Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/46f295f5-434d-33dd-85c0-484e04e069c2.roa
File:                     46f295f5-434d-33dd-85c0-484e04e069c2.roa (raw, json)
Hash identifier:          fiOpMhvZ3VHIt8iLfKKDjsgs/xxaZ7cMra3MlNvzh5s=
Subject key identifier:   7D:0A:32:AC:14:34:F6:C6:D3:9B:C9:A9:FF:AA:9F:DF:38:99:A0:05
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC166944530BF
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/46f295f5-434d-33dd-85c0-484e04e069c2.roa
Signing time:             Sun 21 Oct 2018 01:37:34 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        13.54.0.0/15 maxlen: 15

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:94:45:30:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=7ec850b8-708d-4246-8663-980476ee2cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5e:1a:2e:86:88:1a:60:89:e8:38:ba:e7:84:
                    3a:55:1a:fd:df:84:23:13:5c:e8:ba:2b:67:c7:c9:
                    d6:88:22:5f:3e:b0:e2:a4:84:bb:90:0e:7d:be:09:
                    27:2c:05:d9:fb:c1:3d:e6:c2:cc:58:aa:be:c5:e5:
                    79:3a:90:71:cc:60:0f:1c:32:8b:d6:14:66:8a:88:
                    51:df:64:93:bf:f0:b8:04:f8:76:ad:47:d4:c4:16:
                    3c:03:21:78:b6:c9:49:d3:29:84:ce:65:e8:b9:4a:
                    95:94:80:e2:2a:44:6d:db:5c:93:fb:0a:50:31:ca:
                    66:f6:0b:e9:91:08:cd:94:55:3c:8a:ff:aa:25:74:
                    37:b6:c9:68:3e:0b:4a:09:d0:a6:33:f3:0b:24:b8:
                    d4:a8:dd:ae:ac:c1:f9:fb:fd:e7:28:d0:d0:62:eb:
                    3c:11:ee:f7:d0:ff:c6:26:43:76:3e:94:3f:03:5c:
                    74:99:49:67:e0:44:e8:39:13:f7:6f:d2:c9:60:5f:
                    c8:fa:6c:1c:07:06:23:e3:73:55:de:6a:f2:99:11:
                    56:62:70:1e:47:e8:13:28:5b:7e:6a:0d:f2:56:9e:
                    a1:97:fe:cd:c9:c0:c9:e0:20:45:73:53:84:f3:3c:
                    c8:e6:27:88:03:7d:23:00:a3:8c:a4:6d:42:57:db:
                    5a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0A:32:AC:14:34:F6:C6:D3:9B:C9:A9:FF:AA:9F:DF:38:99:A0:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/46f295f5-434d-33dd-85c0-484e04e069c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.54.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:c7:d5:5b:eb:d0:83:ac:ee:3c:2f:80:ea:a7:33:18:e5:5e:
         63:de:53:17:ad:86:ad:1e:e9:e7:8e:ca:44:8b:c3:fa:bd:63:
         0c:46:58:3a:f6:83:bb:78:c0:5c:53:9a:0d:36:80:9c:a9:bf:
         0a:fa:05:de:7a:e2:8d:7c:89:bf:8f:26:f4:1a:9e:c7:1c:92:
         53:51:74:65:48:dd:0b:c7:11:f0:c2:51:a9:0a:f3:76:fa:32:
         01:f1:44:ea:2f:54:83:d8:60:bd:04:73:08:13:7c:cb:78:34:
         5d:84:76:3c:cc:de:ff:bb:b2:46:72:8a:97:27:c7:eb:45:9b:
         62:b2:9a:38:ef:bd:21:be:e6:3b:fe:9e:cd:ba:5f:89:9f:80:
         ae:81:bb:6c:06:9f:22:8d:61:46:bd:6b:99:01:6e:c4:2f:d2:
         b5:62:37:3a:05:ec:87:11:d0:4f:d5:9c:8d:d8:21:6f:2d:3f:
         40:3e:00:c4:40:f9:fd:49:77:5f:1a:63:42:69:b6:d9:ff:43:
         c4:19:e8:df:80:89:fd:53:b3:58:82:7f:3c:b5:54:47:6c:69:
         19:b0:49:ec:df:e0:b5:7d:dc:99:60:07:9e:ca:59:81:0d:ef:
         ad:3a:5f:a6:3d:5f:53:7a:a9:c2:e4:38:6b:a3:66:52:5a:8c:
         9d:d0:09:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----