Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c74a951-205e-3480-8b0c-c90414d1a743.roa
File:                     7c74a951-205e-3480-8b0c-c90414d1a743.roa (raw, json)
Hash identifier:          Eb+QnLtq+0aSe0nWumdUEQid6b4BW/Pigq+JMF/O/SQ=
Subject key identifier:   41:E3:11:6F:94:E2:25:DA:0B:71:96:0F:18:46:81:24:C4:C2:65:A0
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1669631F48D
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c74a951-205e-3480-8b0c-c90414d1a743.roa
Signing time:             Sun 21 Oct 2018 10:35:48 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.95.148.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:96:31:f4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=325e5c93-d6a6-485f-a551-b905560d8818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e8:c0:4d:e1:0c:ef:03:aa:08:16:a3:0d:a5:
                    d3:95:58:35:38:da:f0:d1:a2:6e:04:9c:53:f6:07:
                    56:f1:75:d4:c8:4e:a4:60:ac:66:c3:18:88:63:4c:
                    43:25:9a:ab:80:b3:2f:82:60:98:60:a5:35:03:6f:
                    1d:e8:b8:b3:24:74:66:09:61:01:1b:fc:0b:12:1a:
                    a5:cc:25:b8:5a:5d:db:88:62:71:70:f0:99:10:e7:
                    76:a1:3f:56:4b:ff:41:15:8b:49:de:f2:08:08:b4:
                    d4:79:c5:c7:f5:30:64:6d:4a:7c:31:42:d7:49:95:
                    e8:1c:44:51:f7:01:d4:f7:e3:80:7a:36:4c:d7:b4:
                    9c:61:ac:91:22:cc:5b:e2:36:03:9a:e0:8d:93:a3:
                    b4:0c:40:6f:fe:74:f9:c9:98:91:c1:24:35:25:91:
                    ab:8e:c1:6a:7b:3b:94:44:20:49:63:ae:5c:84:ee:
                    f1:1a:60:87:5d:e8:07:e6:90:ab:02:cd:91:a6:3a:
                    90:fe:4d:d6:72:38:9e:5e:99:22:d3:19:73:2f:aa:
                    85:b6:9f:f4:1a:11:bd:17:cc:7d:92:66:25:51:5c:
                    02:1e:71:01:56:22:bf:25:94:8f:21:8d:f1:35:82:
                    dd:31:6a:b3:3a:89:dc:a0:a3:f5:60:06:8a:43:2b:
                    0f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E3:11:6F:94:E2:25:DA:0B:71:96:0F:18:46:81:24:C4:C2:65:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c74a951-205e-3480-8b0c-c90414d1a743.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.95.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:84:e2:d1:85:ff:24:64:16:d3:0f:52:ee:c9:4d:67:36:01:
         0d:84:1b:61:aa:81:9b:af:a7:93:e0:a0:48:39:3a:12:fd:56:
         16:42:e0:eb:58:ec:e1:94:ed:60:f0:de:47:12:2d:67:11:16:
         12:2f:3b:8f:52:73:70:be:10:ce:6b:27:c3:47:9b:b5:16:3d:
         1b:47:3d:d2:0c:16:58:7b:0f:b9:2a:08:b0:75:53:c6:c7:5e:
         e7:94:e6:a8:1d:93:c8:24:41:e6:7f:09:5f:2e:6c:c6:50:7d:
         99:97:b1:63:02:b6:36:f2:d9:b2:bd:cf:90:63:b9:97:fe:85:
         71:25:7e:9b:3a:7e:26:db:7e:f9:9b:ef:51:2c:0c:02:9b:5f:
         29:73:6f:24:2f:f2:df:1c:3d:08:0f:ac:7a:6a:8c:be:3a:84:
         22:55:89:70:1a:22:8b:ef:d9:8e:7f:c0:51:a1:c6:85:c8:b5:
         d8:64:8f:c1:c1:e7:94:eb:31:41:37:00:c3:13:60:96:91:ad:
         10:13:68:3f:06:95:63:c6:4b:dc:33:7e:e6:0c:6d:f2:57:95:
         cb:06:44:16:31:e7:4c:e9:90:02:77:94:32:18:19:63:17:37:
         32:2c:42:10:f7:76:df:8c:34:fd:83:10:66:be:97:dd:d5:31:
         19:b4:43:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----