:19:2e:57:
         6a:d3:1f:41:f5:55:75:e4:a8:17:09:b8:cc:58:08:63:89:bb:
         b9:89:c7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----