Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ffc81c3-4e28-3f1e-b796-0b0fce1d8b07.roa
File:                     5ffc81c3-4e28-3f1e-b796-0b0fce1d8b07.roa (raw, json)
Hash identifier:          TgO9aEoZrG+ctpbK37rL6l1p+dYDrR8DE35OFnv4iQw=
Subject key identifier:   CB:71:1E:9C:D5:FE:E6:A0:0C:AA:72:C1:8E:24:28:74:8A:7E:45:42
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665C07E72C
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ffc81c3-4e28-3f1e-b796-0b0fce1d8b07.roa
Signing time:             Wed 10 Oct 2018 03:31:53 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.214.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:07:e7:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=86ed1b92-7cde-4f5f-9ce6-9d0c6250bd2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:54:a5:64:19:d5:9b:33:7e:41:c9:b6:ac:f9:
                    d0:e9:b4:38:c6:62:f2:3b:ff:f7:64:bb:70:83:3b:
                    36:6c:de:b5:56:12:e4:e9:7a:f3:51:63:8d:10:7e:
                    70:7c:f4:34:ff:60:af:e5:0f:87:66:83:5d:eb:09:
                    af:f1:f8:d4:31:cb:52:c7:f3:c1:19:44:2e:87:39:
                    a2:cf:98:f3:93:38:67:0f:5e:ec:fc:14:cf:4d:39:
                    af:6e:c1:d9:e8:1a:ae:ee:b7:d4:c9:a2:82:7a:f0:
                    89:2f:bf:92:8e:fb:f4:fc:62:c0:dd:06:72:b1:7b:
                    68:72:f3:e5:8e:bb:40:48:f5:32:65:2d:a3:00:51:
                    5d:9b:c3:7a:64:24:30:a8:0a:75:28:ac:db:41:59:
                    5f:06:b5:39:8c:43:0f:6e:6a:86:63:40:e1:7f:42:
                    d9:b9:06:4c:4b:7d:fc:27:aa:da:da:45:1f:45:35:
                    73:4d:65:1e:b6:02:5e:6c:fc:97:ca:47:42:bc:5c:
                    0b:dc:2d:6d:be:06:b4:77:ea:0c:21:dd:79:4c:a1:
                    61:c3:b6:95:ed:9c:1a:dc:ba:da:4e:b1:14:f1:45:
                    f7:d0:5e:6e:61:2d:e4:65:78:d3:b3:b2:53:76:58:
                    93:76:e3:5a:28:ce:f1:e8:8f:80:9f:b4:a0:f0:9a:
                    d9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:71:1E:9C:D5:FE:E6:A0:0C:AA:72:C1:8E:24:28:74:8A:7E:45:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ffc81c3-4e28-3f1e-b796-0b0fce1d8b07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.214.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:c1:ff:da:33:29:2f:84:d2:73:50:0f:23:0e:61:3c:2e:eb:
         0d:8c:d4:ce:cb:2c:17:31:b5:7d:7d:f9:2d:32:ea:31:bc:7d:
         77:e7:9e:39:bc:b8:2c:b5:62:d3:ec:ed:de:87:6f:92:a8:43:
         6c:a4:b7:04:bf:c0:f5:66:03:71:5b:74:e8:c2:29:f4:7a:b0:
         4f:a0:4b:5c:d6:bf:fa:14:eb:2f:fd:be:f4:99:cf:ad:18:80:
         4a:b8:be:9c:74:f2:e6:a7:a2:95:ba:45:07:e0:79:b3:fb:6e:
         28:f2:61:4d:66:c7:df:22:94:35:98:ae:da:cd:83:0b:a2:22:
         07:e7:45:00:f2:bb:d9:1e:21:1e:60:27:33:01:89:75:14:cd:
         1b:29:17:ca:61:de:c2:57:1d:65:21:56:a6:2f:6f:4c:54:d2:
         88:d3:1e:e5:ca:11:cd:6c:dc:ca:83:79:8b:19:48:c3:57:2c:
         71:56:3b:d4:a9:2d:16:88:5f:e3:05:69:a3:58:5d:4d:90:c6:
         6f:60:21:bb:55:c1:1e:3d:32:09:24:73:14:45:c6:88:9d:c7:
         2f:eb:06:a3:8e:55:7b:c3:ad:90:74:a1:a8:de:18:0c:08:f0:
         fd:17:f2:9d:2e:4b:b7:dd:95:4d:bd:82:91:da:8e:53:9a:b8:
         47:a2:b9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----