Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7ae384a3-e391-37f3-b994-67d753619782.roa
File:                     7ae384a3-e391-37f3-b994-67d753619782.roa (raw, json)
Hash identifier:          Or5VpZvz7fzFopHRCLlPh/AL3l5bjF7PkbYNG5HyRj0=
Subject key identifier:   BD:85:91:C8:66:B2:79:BB:A2:C9:5A:60:0E:36:27:8D:6B:BE:D5:38
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C4A6A841
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7ae384a3-e391-37f3-b994-67d753619782.roa
Signing time:             Wed 19 Dec 2018 04:08:35 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.219.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:a6:a8:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=032a20e8-fb92-4cef-8e38-990698a279f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f6:90:a5:a2:c2:40:96:2a:f1:f5:21:fc:b8:
                    84:df:33:f3:09:3e:8d:35:2b:0f:03:f6:ee:e2:25:
                    de:55:4e:16:27:9f:26:71:54:b6:bc:1e:50:cd:d3:
                    57:71:64:e2:65:37:e4:6c:d1:fa:a1:c5:d1:c6:5e:
                    39:fa:91:e5:77:2e:88:a7:05:d2:be:87:61:2c:e8:
                    32:61:82:8c:9d:e3:ca:2b:fc:1a:d5:87:fd:7e:d8:
                    eb:56:e8:30:9e:fa:33:d7:fd:48:90:ec:22:95:d7:
                    48:e6:2f:66:4a:a6:ca:18:d6:f4:97:c3:6b:98:ef:
                    78:4e:43:e1:77:99:f6:fc:93:b4:12:5f:80:05:21:
                    5f:25:2d:d4:ef:c4:c0:83:2e:cf:3a:5e:0d:1d:a0:
                    36:4a:39:4b:03:dd:f3:af:36:ca:d9:93:56:3a:49:
                    1c:0d:e7:f3:0d:fe:b4:eb:37:4e:bd:b1:e5:ad:43:
                    3b:ad:ae:37:b2:6e:15:3b:f2:a8:20:9b:4e:62:91:
                    1b:62:b0:56:57:9b:fd:5e:82:cf:7b:3f:8c:37:35:
                    f1:bf:0e:c2:c3:df:f5:08:13:14:82:c1:99:bb:7b:
                    12:19:c3:5b:07:9b:c4:e7:d2:9f:e0:0e:1f:34:0e:
                    49:5f:25:06:b8:4e:17:0b:0a:85:58:ae:f7:09:ed:
                    a2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:85:91:C8:66:B2:79:BB:A2:C9:5A:60:0E:36:27:8D:6B:BE:D5:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7ae384a3-e391-37f3-b994-67d753619782.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.219.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:cd:8f:15:a6:4b:0d:d0:3e:67:e2:21:73:5d:ed:64:90:f2:
         e3:43:84:3f:34:34:fb:27:19:a2:00:a4:2f:8e:f8:9d:10:f6:
         95:da:f4:73:f9:fc:22:f9:99:5a:cf:77:38:f0:4a:72:21:f2:
         8a:44:1a:7f:a0:11:b0:b4:bf:29:00:9c:fd:05:73:2a:ee:41:
         a0:1b:20:e6:08:5d:71:db:7d:bf:a9:dd:2c:33:36:e9:78:a5:
         7f:df:03:c5:1c:e3:97:88:a6:1d:20:03:56:c9:b1:b1:a1:61:
         84:3a:33:9c:7f:a1:db:a8:a8:97:fa:65:12:a1:ca:48:78:34:
         0b:40:ae:35:9c:5c:a4:05:02:b1:15:1d:e5:37:64:1d:b0:79:
         4b:a2:87:d9:50:97:40:65:a0:55:2e:c3:cb:7f:0c:88:68:2b:
         f6:b3:92:35:2f:a9:0b:c6:37:95:14:20:10:18:1d:93:04:56:
         8d:be:c2:80:56:c3:f2:63:9d:5d:8a:25:35:ef:30:89:73:40:
         3e:70:40:87:90:e5:5f:24:98:49:09:52:b9:76:0a:a1:39:89:
         80:a2:9f:a8:30:cb:82:ca:49:84:99:9e:1d:ae:0f:db:3a:24:
         98:a1:89:b7:83:86:d9:ad:dd:07:bc:73:75:c0:61:b9:21:b4:
         53:fd:46:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----