Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7045bae1-f712-3698-97a5-c755a2cf1606.roa
File:                     7045bae1-f712-3698-97a5-c755a2cf1606.roa (raw, json)
Hash identifier:          GjA7hlRuxoGj+pWpCLTBa6OZOqGsl3+Hdg2Q9BwyjkY=
Subject key identifier:   62:C0:36:D8:BE:0D:03:D6:20:8D:A0:8F:DD:2F:1A:C6:DC:F4:9E:87
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C492DB76
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7045bae1-f712-3698-97a5-c755a2cf1606.roa
Signing time:             Wed 19 Dec 2018 03:46:58 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.219.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:92:db:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=fb44e2d6-581e-4191-a0c8-eea74008ba88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c3:63:a4:d6:ba:25:34:ad:59:a3:5c:0f:3a:
                    8f:bf:d1:26:12:b5:a6:66:89:a9:2c:7c:79:c0:74:
                    d7:17:e7:4d:0c:b8:72:6e:ce:c5:78:46:0a:f3:51:
                    3d:3a:75:1e:0f:b5:db:63:c2:81:83:36:17:8c:64:
                    f8:87:0d:9e:5e:57:05:d4:cb:b0:f2:7b:80:be:5c:
                    d0:e2:aa:a6:74:eb:db:7e:01:47:20:0a:d0:9a:65:
                    aa:cb:f4:9a:e4:3b:74:02:7e:38:27:56:d2:f6:34:
                    9a:3c:6b:52:a6:95:e6:00:5d:7c:f1:9c:0a:0d:44:
                    9f:d9:d4:98:97:d5:b9:e8:3b:49:35:1a:f3:69:84:
                    89:99:b0:33:c4:a7:c9:e2:c6:1b:1e:98:0b:68:e3:
                    06:79:40:12:2f:07:db:4a:fe:ad:cd:fe:ff:1d:9d:
                    fb:20:38:70:0e:b9:a9:d2:32:b5:00:b5:bc:0b:97:
                    34:fb:7f:58:4a:10:85:fc:1f:71:40:46:79:a7:a3:
                    b8:a5:b2:8a:2d:47:a6:02:66:69:a1:aa:41:c1:cb:
                    78:ee:bb:4d:3d:b4:3a:fc:03:50:29:69:02:99:13:
                    81:c7:bb:5c:3e:d3:3d:55:8d:2c:53:d9:5b:ad:31:
                    27:c1:d5:af:55:21:39:9a:03:0d:56:02:6a:35:ca:
                    d2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C0:36:D8:BE:0D:03:D6:20:8D:A0:8F:DD:2F:1A:C6:DC:F4:9E:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7045bae1-f712-3698-97a5-c755a2cf1606.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.219.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:a6:1b:17:ae:db:6f:c2:27:da:f9:7a:43:cc:be:ac:c1:46:
         bd:33:84:5a:62:6d:b5:be:51:a8:78:6e:e4:2e:0a:f1:9a:7d:
         88:a2:25:a3:78:80:f9:a2:7e:28:18:ad:e3:d7:37:ff:7b:62:
         c0:b1:e2:a4:49:59:34:ff:4c:00:8e:fa:6d:74:48:64:51:7f:
         55:a0:8a:81:70:80:b4:f1:d4:13:5d:cd:be:fd:7f:15:2b:a6:
         d9:8e:76:c9:d3:47:42:f3:31:c3:1f:90:07:e7:dc:d2:82:35:
         cf:84:f0:ed:02:68:11:29:72:c2:23:4e:c3:81:2c:bf:7d:04:
         bc:f6:c5:82:b2:fb:e1:95:69:88:c2:42:c8:84:e1:49:c4:d3:
         95:0c:9e:55:30:46:22:5e:50:2b:dd:4c:ba:1e:9d:fb:8c:c1:
         ad:01:13:87:d1:6e:38:0d:4c:6a:67:6a:d9:89:96:af:f3:c7:
         e1:d8:40:d7:c4:ea:78:92:7b:09:be:ac:03:ba:7c:ef:27:72:
         5c:47:56:9c:8e:0a:f1:d4:88:55:79:6d:72:8c:ef:bf:32:80:
         05:a9:71:2b:0b:a0:f8:c9:d0:09:dd:59:fe:5b:35:d7:2e:3d:
         92:ff:9b:1d:39:da:d0:1f:87:91:a8:63:a7:45:48:b6:6b:d3:
         b9:b0:73:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----