Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b4b14b2-5566-31c9-b0eb-050bf1af6e7d.roa
File:                     1b4b14b2-5566-31c9-b0eb-050bf1af6e7d.roa (raw, json)
Hash identifier:          T6i28pxUSWwC/OztN5tFqN2zU2cMSyEFh5vvI4fE9zc=
Subject key identifier:   D6:C8:A7:43:F5:5C:AA:C0:6F:84:EE:5D:57:5E:A7:54:4D:27:A3:32
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665CD3F81F
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b4b14b2-5566-31c9-b0eb-050bf1af6e7d.roa
Signing time:             Wed 10 Oct 2018 07:14:47 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.76.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:d3:f8:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=052a6647-bf28-482d-84bc-05a08e655621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:06:67:7f:84:e8:3a:27:33:98:d1:f0:0d:d7:
                    0b:d8:c9:4b:55:3f:51:0c:f9:02:99:4a:67:86:38:
                    43:e2:dd:fa:cd:06:bc:29:34:11:72:51:2e:84:1b:
                    b1:83:20:7b:6a:a1:36:93:c1:9d:4e:6d:85:3d:3b:
                    ba:c6:d1:26:4c:19:01:ee:25:17:b0:26:74:40:e8:
                    31:ea:17:1f:b4:73:df:b2:66:43:6f:a9:98:13:cc:
                    d7:56:10:ca:52:9b:2a:9b:91:ed:6f:a2:08:72:6d:
                    0e:d3:e6:e7:d4:60:af:93:c0:08:16:b7:bb:c2:9d:
                    a8:4a:68:84:be:3b:1e:ae:50:92:d1:f4:5a:43:b6:
                    9b:67:ab:dd:f0:89:8a:62:ba:6f:3a:59:f4:e7:99:
                    16:f8:1c:31:8e:26:f0:3c:03:f2:55:3e:45:03:31:
                    2d:1f:53:14:2d:ea:12:28:63:ee:f3:44:f0:cb:07:
                    98:65:f5:4e:64:ba:59:f2:cf:0f:05:34:85:f3:14:
                    9f:bf:ac:70:7c:06:09:67:46:1d:2c:42:78:84:28:
                    23:cd:e4:e2:9c:76:ca:62:a5:21:db:5e:ad:84:23:
                    02:04:67:67:8c:6c:cf:46:3a:ec:c7:71:1a:63:49:
                    94:5a:e2:e4:67:70:88:fe:cf:f6:ba:ea:39:33:2a:
                    b8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C8:A7:43:F5:5C:AA:C0:6F:84:EE:5D:57:5E:A7:54:4D:27:A3:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b4b14b2-5566-31c9-b0eb-050bf1af6e7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.76.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:29:88:b7:ff:b5:6f:1f:de:c7:5d:6f:33:91:62:bc:ea:6a:
         8c:34:48:d5:11:c9:11:85:d3:9a:b4:79:d7:8d:3b:e2:b9:cd:
         0b:6a:00:b6:b2:a5:54:43:5c:31:9a:49:6d:ad:0f:66:b0:35:
         cb:0c:ef:1c:08:51:f8:21:2c:e3:44:d2:98:50:38:2f:6e:5b:
         12:1c:ca:ab:fd:08:6b:fd:06:c5:ef:2d:c3:a4:8e:dd:50:5b:
         1d:9d:b9:1c:83:13:97:9a:77:64:db:c3:42:76:86:5a:8b:d2:
         fa:8d:af:55:1a:38:86:77:d1:e9:f5:7b:bc:49:cf:f8:0c:22:
         91:22:e5:72:2c:85:0b:fa:21:80:85:dd:dc:f3:d4:79:06:fa:
         aa:5e:2a:f4:89:9d:7e:8f:66:0b:4b:05:96:67:0a:5d:63:d8:
         e5:d4:93:9a:44:d8:cc:84:2f:4e:a9:95:d8:54:c3:b9:f4:55:
         19:1e:2c:f8:82:1b:e8:3b:76:17:6f:18:4b:14:8e:91:6c:74:
         fc:2b:01:b5:1b:a9:5e:4b:b1:60:b8:de:a9:45:8c:0d:30:cd:
         ed:3c:81:1e:00:d9:14:29:59:9e:41:be:3b:f3:f7:6c:73:ae:
         af:70:fa:9d:81:f8:f3:a6:c7:6d:6f:bd:be:1b:3f:df:64:fa:
         33:9b:1c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----