Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7981f1ce-cc15-3c3c-bfaf-31176c582a56.roa
File:                     7981f1ce-cc15-3c3c-bfaf-31176c582a56.roa (raw, json)
Hash identifier:          Z9GGWyEKR/uWWIfQ3axSSy1xDc5tSQCFgXmLGK9RbNA=
Subject key identifier:   C0:CC:A1:AC:1A:88:C1:2B:C2:E6:9F:9F:DA:9B:D5:0C:A8:5C:8B:97
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C4A717AF
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7981f1ce-cc15-3c3c-bfaf-31176c582a56.roa
Signing time:             Wed 19 Dec 2018 04:09:04 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.219.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:a7:17:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=d03fc732-8288-4fb2-ac70-26d56075b475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:82:0e:0a:46:71:64:d1:51:eb:93:2b:a0:41:
                    8f:f9:f9:c7:d4:32:21:b0:31:7a:10:78:1b:50:d8:
                    27:37:19:d7:9d:98:91:6b:ab:67:22:cd:f6:28:d2:
                    58:96:e2:8a:ae:19:7b:7d:85:d2:0e:f7:a7:69:49:
                    d9:58:c6:a5:c9:6b:2e:ff:45:3a:9e:f3:f2:f9:6b:
                    65:1b:4d:9b:63:61:14:07:52:e9:bc:12:2b:48:34:
                    ab:af:6f:21:2a:2d:de:d6:ce:3d:f8:07:aa:dd:ec:
                    7c:eb:1d:fa:36:30:da:04:ef:65:a6:ae:ea:67:35:
                    bd:d8:1d:b9:aa:d1:61:c2:d4:21:48:3f:dd:c1:8a:
                    fe:ea:c3:fa:a6:3d:73:b3:6b:22:f0:c6:9b:16:fa:
                    72:ec:31:c8:06:b2:d8:9d:01:23:c3:17:a8:c0:43:
                    db:af:07:58:00:70:49:af:9e:d9:a1:ef:83:c0:58:
                    00:bc:79:22:12:78:2b:45:56:92:ba:0f:12:2d:27:
                    d7:e9:d5:6e:15:e1:3c:20:b6:4c:85:21:43:2a:b4:
                    af:de:ee:ff:91:ab:ff:04:70:7d:c4:fe:57:87:7e:
                    99:a9:df:81:e5:c5:f0:c6:2b:2a:f1:b1:7c:ad:6e:
                    00:cc:7b:49:5d:ac:c5:e5:1a:fb:c3:62:75:0e:d4:
                    d4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CC:A1:AC:1A:88:C1:2B:C2:E6:9F:9F:DA:9B:D5:0C:A8:5C:8B:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7981f1ce-cc15-3c3c-bfaf-31176c582a56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.219.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:c1:ed:06:7c:09:43:35:21:96:02:5d:76:f5:97:4a:06:05:
         c3:87:b7:23:0c:7d:59:38:da:45:fe:a0:a2:67:2c:63:40:b9:
         73:7f:df:29:33:3a:26:cf:3f:0f:5a:b0:2c:b9:e1:f7:7f:b4:
         4f:f3:6f:a4:ff:b8:96:44:13:93:5c:65:3d:0a:89:a6:38:39:
         cb:f4:99:ad:e5:14:79:42:ac:8d:71:fb:0c:31:3b:60:ec:65:
         6c:58:18:b6:c0:bc:0b:70:50:7f:80:9f:08:99:cd:0a:6c:95:
         b9:61:a3:2c:2d:30:9e:11:c8:61:36:08:68:40:dc:b7:eb:49:
         1d:5f:5f:ef:00:cb:e4:c6:7d:cf:3c:f1:44:05:75:76:85:99:
         95:0b:b5:88:b7:8b:32:93:db:9e:12:1a:47:07:bf:ae:fb:98:
         cd:72:b2:9e:aa:6f:90:ab:cc:0c:ed:93:7a:bb:48:4a:84:cf:
         09:15:5d:4e:d6:75:f8:cd:bf:af:f4:31:4c:84:45:fd:f2:2e:
         a7:4e:90:58:fe:a9:88:b5:05:1e:73:f0:b5:aa:5a:e4:57:4a:
         ff:3b:99:3a:85:03:dd:9b:e4:b4:db:47:1f:cc:3f:d5:53:04:
         a9:0d:8b:e3:ee:c0:c4:42:3c:c0:8e:6d:9e:50:25:f6:51:e2:
         18:71:2d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----