Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/375ab405-209b-3672-ba0f-654156ec2687.roa
File:                     375ab405-209b-3672-ba0f-654156ec2687.roa (raw, json)
Hash identifier:          +x4imzcVT0z8EkAqxHzVSJZdmDBikiHABLpk5WSs1f8=
Subject key identifier:   CE:6B:E4:11:CA:91:C6:EE:FD:43:49:51:2E:4D:93:11:15:2B:88:9A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1664294B986
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/375ab405-209b-3672-ba0f-654156ec2687.roa
Signing time:             Fri 05 Oct 2018 04:55:35 +0000
ROA not before:           Fri 05 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.8.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:94:b9:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  5 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=77372d0e-d7be-4494-9e5a-d90085accee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b8:da:6d:2c:13:07:85:28:3e:75:13:32:e3:
                    e6:b0:91:1c:4e:fb:ad:85:12:3c:68:ea:58:ec:5b:
                    e2:06:68:a9:68:8a:a8:ea:e7:3d:47:55:13:f3:91:
                    77:75:f9:06:4b:ba:74:47:1d:51:a2:37:f7:40:9b:
                    11:48:5e:e9:24:a9:c3:62:a5:21:3f:a9:50:3d:9c:
                    8a:a8:5e:8f:f1:a6:ac:ba:d6:79:de:bb:53:83:dc:
                    b9:0f:17:b7:a1:58:7a:49:ac:e1:49:62:0d:8b:52:
                    df:9e:7a:00:ab:46:c1:26:ae:f2:46:8c:4b:bb:ef:
                    9a:15:aa:9a:ec:9c:00:7a:34:d1:70:e1:59:e7:d2:
                    34:a4:19:e1:ef:2c:f9:83:17:bf:60:45:5a:30:11:
                    6b:3a:4f:14:12:ca:f3:6e:28:a2:b8:82:12:47:e5:
                    27:88:27:bd:4d:06:a4:18:48:1a:0c:85:66:d2:77:
                    8d:eb:ea:f6:e8:cc:39:fc:35:de:d4:a2:e6:74:91:
                    d9:f1:10:34:4d:6a:a7:b4:5a:03:3d:b1:f3:23:33:
                    43:74:cb:b9:fb:fd:dc:fd:19:0a:d1:20:43:40:7a:
                    f9:49:f9:19:47:49:7f:05:db:7e:b4:25:65:4d:a1:
                    fb:7b:42:d0:ca:50:c2:fb:ea:16:c0:2c:ce:9c:2e:
                    d2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6B:E4:11:CA:91:C6:EE:FD:43:49:51:2E:4D:93:11:15:2B:88:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/375ab405-209b-3672-ba0f-654156ec2687.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.8.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:3e:c4:4c:5e:82:58:14:78:ec:53:b3:d3:00:c6:39:be:d3:
         e5:74:4c:f6:0f:3c:f4:e1:06:9b:85:5a:04:96:9f:14:fe:f9:
         18:38:08:80:3e:ce:e0:1e:fc:c6:a1:54:71:13:f8:68:e0:fc:
         6a:29:5c:ec:9c:6c:08:bc:5d:23:e4:c7:18:a2:b1:d9:85:a1:
         9b:28:1a:45:93:ee:12:cc:4c:b8:ca:ee:19:73:67:b3:30:d8:
         29:ff:cc:b9:c2:8b:f4:d5:5c:bd:77:72:f7:a2:4d:ed:34:d0:
         f0:d6:59:66:ce:63:da:93:37:42:e9:2c:3f:d2:b7:cb:fd:75:
         80:66:c5:4f:d8:ef:fc:5d:3b:05:8b:a6:43:59:e6:ff:9c:b2:
         ec:90:c7:85:61:09:26:f2:99:e3:79:35:4b:2a:77:68:d6:96:
         59:8d:b8:fa:75:d6:46:73:14:2c:d5:c6:8e:ff:ba:c6:0c:6c:
         e5:39:6a:49:5f:88:e0:f2:df:6f:39:17:f7:7a:75:f6:19:a1:
         e9:cd:60:a7:ea:e8:7e:f5:49:5d:ee:be:8a:11:52:0a:f6:c9:
         50:72:d2:bc:5d:77:cf:0b:d5:95:21:d2:0c:55:27:e9:c0:7a:
         0c:2d:17:65:8d:d3:27:22:5f:b1:b5:e5:25:06:7d:41:e7:9b:
         c4:5f:5d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----