Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a3c4213-dd6d-32df-8c26-5de3d47057bb.roa
File:                     4a3c4213-dd6d-32df-8c26-5de3d47057bb.roa (raw, json)
Hash identifier:          mXo+6PFT5FBrqiWWR16PfDhJDQrhobr+ZZkknZhk0sY=
Subject key identifier:   65:F0:47:9A:C9:26:41:EA:F5:59:85:6B:3A:FA:72:EC:CF:06:D5:D2
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665B695D6B
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a3c4213-dd6d-32df-8c26-5de3d47057bb.roa
Signing time:             Wed 10 Oct 2018 00:38:43 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.94.72.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5b:69:5d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=14c478ea-279d-4579-b0b8-ff10da020087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c7:91:35:1a:b5:c0:b6:2e:42:46:40:d9:c0:
                    2a:10:80:5c:d6:02:6b:d8:ad:ca:de:43:79:f3:ed:
                    5f:3c:04:aa:e1:30:b6:88:0f:db:26:53:b1:09:6e:
                    39:9f:89:6d:ad:a3:f1:87:1b:7d:26:61:ca:a4:c7:
                    eb:0c:fa:bb:13:bb:4b:5e:b1:78:1b:55:28:5e:12:
                    b0:fe:54:8b:94:8e:63:e3:30:0a:3d:06:d2:ac:f6:
                    dd:35:87:b8:15:86:72:50:cf:63:67:75:1f:ca:51:
                    91:ca:4e:5c:48:b9:7b:90:a1:53:33:73:bd:2e:78:
                    26:1e:a3:25:93:d8:0a:1a:16:22:70:52:d6:fb:da:
                    ea:39:ff:35:db:2d:e9:69:70:d4:81:b5:28:8d:e4:
                    4a:81:5f:de:e9:30:44:79:23:ee:ba:dc:fd:40:90:
                    7f:98:f2:fb:18:3e:b3:63:de:d0:8d:81:b3:a1:de:
                    4d:ee:c0:90:a7:bf:8f:35:32:7e:58:0e:3a:cb:8c:
                    93:36:bb:1d:80:83:b9:1d:74:d7:2a:e3:91:e5:50:
                    d0:37:4b:0b:1e:c3:f3:ae:bf:95:48:7a:4d:df:b8:
                    44:8f:a8:78:3a:9e:2a:01:88:6b:ab:6c:01:0c:a8:
                    97:9d:ef:f3:2d:6c:c1:c1:ba:40:9c:bb:c0:c0:02:
                    fd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F0:47:9A:C9:26:41:EA:F5:59:85:6B:3A:FA:72:EC:CF:06:D5:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a3c4213-dd6d-32df-8c26-5de3d47057bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.94.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:81:38:ab:2f:96:c2:a6:18:a9:9b:53:51:af:b1:11:4c:4d:
         2c:e1:b6:44:d3:03:ec:48:ad:a5:13:91:84:f2:0e:4c:a1:7a:
         7f:f5:e2:a7:31:f8:1c:5e:bf:8c:d3:d6:7b:94:00:00:74:4e:
         8c:4c:58:26:f6:6e:5a:4b:1e:f1:7d:eb:fc:cd:1f:bd:9c:4d:
         7b:81:27:f4:99:83:f0:7f:9c:92:cf:94:5f:a1:16:8d:26:4e:
         aa:9a:a7:aa:ce:ca:05:21:d3:5b:07:b6:1b:e1:11:db:16:50:
         b0:66:6d:c8:52:9c:53:8b:82:e0:d0:c5:c7:d0:80:af:bb:ba:
         df:b6:46:8a:5b:30:4d:af:7f:26:74:97:3c:e9:bc:60:02:0e:
         23:60:bf:72:4e:c1:79:c8:65:1d:d0:8a:a4:f3:11:a2:16:ce:
         85:bf:fc:81:6a:13:b1:d7:a2:96:91:78:5e:08:e9:30:ba:85:
         7b:36:4f:ef:03:ab:0d:89:0a:21:28:b0:3d:40:28:97:6e:d8:
         70:dc:64:b0:32:30:94:c2:6f:c8:35:a0:0e:90:06:b8:0e:a6:
         c3:af:71:c1:c2:64:29:b3:69:f8:d5:5a:e7:38:a9:cb:81:ef:
         f9:5e:0f:9c:e0:c4:98:55:44:42:29:ba:e5:11:87:83:04:96:
         49:51:b7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----