Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/357aebb2-6de5-3c6e-a655-17567a6ad6a1.roa
File:                     357aebb2-6de5-3c6e-a655-17567a6ad6a1.roa (raw, json)
Hash identifier:          vxXshL/eFAxALccQ7zjjIY1uN3H1i46vwgraksN2aCk=
Subject key identifier:   D4:19:BD:B0:E8:53:BF:D6:02:4E:2F:54:E7:C9:BC:C8:0F:AF:F5:8D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B59563
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/357aebb2-6de5-3c6e-a655-17567a6ad6a1.roa
Signing time:             Sun 21 Oct 2018 08:19:57 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.249.0.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b5:95:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=5673176b-d7ae-4270-bdec-fcf8de88d98d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e0:a3:ec:04:6d:79:18:30:02:a4:25:10:4c:
                    5d:d7:b9:20:e0:1b:1a:f1:d7:6e:c9:f9:c0:30:a1:
                    94:80:aa:ff:55:95:e8:d8:b8:8e:ab:e4:07:95:6f:
                    8b:29:e4:4e:c4:df:77:77:e5:dc:15:2c:d2:9c:f4:
                    fb:d7:12:00:80:ef:68:37:49:1a:77:ec:b7:ad:0d:
                    af:9a:0d:b8:3a:77:8b:ce:7b:39:d5:19:29:f4:a5:
                    32:79:16:7c:5d:79:59:3b:85:fa:49:6a:58:55:1c:
                    b6:16:5e:e4:8a:de:1e:98:60:33:cd:6f:ed:7a:62:
                    34:e5:6f:a9:2a:83:52:45:6b:b3:9f:6a:32:c7:d4:
                    3b:8b:8e:f0:59:f7:4b:24:67:b5:dd:d0:ec:8a:81:
                    e8:53:4d:75:88:a0:96:f8:44:cf:66:68:3e:fb:7f:
                    44:d9:83:6a:a3:2f:be:dc:20:16:31:fc:f7:60:a3:
                    c8:49:56:b8:40:77:2b:cf:27:dc:4e:67:17:e6:29:
                    69:81:5e:bc:01:43:1a:b6:8b:d0:85:cc:02:c0:d4:
                    a1:ac:b9:d3:f8:85:5b:63:82:c1:03:e9:09:5d:27:
                    14:be:3c:28:ae:f9:60:6c:b7:a6:02:a4:18:cc:55:
                    a2:86:13:cb:93:46:35:c3:cd:20:a9:73:41:be:7e:
                    6f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:19:BD:B0:E8:53:BF:D6:02:4E:2F:54:E7:C9:BC:C8:0F:AF:F5:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/357aebb2-6de5-3c6e-a655-17567a6ad6a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.249.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:6f:17:da:16:45:64:14:b0:62:39:6b:94:ea:7e:0f:3a:2c:
         2d:45:92:06:a4:62:f0:5e:03:f4:fa:eb:e5:c6:aa:a1:5d:da:
         f1:a4:e7:08:76:be:7b:31:d5:fe:e4:22:ee:fa:c3:07:c9:76:
         f0:ab:b5:a9:a2:c3:c7:6e:60:af:bc:f8:9b:d1:57:67:3a:56:
         42:2e:5d:25:7f:24:80:e1:5e:c2:cb:a4:6d:c8:25:51:3c:d5:
         02:49:58:82:dd:60:9b:aa:5e:93:01:6e:cb:d7:14:6a:1b:5d:
         41:f9:25:62:93:88:9e:67:3b:36:ea:6d:5f:ef:5f:14:44:4f:
         2b:91:51:41:31:fa:69:e9:34:96:b3:c6:59:d3:77:c3:dd:8f:
         90:af:63:1a:7a:11:e8:b4:d1:1b:84:45:d5:3d:eb:81:70:b2:
         b0:7b:38:92:ac:bb:df:f6:4a:2b:cd:af:1f:6e:eb:43:70:85:
         cc:f8:74:a1:87:6d:dd:76:a1:02:be:3d:b7:45:6f:99:66:73:
         9c:a2:9f:2d:bb:6a:89:cf:b5:cb:cc:8f:77:28:54:f3:82:e5:
         fd:44:97:37:63:d4:e2:da:b8:db:ad:9e:dd:46:2f:32:bd:b0:
         f0:8d:a9:19:77:6f:73:10:4a:80:b5:e6:fc:1b:1c:bb:07:22:
         0d:14:5b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----