Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/57aeecee-52a1-3d48-a86f-a54f2ae386cc.roa
File:                     57aeecee-52a1-3d48-a86f-a54f2ae386cc.roa (raw, json)
Hash identifier:          2s0CDdGbODq5fGzC+ri+U8wZ9N4ilJF1pSGRLpmne7Y=
Subject key identifier:   78:9C:D0:BF:32:64:D0:64:F5:22:6D:A6:99:F6:05:0B:E5:DD:96:78
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C4919A69
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/57aeecee-52a1-3d48-a86f-a54f2ae386cc.roa
Signing time:             Wed 19 Dec 2018 03:45:35 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:91:9a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=9b355044-d420-44e2-b6c9-a887fe8c3ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9c:19:dd:e5:68:cb:ab:1e:c6:e4:01:9e:a8:
                    c7:62:52:17:cd:37:02:17:10:1b:1e:b8:a9:12:57:
                    38:72:5f:d1:ce:cc:97:4d:fc:e4:1a:a1:63:b1:e2:
                    6f:66:bc:c9:71:f0:aa:63:f7:cb:f2:be:32:aa:da:
                    9f:ee:a4:25:e8:44:58:51:48:10:ca:8d:ef:b1:1f:
                    fe:7c:24:49:72:07:f7:9e:d0:e5:66:b9:20:b3:e7:
                    a9:55:fe:10:71:30:1a:57:7c:30:f8:bb:4a:b2:1e:
                    be:e6:91:b5:8c:9d:58:44:1d:eb:d0:6e:2c:7f:91:
                    ce:fd:84:13:12:9c:57:e6:18:ee:b8:84:56:b3:05:
                    f9:2b:14:8d:01:35:86:0b:a2:a5:ee:3a:d0:8e:02:
                    ac:5c:52:cc:9d:9b:ce:cf:c5:9a:45:5b:0d:6c:5c:
                    6a:57:4b:f7:d6:c6:dd:23:1b:df:0d:39:f6:37:b2:
                    13:39:16:1f:4d:b5:d9:8f:aa:38:29:cb:34:d6:fc:
                    90:c2:88:fa:24:68:92:9d:77:79:13:c5:6b:3b:79:
                    1e:f5:d0:d1:5c:78:ac:a4:d1:d8:1e:08:26:1a:43:
                    d0:e1:f0:e9:40:c9:d4:85:47:01:16:66:f7:f4:2c:
                    64:6f:e1:68:80:d7:38:b3:1a:70:7b:79:8f:94:18:
                    cf:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9C:D0:BF:32:64:D0:64:F5:22:6D:A6:99:F6:05:0B:E5:DD:96:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/57aeecee-52a1-3d48-a86f-a54f2ae386cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:5c:78:32:fe:a6:78:7c:66:bb:59:48:f6:c7:90:88:f7:8e:
         a4:ca:eb:02:dc:18:49:59:e8:a8:40:e0:af:5c:57:36:98:5a:
         b0:dc:06:e5:75:b5:02:bf:8b:a5:e3:c1:9d:cf:01:01:70:32:
         7c:06:8b:bb:82:cb:39:0d:1f:66:b7:e2:04:9b:60:c0:3c:b2:
         7a:08:24:71:58:dc:af:f1:b0:4c:4a:2e:93:72:ba:3e:d0:95:
         c1:89:74:fb:b8:63:1b:0f:05:69:6b:50:40:52:db:86:89:ec:
         7b:a4:64:07:b9:0b:af:d9:af:0f:7f:68:11:dc:dc:6c:13:c4:
         83:2d:6f:31:b4:e5:6b:5c:2a:59:63:de:d1:a5:6e:ba:c1:70:
         24:90:d7:e0:86:08:6c:54:bb:64:25:89:d0:1c:5b:e7:37:0f:
         ad:d7:86:08:5e:8d:b6:b8:24:1d:b1:9a:2b:ff:86:80:7f:23:
         40:f0:58:f9:3a:a0:c8:c3:3b:7a:80:17:57:c8:76:39:79:12:
         9c:23:7e:0e:e6:14:a0:52:b5:b8:cd:ba:c3:f8:1e:79:91:27:
         07:51:33:6e:f4:17:87:8f:dc:73:73:1e:2c:1d:d0:c5:d3:5d:
         52:8f:fd:32:ee:4a:84:d0:61:1b:48:22:65:65:ce:7b:23:a0:
         2e:83:62:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----