Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/506151e7-efda-3eec-9a18-c45268b0a353.roa
File:                     506151e7-efda-3eec-9a18-c45268b0a353.roa (raw, json)
Hash identifier:          dYm7lChreGR4jZiV/yY9ZyJL8nY2UshVMtIF9vIrmME=
Subject key identifier:   74:C0:9A:23:72:55:6E:7C:39:29:07:FA:0B:DB:73:91:77:72:70:B4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665B69B362
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/506151e7-efda-3eec-9a18-c45268b0a353.roa
Signing time:             Wed 10 Oct 2018 00:39:05 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.231.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5b:69:b3:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=af85f584-5077-48eb-98f0-c8448da3e692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:36:1b:b7:ff:a2:28:07:c0:43:3c:56:a1:ee:
                    3c:06:c3:10:14:22:05:d8:de:14:eb:48:8b:41:89:
                    4c:ca:03:d6:f1:04:d7:d3:eb:39:30:e4:92:d8:77:
                    e8:a9:f6:45:6a:fc:93:54:d8:cb:0d:5e:b3:50:e5:
                    6d:60:4f:0e:31:73:5e:25:76:5e:2b:84:bd:eb:e0:
                    a1:db:66:0e:2e:5b:77:cf:17:7b:90:59:1a:46:2b:
                    0f:4f:19:f5:6e:24:6f:2a:cd:d3:ca:69:4d:91:1f:
                    af:70:83:e4:10:e6:56:88:2c:eb:ae:44:12:74:cd:
                    22:a1:66:9a:0b:7b:bb:27:d5:de:09:a9:3a:c7:ef:
                    58:db:49:f2:7a:06:33:4a:93:5d:33:a6:c4:02:f3:
                    91:c7:20:31:1a:08:b2:8b:e6:da:68:df:1e:9e:77:
                    ac:8e:29:f2:04:29:ad:99:25:56:be:a8:31:a3:78:
                    53:8c:09:72:7d:df:0d:fe:6b:66:40:7b:eb:b8:4c:
                    34:86:df:59:09:f1:bb:ab:71:a3:11:82:47:02:3a:
                    47:de:83:5a:7a:96:9a:0e:d6:b2:e9:4c:e7:fc:c9:
                    81:fb:c7:f4:82:1f:8c:ce:d3:f5:a6:e4:7d:79:31:
                    e1:25:6d:eb:28:4c:17:13:48:3a:ed:da:da:fe:84:
                    53:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C0:9A:23:72:55:6E:7C:39:29:07:FA:0B:DB:73:91:77:72:70:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/506151e7-efda-3eec-9a18-c45268b0a353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.231.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:dd:91:24:bb:07:a3:39:72:9c:ec:2d:6f:47:65:90:a0:e1:
         00:2f:33:4e:b6:64:c1:2e:e9:ac:d7:7e:0f:3e:40:91:68:a1:
         39:5b:ef:70:4f:5d:08:09:e2:74:26:11:12:f0:c1:d7:23:e9:
         a4:3d:6e:9e:18:56:c7:e6:54:d7:26:9e:66:d4:70:47:73:f8:
         f5:37:58:32:c0:e8:8c:66:92:62:49:27:3b:ee:ea:00:98:32:
         1c:0a:0d:55:7b:10:5a:ed:84:f5:c8:4f:f2:67:36:d1:7f:f2:
         21:5b:5c:fa:8f:47:0d:fe:ef:6a:7e:ed:3f:7d:0f:cb:14:cf:
         15:75:d3:1a:f0:79:d0:1c:0a:11:c4:b7:2a:3f:1e:d6:4d:c6:
         ba:21:55:ef:12:e3:45:5c:d1:aa:94:97:df:5b:4d:a2:27:b1:
         7c:91:43:1c:fb:d6:61:a1:4b:78:2d:c3:5e:7c:f2:19:6c:f5:
         ea:f2:94:ce:85:75:b3:01:f9:b3:75:3e:8f:eb:04:8e:1b:95:
         9b:40:f5:f0:8f:31:5f:33:04:62:d4:15:f0:c8:ca:24:cb:a8:
         53:e3:1f:bf:05:6a:2a:b7:cb:33:17:e8:05:49:58:6f:1e:06:
         a2:6c:7d:ad:6c:37:2c:6d:e2:b4:60:f8:5d:be:9c:d6:d2:c9:
         66:ae:d5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----