Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/563a88f2-e57e-3d19-9b62-ecb80d9f7e5f.roa
File:                     563a88f2-e57e-3d19-9b62-ecb80d9f7e5f.roa (raw, json)
Hash identifier:          s/JbLseTGlQgznKeCyZ5FNuDpB5Fcn8vJbIdEkRi/8w=
Subject key identifier:   9E:94:DE:3E:56:BD:8C:AD:F9:C5:F2:FE:DE:52:95:2F:2D:57:21:C9
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C46A3EBD
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/563a88f2-e57e-3d19-9b62-ecb80d9f7e5f.roa
Signing time:             Wed 19 Dec 2018 03:02:36 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:6a:3e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=d2d8e5c2-c8db-4b18-9630-109d26cf7b36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3a:09:21:58:78:c0:f0:0a:64:b6:bd:b7:b9:
                    b6:9e:3c:d2:05:a8:3b:03:b7:13:26:2a:92:9c:f3:
                    37:d9:3f:58:f3:54:93:d5:d2:9e:78:96:97:bb:64:
                    c8:ab:18:9d:a4:d1:f0:b9:da:5a:b8:41:ea:dd:75:
                    08:06:d6:da:10:eb:e0:dd:ef:0c:aa:d6:d0:b0:81:
                    da:b0:86:66:95:12:9e:ba:7b:59:ee:f4:4e:4d:18:
                    5e:26:63:88:9b:0a:27:e0:0d:6a:e2:14:f5:04:1d:
                    d0:aa:d6:9a:2f:fd:d6:8f:a3:ac:ea:53:0b:95:9b:
                    c7:e8:13:69:64:7d:9e:b0:72:c9:6a:ab:7c:8f:b4:
                    4c:3d:e2:db:39:02:c0:42:18:e0:17:eb:9b:c2:0b:
                    1d:9a:42:7e:4e:6b:38:9b:ca:96:04:0f:d5:6b:5b:
                    f1:b8:37:72:48:39:4a:44:a3:14:66:e9:66:9b:1c:
                    c0:30:53:cf:ec:09:a7:f2:e4:06:f5:a1:a7:f6:b7:
                    dd:f5:60:11:17:57:14:cd:e7:60:ff:88:e9:cb:35:
                    ec:ce:ec:2f:5e:b6:9f:e0:67:26:66:42:19:6f:ae:
                    7d:9f:31:c6:d7:7b:67:ce:7a:dd:80:2d:89:9a:33:
                    da:72:a7:a5:60:7e:ac:74:09:93:cf:5b:b9:28:16:
                    4f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:94:DE:3E:56:BD:8C:AD:F9:C5:F2:FE:DE:52:95:2F:2D:57:21:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/563a88f2-e57e-3d19-9b62-ecb80d9f7e5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:8d:4a:cc:17:ad:28:b9:ca:1f:ed:57:d0:77:f0:c0:dd:9d:
         d9:e6:fe:96:49:1f:d8:d0:ed:b1:3b:1a:57:e8:4f:87:13:69:
         c8:73:04:5a:95:e1:ff:86:42:b9:c4:39:39:c5:a2:1d:59:68:
         ac:d0:f6:c9:80:67:e7:d8:44:72:1c:71:06:6a:ce:56:50:cc:
         a9:37:f7:40:1f:23:ad:7f:61:79:d3:0a:7d:82:be:35:4b:04:
         88:a6:27:c4:dd:23:4d:5d:40:36:a6:b1:18:a4:81:38:1a:9d:
         83:ed:83:5e:51:7e:54:15:08:0c:ff:ab:b7:74:aa:26:6c:e2:
         4f:49:b3:5b:92:e0:f2:57:77:71:0b:ef:9a:4b:cd:1b:51:9a:
         76:38:d8:55:1a:15:40:76:64:fe:21:c5:93:b1:d6:c7:21:76:
         44:06:f3:ea:55:a2:fa:78:a1:49:84:68:7c:82:0a:e1:c6:48:
         32:bf:cb:c4:e1:49:16:b8:d4:a0:bb:c1:50:89:2a:54:dc:21:
         e0:0b:cf:17:39:28:48:16:60:7a:bb:ff:37:04:73:9b:65:a8:
         54:9e:1f:e9:3e:24:fa:1d:c9:16:bc:02:40:28:06:e0:c4:f1:
         c3:1a:a4:5f:0c:bf:54:6f:c9:5e:41:67:6c:8d:18:fa:79:86:
         9c:3b:7b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----