Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6acaf119-7a02-3224-827d-61d138a68d20.roa
File:                     6acaf119-7a02-3224-827d-61d138a68d20.roa (raw, json)
Hash identifier:          Wnb5ET2McTZE10ISy4HG+RUHB/CVUTpnhnxsvtsvACw=
Subject key identifier:   08:FA:B8:F1:20:19:C8:DD:5F:31:FB:7C:1E:E7:86:F7:5A:C7:56:D0
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1669652F7D3
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6acaf119-7a02-3224-827d-61d138a68d20.roa
Signing time:             Sun 21 Oct 2018 11:11:51 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        13.248.24.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:96:52:f7:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=8a0c5c91-5f5b-462a-a5a7-e61bd76afc5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:91:ad:fb:07:4e:da:7a:c6:cf:e7:81:47:2b:
                    e7:1f:91:b9:20:e7:70:c2:22:3b:e9:39:c5:0b:bb:
                    dc:ab:8b:a6:d7:7f:fd:87:ec:d7:fb:d7:58:db:bc:
                    cf:6c:7d:7c:ef:b8:96:c9:e5:ef:b7:a8:7a:aa:d4:
                    2a:8f:ca:01:ce:fe:1c:4e:36:76:5b:c9:19:67:ce:
                    e0:e3:34:56:02:23:91:b6:ae:a4:f4:5f:84:c9:4c:
                    cd:28:88:2b:9f:8d:d0:a9:0f:03:40:83:7e:a4:9c:
                    2d:11:af:b6:29:a3:81:dc:c1:b3:69:0c:52:65:c0:
                    6f:43:9c:ad:3e:44:5c:0a:24:41:6b:7a:eb:da:fe:
                    a6:d1:0a:7f:2e:0a:54:22:e4:0e:90:f6:18:c6:5e:
                    a7:12:91:46:48:2b:fd:bb:0e:b1:13:dc:be:8a:df:
                    0a:e2:b0:49:03:01:af:15:cf:24:42:01:9c:3d:36:
                    fe:36:40:d8:c3:a2:95:a4:9a:a5:1b:dd:07:8a:5c:
                    ac:c6:a1:07:15:53:87:50:c4:72:49:7e:ef:67:c4:
                    26:6e:ca:72:66:dc:db:35:aa:06:9a:c7:57:c2:88:
                    d5:d5:fa:dc:ab:84:de:44:34:0a:e4:4e:7b:68:d8:
                    bc:1e:e0:19:59:5b:70:b7:4c:93:4f:84:a1:f3:05:
                    28:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FA:B8:F1:20:19:C8:DD:5F:31:FB:7C:1E:E7:86:F7:5A:C7:56:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6acaf119-7a02-3224-827d-61d138a68d20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.248.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:9d:da:62:45:4d:dc:e2:4f:51:12:3e:1e:25:28:79:42:f9:
         01:e9:27:4b:e9:7b:fe:3d:3c:a7:59:f8:2a:82:62:cd:8c:77:
         b7:5c:88:e4:32:e6:32:e4:e7:92:8a:b5:89:c9:4e:03:e7:f4:
         f6:59:30:f1:46:c9:b3:75:da:0d:0c:da:5e:1f:41:15:6b:de:
         9e:8d:19:88:43:28:3b:be:04:6a:04:83:82:57:77:fc:00:59:
         db:b0:01:c2:dd:24:ab:dd:2d:33:01:7c:ad:77:25:53:90:06:
         e3:e8:bb:08:bf:41:b9:b0:d4:37:93:da:37:88:00:72:c5:11:
         15:08:a5:65:9c:bf:a3:27:05:8d:88:87:bf:2b:cb:16:4c:19:
         c4:72:03:36:a5:37:2a:07:49:e0:33:a7:5c:bf:95:f5:25:7d:
         e5:19:fa:23:81:50:3e:78:b4:02:d7:36:25:8d:e0:e0:ef:15:
         fe:5c:9b:7c:e3:ff:e7:e3:58:ec:c7:44:4c:f8:cb:f9:ff:49:
         65:a9:4c:6f:96:5c:ec:7a:dc:5a:d5:68:0f:a9:b3:99:c1:33:
         78:cf:86:ca:c8:77:60:65:0d:82:10:c5:86:a6:ac:93:e1:10:
         4e:c2:74:42:aa:d6:37:8b:11:af:df:26:e6:0c:95:43:71:37:
         fe:c0:66:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----