Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2e1b7462-ad35-3fcb-b8a4-3a43f81e12bf.roa
File:                     2e1b7462-ad35-3fcb-b8a4-3a43f81e12bf.roa (raw, json)
Hash identifier:          316n+lEJppfssSl5GBo8clD9vdlD1LtMTPtTxo3gVc4=
Subject key identifier:   67:65:E8:A3:0B:96:04:19:6C:1A:B3:E9:47:5A:07:9A:1F:2C:17:83
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B38B44
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2e1b7462-ad35-3fcb-b8a4-3a43f81e12bf.roa
Signing time:             Sun 21 Oct 2018 08:17:43 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.219.0.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b3:8b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=5a2d2d05-ede7-428b-8f53-41d816e680bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ba:1f:0d:e7:07:5e:7c:ca:d5:d1:54:11:79:
                    13:2b:f1:a8:f3:16:04:c6:b4:2c:76:9e:3e:63:a9:
                    d7:cf:f6:31:fe:5b:f3:74:58:2a:22:68:a3:2c:b7:
                    99:86:e4:84:d6:b7:e2:88:1c:38:f3:9a:36:fe:fe:
                    1d:06:2e:d6:36:35:5e:8d:e2:d1:c4:a3:7f:97:4e:
                    a7:2c:84:b9:96:cf:4b:51:44:28:b7:41:24:85:b8:
                    34:7e:9d:eb:80:c0:d5:e6:05:5e:40:c0:df:fc:f2:
                    75:7c:35:1f:c3:8f:d2:c2:7d:f3:35:2e:a3:b8:8c:
                    3d:26:e6:ed:50:71:ec:aa:8f:c5:ad:8d:63:00:22:
                    38:99:be:57:11:e7:f4:82:b7:bc:1c:b0:ed:c4:0f:
                    d1:f0:5d:a0:99:52:b6:be:a5:2b:46:ac:f7:08:12:
                    e5:47:39:54:7b:20:5c:59:1c:2a:50:8a:f4:e3:31:
                    12:a7:f8:d6:b0:3a:e3:19:0c:d3:f9:dd:fd:5f:08:
                    d3:2f:a1:75:0f:02:69:63:98:cd:2a:52:c2:7f:b3:
                    17:23:e5:40:59:5e:db:64:38:80:2b:e0:65:ef:2d:
                    47:c7:51:b2:8a:25:78:a4:ce:ce:f1:00:69:79:25:
                    a5:77:1c:da:f5:7b:85:c6:bf:8b:fd:84:13:de:84:
                    6a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:65:E8:A3:0B:96:04:19:6C:1A:B3:E9:47:5A:07:9A:1F:2C:17:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2e1b7462-ad35-3fcb-b8a4-3a43f81e12bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.219.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:e8:c4:65:31:f6:66:85:88:e8:a4:7e:21:fc:e0:09:ad:cc:
         fd:b9:dc:85:ad:35:78:61:62:c5:59:6c:ed:08:16:75:66:65:
         66:60:90:0f:fc:a4:35:70:e4:01:1d:0a:d2:7a:b0:b2:ae:81:
         da:83:83:83:04:e6:70:70:ca:b7:4e:e4:08:a0:67:03:25:23:
         c3:d9:80:bf:b8:53:b7:49:70:85:86:68:c1:7c:33:c6:e1:e1:
         a5:d1:2e:3c:88:3b:46:d6:31:e9:66:53:f5:08:e0:fe:ca:f1:
         d3:91:2a:5c:6a:85:6a:c4:93:3e:bc:7e:a5:b9:94:d0:ee:92:
         0d:fb:ff:b3:02:1d:1d:0c:43:a4:9a:35:a5:be:de:04:63:63:
         3d:29:9c:af:58:38:c9:ce:2c:e5:89:c1:e6:d9:84:31:10:93:
         24:a3:0f:04:23:a3:f6:ce:31:f4:f1:c6:7b:28:c8:1a:e5:83:
         33:0b:1e:4b:3b:d9:80:bc:8b:c8:90:13:4f:1a:b0:0e:40:a2:
         ef:e4:b6:76:f5:86:9c:30:62:3d:11:47:59:c9:29:f0:21:6c:
         d0:60:98:60:7a:51:db:c7:2e:83:a2:0d:ad:28:83:e7:d1:68:
         d2:2e:45:0b:55:cb:c6:a5:0d:dc:95:db:c2:27:49:63:91:ba:
         4b:61:ff:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----