Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/74da282a-46aa-3a21-9662-d6a962c9d8fb.roa
File:                     74da282a-46aa-3a21-9662-d6a962c9d8fb.roa (raw, json)
Hash identifier:          wU6S9FXQ5mXH/psPwQBEFxuKWoXrc/Hsta1RYTG1hX8=
Subject key identifier:   1E:F2:97:FA:31:D1:CB:2A:A8:C4:7D:78:E7:1D:BC:49:80:49:D1:19
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16694462149
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/74da282a-46aa-3a21-9662-d6a962c9d8fb.roa
Signing time:             Sun 21 Oct 2018 01:38:35 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.231.251.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:94:46:21:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=bbbf3e45-a6ae-4f87-a919-1a205349e198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:76:ce:c4:47:18:d8:a0:c6:de:ea:5d:6d:93:
                    6e:75:73:22:de:30:ff:86:71:3b:fc:b0:6e:7a:83:
                    46:22:df:e2:cd:b3:01:4e:14:72:d0:42:b1:18:f3:
                    e2:cd:73:f0:28:af:9f:2b:65:ba:8c:4d:71:43:76:
                    85:48:5f:3a:a5:1b:75:cd:a7:81:6f:85:13:7c:a0:
                    41:1a:e3:4b:6f:07:1f:48:34:a6:fa:0c:db:21:1d:
                    ae:da:08:37:13:e0:28:bc:9c:bc:96:8c:13:70:ce:
                    8b:73:87:62:3e:80:89:ff:4b:d0:d1:5f:94:e6:96:
                    3a:33:34:15:45:04:d2:8d:c5:f1:93:84:61:e8:b5:
                    35:ca:3d:3f:fd:bb:58:bd:0e:83:4d:b8:20:34:a7:
                    6f:1c:e8:11:8e:ee:e9:90:91:a4:8a:3d:48:64:84:
                    35:67:37:a7:a4:af:f4:77:64:cc:44:ba:d8:fa:ef:
                    93:bf:44:d4:0a:dd:3c:41:f6:9b:ef:85:78:cb:92:
                    69:d9:c4:bf:9c:18:9e:64:8a:66:e2:ed:dc:a0:25:
                    b2:31:0f:0f:37:ef:e9:40:eb:cb:a8:fb:a4:da:e7:
                    0c:75:1a:97:d0:66:a5:71:79:cd:08:18:90:48:42:
                    c7:ee:87:06:9b:9a:23:58:f0:f2:32:b2:98:8f:45:
                    af:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F2:97:FA:31:D1:CB:2A:A8:C4:7D:78:E7:1D:BC:49:80:49:D1:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/74da282a-46aa-3a21-9662-d6a962c9d8fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.231.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:3d:a1:f2:b6:e9:50:a0:cd:02:63:ee:ae:a9:e7:7b:c1:3b:
         4e:05:3d:aa:5a:f3:ab:10:22:a9:0d:8e:72:f3:ca:56:1f:a6:
         bb:bd:9b:c4:eb:38:e9:93:89:18:5a:7c:81:72:f1:53:62:71:
         c6:df:09:04:6a:35:58:71:c2:9a:b9:78:b0:de:65:91:5b:5c:
         a3:86:98:e7:45:e6:dd:1a:d8:61:fe:06:36:36:35:07:26:98:
         06:e3:52:4d:98:dd:38:f0:36:aa:d2:ed:a7:7b:93:bc:15:b5:
         a9:69:bf:d3:2c:4f:f3:f4:20:26:83:8c:1c:26:52:1a:a0:d4:
         3c:8e:21:3a:5e:63:05:39:06:55:47:fd:d2:6b:f8:6c:98:2d:
         e1:df:a3:87:e2:39:39:76:54:c1:71:e6:13:a8:18:15:91:0e:
         43:e4:98:13:a7:a1:6e:16:f0:f7:39:db:75:2d:4a:99:98:d9:
         ff:7c:b5:55:af:4f:5d:f9:ff:08:02:c0:c8:da:f8:58:ef:07:
         2a:03:ae:55:98:62:3e:12:4f:0f:37:34:05:42:7c:35:c5:f1:
         ec:11:8a:20:9f:44:41:e1:54:a5:21:f8:e8:ee:b4:ba:7b:8c:
         dd:c3:b4:41:70:1b:54:cf:ef:dd:bc:aa:bf:45:f5:cb:d8:5d:
         bb:e0:b9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----