Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/262b4ab2-9050-3b49-aed5-dc259a3fe2db.roa
File:                     262b4ab2-9050-3b49-aed5-dc259a3fe2db.roa (raw, json)
Hash identifier:          PxY6yN7fhpw+YX5Jkby8hHizPtT0GdAp1LYVSOoeOhA=
Subject key identifier:   FB:50:60:B7:59:22:BF:29:7D:9A:82:6F:B1:C8:72:B0:2A:0D:B3:2A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665CD423DA
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/262b4ab2-9050-3b49-aed5-dc259a3fe2db.roa
Signing time:             Wed 10 Oct 2018 07:14:58 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.77.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:d4:23:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=325bb493-4bca-4a39-b0ab-b9352776202f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:88:49:68:03:60:2f:78:02:d8:2b:4f:79:1d:
                    61:62:1a:c3:2c:e4:52:c0:a9:c2:3b:89:6c:10:40:
                    61:ea:fc:95:2d:cb:5c:14:db:fd:95:68:75:b3:b0:
                    c5:ce:b5:4d:41:02:7e:9e:cc:e7:70:e8:49:d8:58:
                    9e:4f:20:55:7b:54:e2:ca:d8:a3:72:f3:9a:cd:c9:
                    83:71:3c:06:74:dd:4e:b0:bf:96:a5:07:db:fb:37:
                    bd:e4:07:a4:73:4d:ff:2c:97:18:ac:dd:ff:82:03:
                    1d:95:a9:05:a9:8a:af:89:67:f7:7f:e6:4f:54:cc:
                    20:5c:c9:7e:49:eb:7c:42:a3:7e:32:8c:85:6d:65:
                    9b:54:b2:1d:4a:b2:c6:cc:74:bc:a8:30:e5:ae:cb:
                    6d:48:19:56:b8:ca:b6:f8:3b:f0:b1:55:cb:a8:8d:
                    14:05:f5:b6:08:f3:36:77:7f:a1:a8:be:26:d7:87:
                    26:18:3e:1f:ce:d5:1b:18:43:28:ea:87:03:91:f4:
                    93:50:96:92:e2:cd:a1:48:e3:77:44:4f:b5:66:b9:
                    d2:8a:bb:ac:6f:2d:52:f8:b9:16:7b:10:3e:e1:c1:
                    13:c3:45:53:23:87:e6:4a:8e:68:f9:18:67:e1:18:
                    16:28:8f:3c:c9:3f:0a:cf:93:04:1f:bb:f0:9c:40:
                    bb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:50:60:B7:59:22:BF:29:7D:9A:82:6F:B1:C8:72:B0:2A:0D:B3:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/262b4ab2-9050-3b49-aed5-dc259a3fe2db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.77.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:f5:59:09:70:63:e9:ce:30:6d:eb:98:1e:30:cf:ca:60:2a:
         a3:a1:46:74:a0:bd:34:67:e4:c9:a1:9f:6d:2d:dc:28:5e:11:
         8f:58:02:39:2d:f4:29:8d:0b:92:84:2d:fd:16:72:32:a2:80:
         eb:0b:83:61:47:d9:50:b1:c6:b1:f7:00:5f:f5:1d:bc:70:9c:
         ec:59:b3:1c:39:a5:81:72:9c:fd:1b:13:ff:3d:80:63:14:db:
         3e:13:4f:5b:e2:6b:96:f6:8a:fa:29:4a:6b:18:dd:74:2a:4e:
         fc:4a:f4:99:f5:f6:47:43:5e:3a:be:55:62:3b:c0:8f:df:45:
         ed:a5:b2:0b:a2:6d:70:f6:a3:c6:c3:8c:67:6d:e4:46:a4:0b:
         ea:34:d4:b0:21:97:a7:b6:54:80:85:85:99:a7:e2:62:83:32:
         50:7e:1c:66:2b:8b:1d:d5:59:82:6f:ac:47:ec:95:f0:51:90:
         9b:63:9b:25:6c:00:93:06:ad:a6:d5:d6:bb:ee:f9:7f:27:87:
         57:97:58:98:44:25:d8:60:30:b5:c7:21:a3:3d:3e:0d:50:ae:
         b3:55:1a:e8:f6:ea:23:c5:67:51:dc:52:7c:1c:49:d4:dc:97:
         a5:e6:4d:00:5f:73:72:5e:d4:01:00:55:c9:01:ec:ba:9b:59:
         3e:d9:dd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----