Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4c7f37a8-e7c2-301a-a586-7ed5753d4fb8.roa
File:                     4c7f37a8-e7c2-301a-a586-7ed5753d4fb8.roa (raw, json)
Hash identifier:          1/5Mz6cDU4sUm0qmu+svh44XTMQOC1uNNleZV1mqASA=
Subject key identifier:   B3:41:8A:44:24:B0:B1:2C:41:5E:41:61:C4:46:C9:57:15:F2:89:BC
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C447A153
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4c7f37a8-e7c2-301a-a586-7ed5753d4fb8.roa
Signing time:             Wed 19 Dec 2018 02:24:47 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:47:a1:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=19543550-39cf-4ef1-a04c-58e6666a9ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9c:e8:ce:b9:f2:c7:f9:2f:9c:d6:f2:9e:1d:
                    df:57:9b:1d:d8:b7:2e:b3:e5:26:bd:5e:c6:80:1c:
                    e2:87:62:35:78:ae:02:e9:96:0a:ab:4b:d6:f6:c7:
                    85:5f:e8:7e:7c:31:ae:44:54:18:6c:37:12:14:6f:
                    65:6b:b1:4b:26:3b:c5:86:b5:1a:0a:11:8a:8c:df:
                    8c:9c:56:e6:ba:fe:5b:27:1b:95:48:9f:ce:5f:83:
                    a7:b5:21:7f:81:dd:b2:37:13:77:71:2f:28:bf:2b:
                    ac:75:52:53:77:ec:b1:98:ca:eb:35:f5:1f:cc:d6:
                    ff:56:44:6f:a4:bc:8e:bd:c1:a9:3d:e3:e0:e2:38:
                    99:20:1e:01:c5:ea:bf:55:bf:08:d7:4f:50:5a:82:
                    fc:27:ac:33:c9:05:2c:08:bd:76:bd:8d:c5:37:92:
                    2a:62:d0:2d:41:fc:4b:5b:79:9f:bd:ac:e4:c1:88:
                    52:82:e5:29:f2:45:14:63:a6:49:e4:41:37:91:a6:
                    be:89:4f:1d:19:18:d6:5b:36:43:44:b2:a6:b1:d5:
                    dc:58:37:e7:cf:b2:61:47:64:cb:55:1d:33:ec:5c:
                    78:6e:d1:f6:22:84:a3:93:c5:a7:92:2b:55:51:01:
                    5a:07:8e:2d:a8:20:85:b8:86:c4:b5:eb:90:60:04:
                    e6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:41:8A:44:24:B0:B1:2C:41:5E:41:61:C4:46:C9:57:15:F2:89:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4c7f37a8-e7c2-301a-a586-7ed5753d4fb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:40:62:67:e5:15:6d:79:78:20:a2:06:d5:24:2c:fd:42:72:
         69:15:68:14:85:a8:28:d5:ec:32:8b:55:5b:c4:c0:53:9d:d1:
         e5:7d:17:0d:8a:d0:cf:82:df:83:05:96:8a:c9:5e:01:00:13:
         b5:41:78:53:e4:24:72:3e:ab:6c:2d:6d:ae:43:80:fe:90:48:
         66:ed:61:da:fc:ca:c5:24:3e:d2:71:32:c2:c3:73:89:61:dc:
         7b:c4:2d:2a:b7:13:9f:ed:c4:6f:e1:4a:5a:ff:6c:0c:14:3e:
         6f:81:34:b4:1c:f0:49:4e:79:f9:14:ba:69:53:2f:00:7a:9a:
         15:63:cf:11:63:69:5d:ad:7d:93:93:03:59:7a:91:72:42:88:
         1b:a8:55:cd:36:c1:10:74:bf:de:53:ce:6b:9e:cf:1e:4a:88:
         7d:49:61:61:59:07:81:ed:3d:55:6d:d6:f3:8c:86:d8:9a:b7:
         ac:54:5b:0d:4a:6a:e3:66:ec:98:69:4c:33:a3:92:0c:a9:1e:
         6e:63:d7:23:86:f4:be:a4:6e:93:e8:45:65:a2:df:8e:47:96:
         b9:86:48:a0:e3:52:c0:8b:db:c6:1d:e3:0c:c2:08:99:9e:ca:
         49:5e:e1:c1:51:86:9d:ea:f4:82:af:b9:00:e6:1f:51:e3:1c:
         d5:9a:f7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----