Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6a19d2e8-0252-35af-90b4-d49198fc3c7d.roa
File:                     6a19d2e8-0252-35af-90b4-d49198fc3c7d.roa (raw, json)
Hash identifier:          Bfrov0aiwjyRUU+NR6uvS4b7rT7nT1HJCNsl1AUpkdg=
Subject key identifier:   B1:D8:A6:A4:02:82:30:83:94:38:B5:2B:E2:CB:4F:AC:E8:80:9E:78
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C4484BDE
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6a19d2e8-0252-35af-90b4-d49198fc3c7d.roa
Signing time:             Wed 19 Dec 2018 02:25:31 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:48:4b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=4d11cbe6-0e59-433e-8251-820acff0d198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:eb:e6:dc:dc:73:c1:fc:1d:ec:38:bf:e9:05:
                    05:ff:81:9a:d2:2a:f6:66:84:ee:b2:2e:a5:57:8c:
                    69:d2:83:d9:1d:61:33:7c:55:22:7b:6b:f5:45:03:
                    51:ae:18:b1:dd:56:44:bb:c8:fa:90:02:35:30:90:
                    fe:78:8e:37:fd:0c:1a:17:a1:33:f4:2d:7e:c0:b8:
                    3d:69:f5:24:14:c7:a9:a8:03:16:15:9c:cd:27:bb:
                    76:76:10:75:83:a4:da:87:47:ac:cb:8a:e8:7f:7d:
                    e3:b5:29:35:b1:cc:d0:05:dc:cb:20:79:a3:08:60:
                    77:13:61:f2:49:46:07:4e:8c:d9:1c:bc:e1:51:57:
                    5b:43:9b:05:07:fe:d3:e4:7f:96:b4:bf:31:f1:12:
                    87:b0:98:d0:d0:d8:bf:fb:74:d3:d3:41:14:0f:70:
                    fd:cc:ec:d9:60:d3:f5:36:fe:ac:e8:dd:27:0d:5d:
                    31:4e:20:91:ba:d5:d8:c0:60:40:d0:ff:d5:c0:76:
                    96:64:88:1d:5c:f9:33:57:3b:e1:4c:57:f4:da:a9:
                    ed:7c:8f:3e:95:bc:89:c1:c6:ab:e5:97:e9:00:fa:
                    44:dd:b9:61:a3:20:09:8a:91:17:4d:b7:c2:42:f0:
                    50:4e:f5:b3:43:fb:a2:cf:1e:26:82:4e:0c:9c:c5:
                    c3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D8:A6:A4:02:82:30:83:94:38:B5:2B:E2:CB:4F:AC:E8:80:9E:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6a19d2e8-0252-35af-90b4-d49198fc3c7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:43:9c:fc:76:3a:ef:70:37:78:50:23:cd:bc:92:c5:83:70:
         a4:54:e6:fc:37:4a:9c:5a:64:c4:58:c6:8f:3e:ef:1e:e5:64:
         15:1f:82:04:1d:f2:7f:ac:ef:52:41:09:00:d0:3f:b1:0c:ec:
         92:fc:c5:b6:5b:8e:25:66:c0:fa:bb:21:ed:2f:81:ae:04:d1:
         51:16:69:96:f2:d6:43:52:0d:d6:5b:1d:d9:b6:0b:78:56:5a:
         31:38:e3:c0:02:94:cd:c0:58:29:92:0e:dc:2d:cc:ec:69:28:
         7f:87:d0:99:ac:a8:ae:c6:e5:f2:5c:1d:a0:5f:5a:73:29:7a:
         97:2e:13:3a:5e:20:4a:ab:4d:44:2f:bd:4a:51:51:4f:0e:9d:
         eb:b7:c5:4e:25:ad:9e:f5:be:52:25:4b:d8:88:7c:2f:55:cd:
         2e:3c:14:a1:3e:e8:ce:41:04:90:74:4d:8d:d3:2a:49:50:cd:
         7d:89:a8:78:92:5b:94:60:2d:c1:f0:36:da:9a:93:16:d3:bf:
         82:de:09:c1:28:87:29:23:65:e6:bb:92:8f:d4:93:d1:5b:08:
         69:20:bc:c0:7c:f7:d7:6a:2a:53:9b:25:b6:87:be:ff:3b:c7:
         84:cb:f0:ae:f2:11:2e:46:c5:22:07:f4:ab:28:36:4c:19:6a:
         88:d9:d2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----