Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ac6e935-8e04-39e3-896d-c565c73ef4b7.roa
File:                     4ac6e935-8e04-39e3-896d-c565c73ef4b7.roa (raw, json)
Hash identifier:          28ZO2Po2NgHQvfz0nxOlxKtOV4SFbrbcWQnGrNsuBNw=
Subject key identifier:   28:30:99:3F:B2:28:E6:32:5F:30:E2:57:FC:BF:FC:71:4E:9C:FE:80
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C491A1EC
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ac6e935-8e04-39e3-896d-c565c73ef4b7.roa
Signing time:             Wed 19 Dec 2018 03:45:37 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:91:a1:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=2bc68013-3bfc-42a7-ac03-0c41ef2dc032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:53:a6:6a:f8:18:86:93:8a:09:a1:02:a4:06:
                    81:e9:f5:99:bb:af:de:a2:ac:31:9f:27:6d:f7:db:
                    4e:cd:27:52:58:79:19:d3:d0:75:11:5b:ab:23:fd:
                    61:ca:c0:66:de:99:7b:c9:01:92:16:2a:1e:35:b5:
                    b8:5f:c5:ed:b5:c1:ad:39:a5:f4:5a:bd:d5:ae:67:
                    1b:3e:c8:82:c4:23:18:27:aa:24:e4:48:3f:7b:82:
                    05:8d:49:31:03:5e:20:bd:4e:b4:53:bb:cb:4a:d1:
                    9b:16:b3:d8:d5:1f:5b:2f:63:d3:02:c0:c3:f3:8c:
                    6d:4d:cd:d3:00:25:3f:d3:58:f0:d7:65:a9:5a:4b:
                    c9:94:e6:4b:85:1b:a7:25:d3:a4:dd:a2:b3:0a:97:
                    ed:e7:57:95:96:49:cc:20:d3:1b:85:d6:e5:05:1e:
                    80:b9:60:3f:99:f4:88:47:02:85:ec:2d:6b:c8:9f:
                    5c:92:ce:e4:e2:30:96:ab:be:a5:cd:4e:62:2e:29:
                    2f:3f:89:ba:c5:25:43:25:e3:6a:d4:90:35:f9:ec:
                    48:8e:4b:f6:8c:cf:7c:02:df:cf:3e:73:9e:5b:dd:
                    c0:0a:58:ec:03:9d:c4:b5:8c:9f:05:f8:61:0f:15:
                    2a:87:ef:7a:92:40:cb:f5:39:67:df:b9:24:9b:ef:
                    6a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:30:99:3F:B2:28:E6:32:5F:30:E2:57:FC:BF:FC:71:4E:9C:FE:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ac6e935-8e04-39e3-896d-c565c73ef4b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:c4:14:64:c4:e8:51:99:59:11:31:1e:60:9e:d8:d6:0a:82:
         e1:0f:f7:61:2c:3f:ab:ff:a5:dc:0e:fe:cc:a6:a9:53:41:13:
         b5:89:c5:a5:ff:f6:6b:56:0b:12:cb:2d:3c:16:04:6d:19:8e:
         31:86:38:0b:d1:46:92:c8:07:9c:0b:a6:14:9c:f3:71:f1:0e:
         12:da:dd:30:bb:22:73:ee:8f:94:d0:cd:61:70:91:48:a4:64:
         69:37:e1:8a:9d:2d:eb:71:67:6f:ee:81:77:4c:29:71:4e:02:
         53:2d:82:5b:3c:40:a1:cd:67:25:ac:7f:0c:5b:20:e3:50:56:
         ed:7c:f6:ec:7f:98:b6:7a:8a:b2:45:a9:c8:80:ce:77:89:88:
         6d:20:3e:ce:98:d7:92:f2:82:82:6a:10:06:75:7a:f2:4a:b4:
         0b:cb:a8:b3:cf:b1:01:66:56:29:f6:d1:93:00:4c:5a:9d:f1:
         36:da:e6:34:9d:75:0c:d8:9c:cd:fc:ec:c6:85:6e:45:83:27:
         3a:14:02:c7:a3:08:7a:f9:76:20:06:36:80:7c:0b:75:0e:bc:
         a8:92:e0:02:53:28:44:02:68:d5:7f:fa:8a:04:b3:ef:37:5c:
         a5:fe:49:21:66:51:2a:1a:71:7a:08:5c:87:3f:29:14:76:8f:
         34:a1:21:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----