Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/62e186ce-46aa-3e4d-ba34-d198f3b36506.roa
File:                     62e186ce-46aa-3e4d-ba34-d198f3b36506.roa (raw, json)
Hash identifier:          X7l8kbHoow9XFrgs4/iSSmW1xiZTGlE41lV/QSrZtRM=
Subject key identifier:   62:C1:7B:9E:37:61:32:80:BD:89:50:CE:71:C7:4E:CC:06:22:4E:01
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C46A1495
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/62e186ce-46aa-3e4d-ba34-d198f3b36506.roa
Signing time:             Wed 19 Dec 2018 03:02:25 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:6a:14:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=db205675-7196-4a13-a2a8-8f142d655ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:00:c3:c2:54:34:2e:ca:d9:9a:e0:7c:0f:38:
                    cf:c3:f2:60:3d:91:ed:c2:01:d6:c6:4e:89:3c:cc:
                    1a:08:c9:68:43:c8:74:6e:c6:bf:e5:c0:da:ac:f4:
                    bc:20:4b:e4:93:4e:c5:ba:64:1e:34:2d:07:65:d2:
                    6a:34:cb:22:08:39:43:2f:1d:2f:f0:1a:26:2d:da:
                    17:71:7e:ac:80:a9:6b:6a:cc:3c:1b:c7:db:97:2c:
                    cf:2d:8d:de:b3:89:14:96:fb:f7:d7:49:8f:ab:13:
                    ae:16:3a:13:56:7b:07:ab:ae:03:2b:8c:a0:20:c4:
                    db:e6:43:5b:98:7e:eb:81:8f:d0:72:0a:f7:4a:fc:
                    46:b9:8d:c5:7f:12:2f:11:f3:8f:87:70:f7:0d:04:
                    e8:ab:66:1e:48:44:8b:66:82:e6:51:ae:49:b0:28:
                    a5:3e:ae:0c:f8:58:73:21:3d:30:42:fa:cb:a6:5c:
                    1e:9d:15:81:a5:32:6b:60:a1:90:68:38:48:ba:0e:
                    99:30:69:ef:1d:95:e5:e1:74:d3:55:ed:c0:a4:53:
                    78:11:d1:8c:2f:c3:aa:7b:79:2b:01:05:f3:a1:24:
                    06:d7:43:ae:80:1b:13:16:53:9c:db:49:f6:9a:bc:
                    b8:42:8d:0a:31:7c:38:89:fd:64:ba:d2:6d:52:4d:
                    da:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C1:7B:9E:37:61:32:80:BD:89:50:CE:71:C7:4E:CC:06:22:4E:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/62e186ce-46aa-3e4d-ba34-d198f3b36506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:29:56:16:16:75:71:ff:f8:f6:c9:14:28:bf:22:3f:8d:11:
         49:75:f6:cc:39:5c:5a:d4:dc:c2:6e:4c:ad:da:1c:cd:df:4d:
         69:93:a4:dc:ab:55:4c:0d:0a:ad:0c:c5:ba:fe:ff:bb:09:b5:
         9b:e0:ef:7b:91:36:9c:6c:72:f1:e4:20:45:f4:34:90:18:78:
         a9:e5:48:5a:cb:b6:73:f6:25:3a:ad:6c:18:72:88:3f:f3:ca:
         96:23:64:d8:b8:f1:5c:69:31:a8:55:ef:30:27:9c:60:80:84:
         4a:29:88:6c:4b:df:80:b3:5e:86:62:a9:ef:88:e9:48:d6:79:
         75:29:bb:c2:36:44:1e:7c:cd:0b:da:79:3a:60:a8:5a:f1:91:
         ee:66:39:a5:4f:a3:70:35:2c:fb:fb:c7:36:37:25:4e:2c:60:
         5d:58:f8:d2:1c:f0:18:b1:f8:e4:5b:93:cd:1b:02:7a:52:6d:
         a3:47:e9:9f:f2:5b:6e:2a:72:53:38:95:6b:a8:f5:a7:a1:fa:
         a6:33:55:bc:5f:d1:99:5c:15:0f:0d:39:49:00:24:af:5d:d3:
         27:93:f8:a5:57:18:78:65:c2:bf:51:7a:0c:70:c8:c0:69:ba:
         17:0c:ed:f6:ec:97:7f:af:a9:f4:3c:13:2c:b2:c5:97:40:9a:
         fc:a0:73:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----