Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64b4837a-6849-386a-91d0-a51758be8fb8.roa
File:                     64b4837a-6849-386a-91d0-a51758be8fb8.roa (raw, json)
Hash identifier:          RFXs8Kd+xeIfU6lBmIikdvlxoTg5bVWNg3Nb7fTvTHA=
Subject key identifier:   06:4F:EB:7D:C7:19:0C:2D:EB:E7:1D:BC:9B:95:F8:10:F4:A0:1C:FA
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C4691CB5
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64b4837a-6849-386a-91d0-a51758be8fb8.roa
Signing time:             Wed 19 Dec 2018 03:01:22 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:69:1c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=70e3f586-bed3-48c5-8e50-a1eaddb8df97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b3:9f:52:22:77:d6:73:0b:b3:d8:ee:69:98:
                    b6:c4:23:dd:02:28:b7:bb:09:30:cd:48:59:67:7d:
                    e4:35:14:07:5b:86:85:f9:df:77:5c:fe:6b:9a:8f:
                    46:a9:57:1a:55:b2:1a:96:2d:99:86:8c:d2:f7:90:
                    74:76:be:91:bd:af:16:c4:e7:d9:88:6b:5e:ac:2c:
                    57:e3:b4:3a:c7:ed:28:57:31:b3:e4:7f:6a:5f:59:
                    d6:7f:a4:97:e5:a4:1e:f7:56:42:2a:13:e3:e9:d5:
                    2e:27:8f:28:61:39:52:12:57:37:75:8d:ad:33:da:
                    05:ed:8f:27:fa:da:2d:5c:f4:3e:b2:4e:44:48:23:
                    a3:20:a3:39:76:cd:9a:16:44:64:a9:2c:9d:83:2d:
                    23:54:b0:0c:30:3c:a6:72:d8:2a:18:fa:f4:19:10:
                    00:ad:ae:6a:fa:ab:48:2e:d4:d9:25:db:bb:4c:c5:
                    e3:65:1d:24:72:79:d8:74:5f:9b:dd:ba:62:f4:4a:
                    6e:6b:6e:c8:ec:00:72:46:d3:b4:c9:43:96:83:69:
                    43:47:a5:0c:06:7f:08:dd:1b:28:dd:06:2a:e3:93:
                    3e:9a:46:75:51:f7:ce:bd:5a:35:69:98:37:fc:11:
                    9a:30:c5:53:0b:97:52:08:a0:c3:27:53:22:fd:ba:
                    3e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4F:EB:7D:C7:19:0C:2D:EB:E7:1D:BC:9B:95:F8:10:F4:A0:1C:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64b4837a-6849-386a-91d0-a51758be8fb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:8c:87:27:cf:2e:47:7a:b4:3b:f6:1b:d6:50:12:f7:ca:57:
         5a:7a:c7:0a:e9:8b:25:96:5c:f1:c8:55:08:c2:80:92:59:ab:
         4c:78:9d:fc:71:f0:34:49:01:1e:3b:7c:18:4a:af:38:aa:22:
         7d:5a:73:a3:dd:55:56:38:e0:da:d0:0c:8d:07:b2:4b:36:0b:
         8d:4d:b3:0d:27:0f:94:32:33:8a:c1:70:d1:08:2b:77:f3:17:
         8c:04:87:9f:e9:36:02:2a:41:e1:fb:45:24:64:af:9d:9f:b7:
         5f:42:d9:07:28:ba:d2:9a:ab:1c:48:a0:e6:6c:4c:6d:5d:e4:
         0c:19:8c:6d:7a:b2:b9:8c:e4:9f:0f:c2:9f:44:11:6a:a7:41:
         01:e0:5c:4d:3b:81:7a:7b:e4:ab:c6:bd:79:d4:6a:8f:85:1c:
         d5:0d:45:7d:7b:40:25:73:af:ec:e5:c2:a7:9a:13:42:a6:b6:
         05:9d:4b:f4:af:82:3c:c8:6c:a0:2d:b9:4d:5a:29:c7:8c:1d:
         0e:84:63:d8:23:b1:4d:06:9d:dd:02:78:cf:de:f5:4b:23:4c:
         a3:a9:2c:46:94:07:6f:cb:79:66:e6:f7:bc:88:57:c0:22:8d:
         fc:04:af:24:29:23:64:1f:4e:8b:51:ef:be:1d:47:84:26:1a:
         39:a3:37:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----