Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2ce5204a-bf9f-30cb-9732-02e47ceab09d.roa
File:                     2ce5204a-bf9f-30cb-9732-02e47ceab09d.roa (raw, json)
Hash identifier:          kgLCx15uuZq1eRvu8M9lfU4bHp4pqmNjmmQqwO+I27E=
Subject key identifier:   35:F9:ED:55:15:89:8F:D0:3C:89:1A:FC:ED:4E:48:DE:03:A6:20:DB
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665C07BA81
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2ce5204a-bf9f-30cb-9732-02e47ceab09d.roa
Signing time:             Wed 10 Oct 2018 03:31:42 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.191.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:07:ba:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=7577bc88-4b62-4622-a866-667854597594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fa:f7:ab:ec:00:69:69:9b:85:d0:8d:fa:32:
                    06:40:a5:49:4d:41:6b:41:18:06:9d:30:21:c5:4b:
                    04:63:fb:d4:09:bf:71:8c:2b:17:4f:55:bf:b8:aa:
                    3f:f1:98:29:a4:e6:00:a8:3e:a2:db:09:62:7e:b8:
                    50:3e:42:76:88:a8:0c:20:69:e7:e8:d4:6a:03:90:
                    08:a6:03:21:ec:c3:60:ce:68:45:21:98:3b:ac:d8:
                    7a:d6:cd:0b:5c:47:09:5c:25:26:ea:76:8c:4c:c4:
                    b4:ed:59:29:b1:8d:2a:1a:ff:08:2b:82:30:87:ae:
                    f7:2f:df:98:93:99:7d:4b:2a:95:e2:5a:ec:bd:a0:
                    41:cc:e6:19:7b:7e:ce:3a:b5:72:e3:59:82:72:1c:
                    5d:ce:88:d8:f8:af:89:37:2d:64:2a:ca:c8:87:8c:
                    eb:1c:4b:df:bf:4b:68:3a:f0:b0:bf:4e:59:4f:e7:
                    be:b2:d6:45:e8:8a:fb:de:32:3b:5a:48:60:aa:25:
                    cb:30:fe:0b:fd:47:67:d7:da:81:64:99:cf:17:e9:
                    55:ac:99:0e:72:6a:83:67:13:c0:40:7b:9d:f8:07:
                    f4:e8:2d:42:ff:e3:9c:3b:47:df:66:fe:8d:68:93:
                    8d:a1:cc:11:3d:38:c1:fb:f3:53:55:9c:21:41:55:
                    53:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F9:ED:55:15:89:8F:D0:3C:89:1A:FC:ED:4E:48:DE:03:A6:20:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2ce5204a-bf9f-30cb-9732-02e47ceab09d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.191.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:71:93:77:4c:d3:86:a9:d8:f6:27:fe:4a:3c:2d:d9:84:fe:
         47:4f:7e:70:11:7d:e0:20:66:51:1f:ae:04:49:de:c0:b6:b5:
         db:33:cf:51:97:ae:3b:88:af:e9:2e:81:49:4c:a0:99:04:bd:
         64:a5:6d:c2:c8:cb:0b:fc:d1:50:3a:f3:54:9d:89:2e:2a:86:
         54:03:fb:12:c5:a3:7c:8e:43:1a:83:5a:20:6d:2b:a9:8c:7e:
         fa:63:0f:87:1f:bb:d6:b2:35:7b:ee:0d:c2:ab:33:b7:56:30:
         11:a5:af:11:0e:08:cc:8e:c3:2b:e3:ca:85:37:74:df:66:02:
         a1:62:fa:5f:8c:37:1a:fa:10:ae:e8:1d:47:74:1e:ca:8d:9d:
         41:1d:08:e8:17:66:b2:0d:08:4c:a7:05:8d:fa:39:88:01:b3:
         95:5c:29:e1:77:9e:6a:28:a6:17:c3:ce:6c:45:0f:22:cb:9a:
         59:a2:9b:08:cf:9c:69:92:60:92:0d:97:71:b2:d6:01:04:11:
         c1:c2:35:a6:f2:ae:96:00:d5:70:c9:d5:2b:83:3d:be:66:01:
         26:ba:56:15:66:6a:4f:d6:41:67:8a:8d:ac:ea:ad:bb:c0:a0:
         68:f5:34:39:75:78:36:cf:43:65:09:3a:8e:bb:56:cc:94:f5:
         9a:b0:f4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----