Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/60061e9c-64ac-3149-bab2-ff0c0ce5c75b.roa
File:                     60061e9c-64ac-3149-bab2-ff0c0ce5c75b.roa (raw, json)
Hash identifier:          YKl1WaYdb4IF/IeCwlh95NhmHvov/nAf/MZ1+eCz81s=
Subject key identifier:   7F:52:E6:E0:91:93:4E:2B:69:79:48:10:A9:7E:C9:82:C0:00:86:BA
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B459D0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/60061e9c-64ac-3149-bab2-ff0c0ce5c75b.roa
Signing time:             Sun 21 Oct 2018 08:18:36 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.168.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b4:59:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=ba597349-3986-4e8f-8cb8-e7af3e53e797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8e:ee:c7:95:ae:6f:22:3a:2a:88:0f:05:f2:
                    e7:0e:c8:ec:c0:3e:6c:91:20:f0:23:58:b5:52:38:
                    7c:82:28:15:b3:2d:fc:9d:73:5c:dd:13:b9:7b:d3:
                    cd:71:dc:b2:4f:6e:3f:ae:25:e8:79:7c:93:9c:cb:
                    72:d2:41:15:cd:84:7d:5e:a9:27:6e:89:36:a6:84:
                    c6:f1:4f:3b:2d:10:6a:65:bf:f8:28:6c:2f:01:71:
                    63:0a:51:e3:25:44:9f:26:2f:c9:ab:8f:68:63:b6:
                    1b:4f:96:68:f5:08:1e:6b:67:7a:d6:ee:6c:6f:4c:
                    ca:86:ac:e2:0c:81:8c:da:81:0b:bb:fc:5a:c8:00:
                    90:9e:36:94:06:5f:38:7b:59:be:38:fc:84:aa:a6:
                    27:5a:9a:90:84:79:eb:bf:fa:2e:55:5a:83:b9:22:
                    b7:d3:0c:58:ec:8f:34:70:8c:f8:ac:49:d7:a7:a5:
                    65:5e:ea:61:b5:aa:3e:c3:24:d8:80:0a:92:6f:93:
                    17:6d:ac:10:46:d3:42:03:f2:a3:82:65:f4:28:d7:
                    2e:dc:94:68:41:bb:27:80:91:32:72:0d:ef:68:29:
                    09:bf:40:fa:f0:e0:3c:86:9d:b0:b4:8c:05:9c:fa:
                    9c:90:4f:c4:95:c9:16:93:ea:02:c1:2d:38:d4:00:
                    57:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:52:E6:E0:91:93:4E:2B:69:79:48:10:A9:7E:C9:82:C0:00:86:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/60061e9c-64ac-3149-bab2-ff0c0ce5c75b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.168.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:c3:f1:c7:4e:8c:b8:0d:fb:8f:3c:87:14:5d:61:54:26:be:
         40:11:9e:19:fc:7e:d3:88:2f:52:f1:28:5c:45:11:af:f2:31:
         e9:ed:ec:ca:81:5c:3e:34:31:8d:80:73:45:4f:6d:2e:04:40:
         c1:8a:b9:50:4e:a6:7c:a2:f0:1d:59:f3:0d:01:14:c2:b1:30:
         42:4a:e4:94:f3:d4:af:e2:06:6a:1a:69:6a:be:8f:f4:b3:2b:
         ce:ef:88:92:96:41:61:15:0b:a3:15:f8:85:2c:62:de:42:e2:
         e8:79:17:40:b3:91:c4:ff:67:51:18:ad:19:3b:3e:76:3f:79:
         6b:eb:f3:da:e8:ae:58:d5:03:37:8f:30:10:a2:5c:0e:d8:22:
         5d:8f:60:76:9c:6c:10:21:c8:68:b4:ac:17:df:1f:ef:28:c3:
         e7:d7:80:53:5d:e5:23:35:32:3d:b3:e1:a0:39:1c:f1:a5:17:
         c7:2c:85:5b:2c:77:32:12:81:09:6b:e7:8c:b0:d8:3b:79:be:
         9e:2e:77:d1:39:ca:d6:d5:4d:75:0f:13:7c:50:2c:00:b1:24:
         7b:3c:61:78:47:db:45:cc:05:dd:f6:3f:94:f1:b3:08:27:dd:
         09:a5:98:73:00:ec:1a:6b:79:05:b5:9d:eb:96:97:21:19:64:
         e0:ed:fe:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----