Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7954f481-c182-3c35-b745-40e42fda1704.roa
File:                     7954f481-c182-3c35-b745-40e42fda1704.roa (raw, json)
Hash identifier:          DcUZf+aRuAbfXy1LRmRZdUKaS8paloD/QU2zCyJTMaQ=
Subject key identifier:   A3:2D:B3:9D:E7:86:97:1B:A8:CD:9A:31:D1:12:00:4D:FE:65:C6:76
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665C0717E8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7954f481-c182-3c35-b745-40e42fda1704.roa
Signing time:             Wed 10 Oct 2018 03:31:00 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.24.0.0/14 maxlen: 14

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:07:17:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=196d8ec8-0b8d-4fd2-84fe-b48aff10f86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:99:37:1b:15:7e:a1:a7:a1:77:36:b6:eb:30:
                    cb:51:28:cc:a0:86:dd:80:21:ff:1f:3d:96:7e:f7:
                    68:c6:2f:5b:2c:d5:f1:3c:7d:f3:a7:82:ce:00:2e:
                    ec:d5:1d:ac:a5:3e:d4:28:80:22:fc:d4:3c:40:4c:
                    6f:01:a6:5f:5b:74:2d:19:4c:8f:d4:4d:00:03:db:
                    82:04:f5:48:82:a8:ca:6a:69:4f:f1:ed:88:65:f4:
                    4e:2c:81:1f:0a:3f:5a:d2:6e:44:b4:60:39:60:2b:
                    bf:61:64:ee:ca:82:0c:23:d7:a8:88:96:90:b7:7b:
                    23:1c:f7:f9:94:7a:cf:c4:74:c3:d7:d9:2c:97:46:
                    66:f6:a6:ad:81:79:28:86:2a:84:48:ef:fa:2d:64:
                    6b:1f:bf:91:b7:fc:6e:15:d5:9b:9a:b4:26:ec:c9:
                    59:c0:37:70:d8:5c:03:75:44:b3:b7:af:8b:7d:95:
                    c9:1a:f8:11:26:e0:48:6e:8f:bb:0c:ad:f5:29:0d:
                    ca:af:6e:32:ca:2c:d0:5d:86:22:25:fc:b6:f1:94:
                    c9:3f:b9:f6:ae:18:a6:37:10:fd:82:28:87:47:42:
                    61:c6:fe:c7:09:86:d4:f8:5d:50:16:14:61:f3:d6:
                    2c:1c:a6:11:9d:0a:45:1d:f2:18:39:81:93:ea:75:
                    00:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2D:B3:9D:E7:86:97:1B:A8:CD:9A:31:D1:12:00:4D:FE:65:C6:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7954f481-c182-3c35-b745-40e42fda1704.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.24.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:58:ef:85:2b:6f:54:0e:b8:7b:42:20:b7:b5:4c:9f:a6:02:
         f2:fd:a7:98:58:0a:28:48:9b:eb:93:32:a5:df:bf:ea:ec:ac:
         80:41:70:ac:ad:44:2a:55:c4:35:dd:bc:cb:27:05:0a:de:b7:
         b1:7a:f5:80:47:74:4d:9b:16:54:0c:c5:34:5c:83:76:61:0b:
         80:da:06:db:34:e1:6c:c8:bd:27:cc:24:b9:79:73:99:53:b6:
         d1:72:ff:84:22:a7:77:77:02:3d:cc:d0:c0:ce:4c:22:11:17:
         ef:78:da:9d:de:78:80:e7:6f:b2:bd:21:0f:dc:89:50:9c:d2:
         dd:38:f2:e4:a6:3b:34:e5:9d:3f:3d:81:8e:7c:58:d1:31:4c:
         a3:2b:79:4e:ab:fa:83:37:90:2b:6d:66:e8:a5:b6:79:62:10:
         ea:ff:a0:3b:80:04:56:b1:ee:00:82:d9:3c:d2:50:1b:8d:94:
         da:ee:1b:fe:f3:3d:be:de:fe:28:de:a3:2e:2b:c0:9d:2e:72:
         44:30:99:95:d9:80:46:87:13:00:2a:7a:24:84:3f:af:92:df:
         6a:84:2b:2e:30:7c:b1:30:39:fa:44:93:0a:90:66:dd:d1:eb:
         b1:2f:96:5b:7a:85:d4:42:8c:53:69:4a:ff:15:8b:b3:74:0b:
         f6:8f:54:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----