Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6cca4010-f859-31b9-bb80-c92e179830b6.roa
File:                     6cca4010-f859-31b9-bb80-c92e179830b6.roa (raw, json)
Hash identifier:          8e3HvdhhSY1fSvlvl9vDoP2T6L4+rxC4F/G99dh5qxQ=
Subject key identifier:   2A:5B:80:E6:E1:94:30:CC:11:68:65:A2:EA:15:B0:32:60:92:25:C1
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C492A08F
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6cca4010-f859-31b9-bb80-c92e179830b6.roa
Signing time:             Wed 19 Dec 2018 03:46:42 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.219.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:92:a0:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=01291fa1-8f8c-4181-8129-82ed0fbe3937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b1:69:c7:6f:3c:17:5e:4d:7f:3b:1c:86:e8:
                    43:e4:42:5a:f0:d2:47:64:84:97:46:82:4f:8b:f1:
                    53:94:90:80:e6:49:a8:2d:49:7e:de:da:b3:b7:8f:
                    33:17:bf:27:4e:f4:4a:77:44:85:38:2f:01:ae:4b:
                    3a:e7:9e:0f:dc:79:51:37:28:8d:03:9c:11:07:82:
                    e9:de:02:bc:60:c1:be:d4:f8:a2:54:30:29:3f:40:
                    0e:63:bd:99:e2:3f:42:d9:d1:6e:f4:d9:e6:00:1e:
                    40:8f:01:7d:55:1d:42:37:82:c7:c6:83:8d:f1:8d:
                    45:10:16:5e:b4:1a:63:f5:4d:ba:db:e1:49:fe:f1:
                    ae:a8:a5:93:5e:75:e5:94:9c:71:b1:b0:3a:b9:43:
                    b1:29:d5:1e:b7:67:db:1f:c9:82:eb:da:ba:a7:52:
                    f2:66:e7:b0:87:23:85:b7:ca:e8:e8:55:55:82:f3:
                    b3:5b:4d:2f:7f:70:2e:04:1b:7b:ad:3b:84:46:df:
                    8b:d6:bd:44:eb:97:6a:7f:68:d9:5b:1d:e0:a8:73:
                    a0:ff:54:82:a3:f0:fd:95:04:a9:26:ac:a3:26:90:
                    0f:42:c6:77:14:31:8e:1a:bd:ef:ab:21:02:73:eb:
                    c1:5e:4f:fa:84:d4:bb:8a:16:92:6c:ca:ca:a5:8a:
                    d3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:5B:80:E6:E1:94:30:CC:11:68:65:A2:EA:15:B0:32:60:92:25:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6cca4010-f859-31b9-bb80-c92e179830b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.219.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:dd:45:75:3a:11:45:5a:8f:ed:c2:d2:9d:35:94:80:d0:b3:
         a8:e1:39:b0:97:1e:6c:9b:f1:6a:2b:7f:f8:8b:49:66:c4:ee:
         38:d4:bd:d9:c7:8b:cd:c4:e6:0f:61:35:6a:88:8e:74:0b:73:
         88:c4:72:81:20:b2:fe:a7:eb:2d:b4:34:76:ea:63:e9:7b:45:
         78:7f:cf:64:03:37:0c:1c:2d:85:ec:48:32:de:66:94:8c:6a:
         82:45:e4:c8:f2:2b:17:15:32:07:e4:46:f7:4d:02:3d:5e:61:
         01:7e:8b:80:c0:51:51:93:93:16:e2:ce:0e:ab:87:3c:6a:f3:
         ad:86:6e:ed:4f:11:82:a1:bb:63:98:b3:5a:6e:0a:92:16:ac:
         d8:07:b3:c0:c2:c8:88:32:ba:1e:ba:cf:40:d6:5d:03:27:4b:
         28:d5:bd:b8:7a:8e:83:d2:83:00:e8:f1:9e:8d:eb:8e:82:ac:
         24:5b:75:87:28:73:06:32:f0:81:fe:e2:5c:e8:69:a9:dd:0e:
         fa:2f:df:32:53:32:84:63:11:cd:e2:02:1f:7b:87:46:6d:26:
         74:65:08:18:07:4e:a0:2f:e2:5e:fb:52:e4:7d:e2:43:e9:ca:
         5a:2b:43:69:fd:49:a7:96:86:72:3a:62:54:b8:0b:c6:96:23:
         f8:14:65:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----