Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/29ff24eb-1cb3-3ad6-9807-b1d08061a089.roa
File:                     29ff24eb-1cb3-3ad6-9807-b1d08061a089.roa (raw, json)
Hash identifier:          zmbyHgfNYdiDoEhRXWzYhdjdM96UQ8Z/RuaA/Q5dzos=
Subject key identifier:   CF:BF:60:11:C2:57:D2:DD:15:89:D5:D8:70:88:06:D5:62:EA:0A:D1
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C44753CC
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/29ff24eb-1cb3-3ad6-9807-b1d08061a089.roa
Signing time:             Wed 19 Dec 2018 02:24:28 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:47:53:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=3b9cd1e9-0423-49c7-ab5f-5aaa45f6a187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:45:ac:6d:8c:8c:83:b7:18:5d:f1:77:32:fe:
                    68:6b:fc:22:73:25:c3:7d:bc:f6:1d:2c:d8:01:f2:
                    2d:28:9c:69:01:45:d3:61:c5:95:3a:6d:c8:68:66:
                    20:f1:d6:ac:75:99:e6:91:f5:ad:3b:7e:0a:6b:d8:
                    75:f0:12:2f:54:7f:bb:a9:cd:b9:b4:bf:d3:c1:57:
                    8e:06:5c:c6:ac:ac:dc:8e:10:ee:e2:8a:cc:bd:7d:
                    11:1f:39:70:1f:9c:b8:23:f7:27:e8:2d:26:f0:0d:
                    a5:44:6f:6e:c7:e5:5f:56:d1:ca:30:12:25:8f:10:
                    da:02:02:ac:cb:8a:94:30:1f:27:ee:d1:45:3b:dd:
                    df:89:4d:a6:5c:cc:3b:68:19:fe:1c:d6:55:b4:fc:
                    ed:3b:e9:b2:0e:d2:05:bc:bf:5b:47:76:8f:90:75:
                    ca:20:b6:6a:71:41:83:66:95:c4:74:62:80:28:a9:
                    2d:cd:3b:8b:6b:92:00:07:59:c6:de:51:30:53:b5:
                    d0:c7:ee:e5:05:98:98:a7:63:fd:22:81:75:88:f6:
                    95:8e:54:67:bc:6c:42:d7:ec:f4:76:e0:0d:83:08:
                    af:2a:e7:b3:0b:f1:a8:3e:45:6e:60:df:8e:5b:2d:
                    06:3e:f7:6d:82:54:5c:5c:60:b8:b0:ac:6b:f3:88:
                    c6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BF:60:11:C2:57:D2:DD:15:89:D5:D8:70:88:06:D5:62:EA:0A:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/29ff24eb-1cb3-3ad6-9807-b1d08061a089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:9b:a1:66:b1:65:52:d6:40:15:e9:bf:33:7d:fa:2f:dd:54:
         16:e6:54:ec:ed:e3:96:15:8d:0b:a9:d1:dd:67:b1:15:a8:f1:
         de:7b:ae:67:a6:7e:73:79:00:78:c4:0d:06:c6:c9:c9:c3:f6:
         84:31:1a:6f:99:45:1b:4e:6d:83:24:40:95:9e:96:ba:04:29:
         c0:07:62:0f:2f:ab:32:eb:f7:c8:6b:4c:27:70:2c:70:59:dc:
         71:32:bf:fa:79:6e:0b:13:84:bb:e8:59:84:0b:f7:99:cf:2c:
         ac:61:41:07:45:33:2c:e2:ff:d4:a1:83:c7:f6:21:30:65:f0:
         0b:75:8e:2b:4c:a4:e6:1b:61:f1:cd:c4:73:13:9f:f0:64:e7:
         cd:f8:2b:06:f1:b1:e1:0f:47:06:23:54:03:78:e9:fd:e9:00:
         ec:15:6d:47:f2:72:2f:f4:55:32:9d:d6:8a:81:a6:1e:7e:7b:
         cf:12:ad:98:5a:24:6b:b4:b9:c3:6c:c1:18:52:66:da:2c:cd:
         b6:3f:9f:c6:f0:11:18:86:02:13:1b:a7:54:f1:52:85:3d:d1:
         eb:59:bc:c5:86:77:18:06:a3:ec:ca:4e:c4:5f:4d:db:99:46:
         6b:d0:af:c5:bc:f9:c6:02:a6:ac:3d:14:75:55:3a:3f:dc:60:
         39:29:b4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----