Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/42efba9f-7033-3353-b3f1-0507b866cdbf.roa
File:                     42efba9f-7033-3353-b3f1-0507b866cdbf.roa (raw, json)
Hash identifier:          BwGqJoWhbUWPaHCyxVokX2RNtwOMDV2Sojzx4/jrAUk=
Subject key identifier:   55:87:4C:DF:47:90:7D:9E:6A:94:D0:38:B5:78:4E:41:6E:22:9D:44
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1664BD0FBDF
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/42efba9f-7033-3353-b3f1-0507b866cdbf.roa
Signing time:             Sat 06 Oct 2018 23:57:59 +0000
ROA not before:           Sat 06 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.24.0.0/14 maxlen: 14

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:4b:d0:fb:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  6 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=4e44bb80-c731-46b4-b880-c83538cc3226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cc:04:db:b8:9f:4f:a6:fa:5e:06:cf:db:ea:
                    f2:ec:60:a8:42:b2:fd:a3:79:64:81:0d:f1:bf:49:
                    7e:be:b4:1f:47:b2:a4:1e:ff:1a:3e:53:1d:1a:cc:
                    82:5f:d6:8f:6e:f8:33:96:5c:53:39:fc:86:ae:ba:
                    80:b2:3c:1f:7f:b7:e9:37:a3:71:8f:e6:4c:9a:f3:
                    b3:0e:cf:f4:4b:b5:cf:a6:f6:77:4e:c3:0f:42:b9:
                    2f:02:ef:b7:0d:c1:42:4a:12:a2:b1:66:34:31:73:
                    39:c9:05:f4:82:64:05:56:42:b2:cf:6b:06:94:01:
                    6f:1f:17:bd:5c:a7:48:09:ab:4e:4f:c3:da:59:f4:
                    5a:c8:16:8c:62:07:3f:b9:32:3f:41:86:bb:b9:c5:
                    2d:78:f7:12:d2:00:90:99:5b:f3:2b:39:30:3b:69:
                    99:2e:b4:20:ba:19:26:1b:e7:6d:76:6f:6e:f2:ec:
                    9a:9f:61:b8:c9:ad:00:20:80:2e:07:d1:69:cc:6d:
                    06:91:53:74:ab:17:e7:e4:be:a5:7a:f8:8b:88:aa:
                    43:8e:80:14:6f:8d:e8:05:72:c6:12:40:0f:e6:d6:
                    ea:7b:e6:09:82:33:85:c0:97:a7:b8:53:f7:2e:16:
                    53:04:9b:a2:eb:9b:df:70:fb:62:05:f1:ab:7d:99:
                    fe:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:87:4C:DF:47:90:7D:9E:6A:94:D0:38:B5:78:4E:41:6E:22:9D:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/42efba9f-7033-3353-b3f1-0507b866cdbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.24.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:1c:a4:ec:9f:4b:7f:02:75:04:39:c9:3f:92:36:4c:8c:ca:
         36:cb:6a:f3:5e:8d:d3:5c:66:7b:33:63:22:a6:87:54:85:5a:
         0b:01:45:06:7b:d6:4f:27:f8:7b:81:69:ba:7b:2b:d8:cc:6d:
         b4:33:fb:9e:3e:c5:1c:e7:26:03:90:4a:01:e7:75:5e:7f:8c:
         e1:6a:e5:24:e0:23:cd:d9:f9:a4:17:3b:4f:4b:7f:64:2c:5e:
         de:70:20:4f:f2:02:ca:ef:b5:f4:42:eb:4f:d2:fe:27:54:3a:
         19:3f:eb:e1:8c:6a:39:9b:33:17:b3:1d:5d:6a:21:a4:c0:9f:
         e2:b0:ec:97:7b:ec:28:4f:1a:ce:b0:9c:a0:98:be:60:a2:79:
         c2:ee:08:60:10:b9:ce:eb:a4:b9:ed:a9:87:bc:47:eb:41:ed:
         4b:17:9a:fd:8a:a4:49:a5:87:5b:bd:cf:d9:b6:c9:e5:8f:65:
         ed:99:f5:02:9c:d8:12:f6:fb:65:c6:97:5d:4e:c0:d4:c6:91:
         92:04:bd:72:6e:5f:29:d4:15:a1:f0:bb:9e:5d:a6:95:1a:d0:
         bb:92:40:e2:63:a3:d0:fb:ac:95:4b:4c:98:0b:5c:b0:14:b2:
         4b:d4:30:09:dc:b4:84:80:9d:7d:e4:81:7e:2d:5a:f9:9d:63:
         bf:b2:2a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----