Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/220a0b8f-ca44-352e-aa6e-1d089897dc8e.roa
File:                     220a0b8f-ca44-352e-aa6e-1d089897dc8e.roa (raw, json)
Hash identifier:          gerLkTj9z2YdxtxVjUAOoEek2KcT1o2WQFxuV/dohGU=
Subject key identifier:   77:D3:37:10:F5:3C:33:04:D6:19:F5:83:0B:62:76:2B:0F:E6:F9:F8
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665C2F26E5
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/220a0b8f-ca44-352e-aa6e-1d089897dc8e.roa
Signing time:             Wed 10 Oct 2018 04:14:46 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.216.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:2f:26:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=c1dfbbbf-593b-4089-9f08-ab739039fc3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:51:d5:fe:cf:d6:77:d4:be:2c:14:c0:32:4f:
                    a4:2a:42:c8:f3:88:fe:a2:7b:37:38:9e:d5:be:8e:
                    fe:45:a3:b1:d0:26:3a:62:70:e4:2d:62:45:e7:29:
                    92:70:4d:89:af:12:28:d5:76:b2:96:76:f9:8b:65:
                    dc:b3:8f:fc:56:37:40:23:f8:13:e7:1d:1a:a8:6e:
                    67:3b:b9:77:08:ba:4b:0a:0b:5d:3c:61:38:ad:09:
                    50:a7:53:3a:55:7b:c8:15:7f:2c:03:61:91:a5:18:
                    82:50:92:51:da:18:cb:81:f9:62:49:e9:ce:d1:93:
                    d7:8d:de:97:cb:9c:6b:6e:37:48:e7:14:3b:13:32:
                    b5:5a:63:dd:9c:09:ef:ca:96:03:5b:93:a8:7b:84:
                    3a:d4:9f:4f:f6:c7:9e:47:05:84:0a:28:42:b1:73:
                    29:06:65:fa:88:58:af:b4:58:90:02:b9:9b:31:f3:
                    b4:d7:37:01:e1:19:50:79:d4:e1:25:57:b2:71:81:
                    59:f1:c3:26:f0:cb:46:03:89:29:77:33:26:70:ce:
                    f9:cf:4d:62:3a:fd:59:a0:a0:ad:65:26:fa:5a:37:
                    ec:74:f9:f3:fd:ba:07:1e:5f:b1:29:e4:ef:9b:08:
                    46:bb:ac:da:46:f5:01:d6:70:bd:d6:f4:75:12:d8:
                    fd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D3:37:10:F5:3C:33:04:D6:19:F5:83:0B:62:76:2B:0F:E6:F9:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/220a0b8f-ca44-352e-aa6e-1d089897dc8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:28:e2:80:bf:5c:9a:3e:96:e2:c8:05:ea:f4:66:52:63:38:
         68:70:b4:04:b9:ee:84:07:48:a0:f8:fe:19:c4:fe:32:b9:37:
         b9:ea:76:89:36:b6:19:35:90:c6:69:66:93:42:1e:1e:4b:ad:
         d1:91:17:a9:b4:78:2c:5c:64:bf:7a:d9:64:67:91:92:e3:2c:
         23:57:18:b4:7a:86:7d:31:43:33:3a:69:9d:eb:0b:ad:68:30:
         a8:d1:ea:6b:75:f3:59:0c:94:c3:3d:f3:38:a3:7e:b8:13:01:
         6e:b6:ae:d3:98:63:bd:98:c7:11:d2:4d:71:9f:87:77:bd:e3:
         11:f7:22:20:d3:2d:ee:95:86:04:30:7b:dc:f6:85:a4:80:b8:
         df:81:58:fa:99:21:69:2f:da:af:90:61:9e:6e:a1:21:53:24:
         c0:3b:2e:9e:d2:54:6c:90:34:c3:0b:c4:3f:1f:c2:83:0f:db:
         74:c2:4d:d5:80:3c:3a:9a:f2:36:ac:d4:9d:90:82:10:37:f5:
         d7:e5:84:fe:39:f3:89:3d:aa:86:8b:f1:0b:40:69:1d:f7:18:
         34:ba:e4:f1:a4:5f:60:51:ba:fe:72:68:10:3e:2c:48:41:53:
         64:95:9f:c4:f8:5c:66:aa:0d:3f:fd:e3:61:e4:89:c3:52:29:
         d7:26:58:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----