Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/15723e97-9291-3a70-a465-dd83862e244b.roa
File:                     15723e97-9291-3a70-a465-dd83862e244b.roa (raw, json)
Hash identifier:          BPWfJZGLdUtnPpYbZZ+U+IfdQXIsDVjJZaG5GFtXbVs=
Subject key identifier:   48:AF:4A:64:F6:F7:7F:1F:68:42:3A:87:18:01:0A:EC:9F:F5:94:47
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C4915C95
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/15723e97-9291-3a70-a465-dd83862e244b.roa
Signing time:             Wed 19 Dec 2018 03:45:20 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:91:5c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=6cca7e50-9e35-4f77-abf8-8891d12ad96b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a4:8e:ba:9a:37:c4:6f:6b:0b:75:60:7f:40:
                    7b:04:38:3b:4a:4c:45:d6:fb:e5:0f:13:be:65:ad:
                    9d:5e:d3:15:b2:14:37:d0:39:26:cd:d9:43:3a:9e:
                    1d:2d:45:cd:69:19:b1:cb:11:f4:58:56:8c:85:28:
                    06:06:f7:f7:0b:29:e3:29:9c:e6:a5:06:1b:ea:02:
                    4f:4b:05:56:52:e8:63:2a:b6:a0:03:f8:fb:82:36:
                    11:19:af:42:e0:74:c0:86:a7:54:91:80:40:77:98:
                    ba:f1:b2:68:fd:1d:4a:fa:00:76:52:98:fa:f6:3b:
                    40:0a:00:63:59:47:bb:a1:38:bd:ad:92:35:21:09:
                    93:9b:e9:30:25:6e:0b:88:b1:8e:de:6e:02:1e:46:
                    2f:85:dc:4a:a4:fb:58:ab:2e:ec:6e:03:dc:8a:09:
                    7d:24:83:0f:b5:36:e2:52:ab:cf:71:42:d4:21:46:
                    61:95:cf:94:ee:45:6a:be:b7:8e:56:73:bd:81:b0:
                    5b:59:9f:88:bc:61:0e:cb:e9:8c:33:56:44:4f:d2:
                    8b:17:bd:6e:c8:33:d3:53:90:cd:10:c5:58:1e:3d:
                    f7:7d:49:70:0a:8a:e4:b6:6d:62:8b:c3:06:08:b5:
                    b3:8f:53:7e:94:90:83:bf:3e:a8:58:53:9b:57:9e:
                    56:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AF:4A:64:F6:F7:7F:1F:68:42:3A:87:18:01:0A:EC:9F:F5:94:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/15723e97-9291-3a70-a465-dd83862e244b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:aa:99:d5:a1:10:51:fa:2d:71:d9:42:ef:67:62:16:0e:dc:
         c5:a7:04:26:32:3f:c1:70:3d:85:a9:76:0d:b8:cf:dd:e8:f2:
         88:ce:c9:bb:8e:7b:c3:05:a7:10:9e:6d:c2:51:ca:41:d8:b9:
         da:2e:ec:5c:0c:fa:ed:68:9f:04:c3:fc:3f:29:10:37:d3:a9:
         30:a6:0d:13:60:1a:65:c2:66:64:96:e6:49:43:94:5a:d6:ec:
         75:36:53:5b:4f:7a:4c:02:de:cf:13:2b:01:d3:5c:a7:1f:b3:
         f0:9e:d7:95:e8:13:e3:4a:54:bb:95:69:97:51:96:a9:45:6c:
         26:ed:bb:e9:41:0e:49:b3:58:9d:8d:52:5f:56:d1:c7:f1:d2:
         2c:9f:1a:40:69:cd:af:43:06:6e:1e:7f:f3:42:ca:f9:7c:e8:
         19:74:cc:f8:be:b2:3f:6c:60:7f:fc:9f:17:c5:9e:5c:11:35:
         85:f5:e8:07:66:8d:d9:2e:53:6d:00:f6:90:fd:13:08:c2:7e:
         9d:da:06:0b:82:cc:6d:6f:3e:a7:c8:a8:63:d6:45:d0:36:f7:
         48:5e:a7:a3:6f:c7:33:25:55:5d:f8:a9:8d:84:a0:ec:7b:1e:
         44:a2:21:d1:52:92:62:1e:b0:bc:45:6c:4c:1c:36:4e:e5:15:
         11:2c:84:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----