Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/450b4dfe-191c-3b73-921e-097888f7c258.roa
File:                     450b4dfe-191c-3b73-921e-097888f7c258.roa (raw, json)
Hash identifier:          ninGSmDNaro9sq9p2sWC19CSb7zuFT9NbjbK55L6wqs=
Subject key identifier:   EC:BE:87:2F:AD:63:9F:F6:BE:E7:D1:7D:FD:33:8E:26:D6:2C:26:75
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C46A0B23
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/450b4dfe-191c-3b73-921e-097888f7c258.roa
Signing time:             Wed 19 Dec 2018 03:02:23 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:6a:0b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=b309a57e-c31f-4ada-8725-d7b8d2acaed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:62:eb:59:a7:fc:6e:67:31:b3:27:2f:17:
                    a1:18:6e:e9:5c:4a:82:fe:07:0c:47:43:d0:42:33:
                    ed:7a:ec:20:bc:c9:72:7b:e9:de:22:e6:64:19:00:
                    27:33:5c:7d:ee:36:8c:04:38:4e:32:9c:a9:05:30:
                    0f:20:eb:91:f3:8a:68:84:b6:af:1a:e6:4e:02:0a:
                    2d:ba:8c:54:4f:c8:dd:5f:91:d3:01:1b:e6:6d:cc:
                    84:a9:39:67:05:15:94:b2:30:c2:cb:ef:da:73:9c:
                    5a:60:ed:f6:ba:a5:e7:ca:95:6d:9a:32:ec:0a:2a:
                    d7:56:68:aa:02:a5:11:b9:3b:57:ee:6f:6d:08:66:
                    2f:99:14:21:ae:70:17:3f:ab:b4:db:04:d1:34:af:
                    d2:ec:43:1c:a5:b3:10:ee:ca:a3:8b:37:c8:aa:ab:
                    68:29:a9:11:85:80:7b:ca:18:f1:19:a2:10:0e:70:
                    9e:4a:b8:f7:aa:da:58:ff:d8:df:0b:7c:1f:b0:73:
                    b5:33:ad:38:7d:5f:2e:16:c6:8e:11:60:5e:c6:7e:
                    6f:1a:d4:4d:40:e0:96:48:af:1f:07:c8:1c:52:44:
                    fa:d3:99:b0:2b:f2:07:86:c3:27:91:a5:c6:7b:9d:
                    e4:ed:b0:9e:ee:c9:db:f0:b1:5d:ec:3e:22:dd:80:
                    c8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BE:87:2F:AD:63:9F:F6:BE:E7:D1:7D:FD:33:8E:26:D6:2C:26:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/450b4dfe-191c-3b73-921e-097888f7c258.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9c:25:b7:e7:51:ff:d4:92:82:48:62:94:be:3b:b6:d0:c4:
         1b:d2:0f:d6:aa:a5:73:69:9c:00:8f:2b:9a:d4:0e:cf:43:54:
         88:c0:20:81:5a:18:56:98:f2:8e:f1:07:cb:92:24:3c:26:5c:
         d5:8a:27:a8:68:7d:f0:e8:e6:4f:79:6e:f1:3d:fe:c5:2c:0c:
         4a:e9:72:51:12:d0:62:f2:0b:98:d5:00:59:a6:0b:e4:da:76:
         06:02:85:5e:e4:f1:af:49:cf:4b:91:2b:40:45:9b:3b:a0:5f:
         e9:00:2d:ce:5d:1d:2f:1a:4d:9a:bf:85:5d:10:1b:d8:34:51:
         04:55:ae:da:13:80:88:50:67:24:86:f2:f9:2b:0b:11:79:10:
         14:03:ab:99:48:62:dc:f0:e8:dc:c6:d7:90:9a:59:d0:e0:38:
         7b:ed:e8:26:c5:c1:ad:25:58:81:32:85:57:ec:42:2c:eb:72:
         86:89:24:42:79:a8:c4:d2:e1:e2:c3:7e:ef:3d:67:39:8b:fe:
         83:d2:96:4c:50:6b:92:63:17:da:9f:17:bd:e0:00:2c:bb:10:
         44:e3:13:91:d4:da:cd:6d:dc:2e:1d:92:84:93:0b:19:cd:00:
         e0:72:0c:e3:83:33:0b:d1:10:82:0a:8b:85:68:e8:cb:54:47:
         23:89:ff:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----