Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/42fc2595-2740-353d-b327-2c1bf7b3d9e6.roa
File:                     42fc2595-2740-353d-b327-2c1bf7b3d9e6.roa (raw, json)
Hash identifier:          hHuyCFn4fEB4HQVWZD7v6IkDzYzj1W/9N0gCaoMctyE=
Subject key identifier:   4C:97:FB:A0:8A:99:6A:41:C0:25:94:CB:11:EE:C5:9E:C0:CE:10:15
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C49230C6
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/42fc2595-2740-353d-b327-2c1bf7b3d9e6.roa
Signing time:             Wed 19 Dec 2018 03:46:14 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.219.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:92:30:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=31148efc-ac72-4adb-a0fe-2ed5afdb382d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:37:ec:81:56:b7:ce:54:d4:5d:4b:05:bd:29:
                    e0:49:e1:f3:e6:1c:db:6d:71:63:92:82:7a:6a:b5:
                    41:34:c3:d7:f3:d3:a3:20:89:ef:b5:b9:17:cb:93:
                    48:d4:ab:98:bc:3e:b9:fd:53:d7:50:25:6d:5d:c2:
                    ee:65:1d:a7:e8:86:2d:18:82:24:e3:0b:6c:f9:c4:
                    e5:b7:03:ce:97:99:58:d2:02:0b:d6:2c:fe:9b:cd:
                    d8:d8:81:70:fc:ab:7f:36:bf:8f:34:47:a2:39:9b:
                    4d:32:d6:55:08:d2:5e:bc:58:c2:06:4f:9e:8a:b3:
                    d3:d1:18:7e:df:32:97:f5:04:4b:a2:a7:d0:cc:4c:
                    01:5f:93:d6:c1:9c:92:3a:55:55:c7:98:a9:12:5b:
                    76:a1:9a:5c:71:44:94:81:a8:ca:76:2b:df:80:99:
                    aa:d7:28:02:98:97:ea:5b:25:74:29:4a:0d:4a:05:
                    b7:e0:cf:4e:a8:58:50:42:80:90:e7:30:5f:90:d0:
                    b6:c8:1a:d3:59:85:fb:34:22:d9:ea:f5:6a:c6:27:
                    19:e5:2e:98:19:2b:9f:8f:6d:10:2a:d2:2a:3d:7e:
                    aa:03:15:e3:b3:54:1c:c0:30:93:e9:aa:83:9e:f7:
                    19:cc:eb:5c:fa:56:4e:d6:c4:b1:ef:37:ea:ed:bb:
                    f5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:97:FB:A0:8A:99:6A:41:C0:25:94:CB:11:EE:C5:9E:C0:CE:10:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/42fc2595-2740-353d-b327-2c1bf7b3d9e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.219.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:80:4e:ce:2d:9d:a6:bf:dd:91:c5:74:90:9b:53:87:9d:47:
         8f:90:fd:c7:85:1b:92:77:a7:a7:c0:bf:36:0d:72:bf:b8:6a:
         8c:46:22:39:dc:7a:20:47:91:a5:85:52:68:d2:88:45:20:29:
         7d:9c:a0:83:64:fd:b2:a9:5e:f6:42:ba:7c:7f:93:cc:e9:d6:
         2a:f1:cc:b9:64:05:6d:9a:56:5a:e7:af:b5:e9:0e:44:5f:d2:
         07:7b:8d:b8:27:54:33:b9:a6:77:a3:44:c2:1f:26:b3:aa:b1:
         ac:d8:13:26:13:a2:43:32:23:8d:2c:c3:2a:8a:6e:7c:8e:e9:
         05:59:cc:9c:98:df:61:85:a9:32:48:c2:39:91:0b:19:55:56:
         fa:32:8d:33:b6:15:8a:54:96:1c:e0:de:a7:5d:61:11:43:10:
         7b:74:74:b9:a0:3d:bf:a9:85:9f:c9:7d:09:1a:f1:61:32:cf:
         07:5f:9b:48:3b:5d:1f:52:08:25:53:3c:23:aa:21:48:a0:83:
         8d:34:a8:51:d4:db:75:89:05:af:6d:73:46:ab:98:ef:80:58:
         6d:3d:14:8a:ca:4c:33:f9:aa:2f:38:cf:00:e0:a9:6f:6e:b0:
         9f:61:71:cb:cd:a1:5a:ed:aa:f8:e1:c0:33:ff:84:2d:73:6d:
         f8:19:58:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----