Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/37aab824-39d6-3110-bfee-73fa184b11d5.roa
File:                     37aab824-39d6-3110-bfee-73fa184b11d5.roa (raw, json)
Hash identifier:          0P4MtuPYP6POfcZOdLU2KAJW6cfyTUBqK9nDE6Jrduo=
Subject key identifier:   06:08:D4:6B:C3:48:8D:C5:44:85:CF:9F:34:6F:64:71:0E:96:1A:2D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1664BD11587
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/37aab824-39d6-3110-bfee-73fa184b11d5.roa
Signing time:             Sat 06 Oct 2018 23:58:05 +0000
ROA not before:           Sat 06 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.40.0.0/14 maxlen: 14

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:4b:d1:15:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  6 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=dd826cea-da57-406a-b371-8b6cf28f3a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:23:77:04:1b:90:50:49:58:54:49:46:aa:d7:
                    60:83:89:c3:af:88:3d:9e:f9:b9:b9:f8:0f:21:29:
                    cf:81:bc:9c:5e:a2:f0:60:2c:a2:97:ee:ae:e5:db:
                    79:2f:80:49:d4:b4:bc:f9:4d:58:61:7d:f3:ce:38:
                    f2:a5:11:de:17:3c:08:a1:07:69:11:bc:60:17:b6:
                    c2:74:bb:f7:35:03:e7:0d:9e:aa:f4:cc:67:93:d6:
                    2a:8f:5b:0a:cb:90:53:62:c2:3a:c8:02:91:29:8f:
                    eb:fc:4e:ae:e6:4f:07:20:75:37:6c:79:a5:85:1e:
                    7e:63:1f:ed:f4:be:76:1b:52:9b:39:17:0d:10:5d:
                    51:6c:3f:48:09:34:b1:72:b7:09:56:5a:94:12:ee:
                    8f:d3:dd:f2:1b:80:74:c3:3c:a2:f5:c0:32:61:c1:
                    00:c6:12:54:90:af:cd:18:8e:2d:25:e2:c6:f6:18:
                    d7:fe:75:59:73:51:fe:ec:d1:2e:f6:c2:52:ec:48:
                    91:63:04:3a:60:10:06:d0:cc:00:9a:56:c7:f4:b1:
                    1c:21:83:7d:00:77:f8:10:73:ca:cb:76:cb:79:68:
                    57:4b:a2:98:f8:76:b5:48:e4:ee:2a:75:02:82:16:
                    84:cb:d8:b0:85:de:2c:b2:2c:ad:b3:f5:37:93:71:
                    e1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:08:D4:6B:C3:48:8D:C5:44:85:CF:9F:34:6F:64:71:0E:96:1A:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/37aab824-39d6-3110-bfee-73fa184b11d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.40.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:b3:02:d2:fe:6d:5e:48:0d:d2:95:35:89:f0:c8:2b:19:8d:
         88:7a:30:9d:82:23:36:49:25:8f:14:5e:98:fd:9a:7f:2a:62:
         40:2b:aa:e8:91:f4:55:82:a1:77:30:67:a5:1d:41:ad:d3:07:
         c3:f9:32:3a:91:9d:9f:6b:cc:41:dd:37:0b:c6:c8:ed:de:6f:
         53:d2:9f:b1:0f:9a:0a:be:40:2e:8a:41:80:1e:5c:0d:72:bc:
         12:6a:e8:47:6e:9a:42:0c:1d:7e:8a:04:85:ce:26:ec:f7:28:
         33:c3:30:bb:2b:cd:54:0c:0e:23:ce:80:b4:a3:17:d8:8c:07:
         7f:33:66:57:3b:08:62:70:b0:38:ef:94:4c:a7:fc:df:b0:0d:
         8b:21:35:84:ff:c3:bf:59:50:e3:f0:6a:9d:2e:fd:dc:a0:7c:
         11:32:42:07:a4:89:47:ad:1e:b5:1f:51:2c:f2:80:1c:f2:02:
         9b:ee:9e:8e:b8:29:cc:9f:73:87:c6:4b:9e:2d:30:1e:08:39:
         73:4e:f9:2b:43:ac:ad:1a:14:fd:19:b3:9e:cd:09:87:ac:0d:
         28:07:ad:b8:4c:da:0d:00:5b:fe:e6:a6:89:ca:35:4c:4b:d1:
         17:aa:ce:d1:ac:ee:75:1d:10:00:78:d3:73:2e:6b:e4:aa:4e:
         93:e4:30:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----