Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7f5be309-20a5-37b0-8b4d-4e09cca18ecd.roa
File:                     7f5be309-20a5-37b0-8b4d-4e09cca18ecd.roa (raw, json)
Hash identifier:          GOEBvFusCo6cmUOJ5XLyoej8J882vgzAFxC9js+3x8Y=
Subject key identifier:   71:D4:A3:5A:E8:46:CB:3A:88:D1:A9:25:E1:8E:3B:A9:10:91:3E:74
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C469B85F
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7f5be309-20a5-37b0-8b4d-4e09cca18ecd.roa
Signing time:             Wed 19 Dec 2018 03:02:02 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:69:b8:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=6db41c76-c79f-40a8-978b-9588dca270c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7c:6b:f5:bc:0a:46:a8:85:da:01:1a:fb:c9:
                    35:f7:53:24:36:a5:37:a0:d4:43:77:60:76:3f:9e:
                    08:f0:d8:65:81:de:b5:b4:5f:7d:d9:b1:b7:66:7d:
                    ad:29:6d:61:2e:09:8b:ea:29:0d:aa:4f:0a:47:86:
                    cf:2b:b9:17:95:23:88:0c:25:5a:c6:b9:65:09:ae:
                    78:3c:d8:74:ee:f4:76:c0:45:bf:45:b5:46:b5:6f:
                    8b:6b:60:1b:70:0d:b0:0c:e8:77:5a:d7:7a:c9:d6:
                    c0:16:58:8f:26:7d:e8:a9:49:88:fa:70:99:f9:1c:
                    97:8c:8b:c5:1a:7d:6e:d7:b4:cc:5d:c8:8b:c7:86:
                    61:ec:8d:68:ac:5a:a3:bf:23:65:71:04:aa:34:9b:
                    db:f7:95:fc:da:23:99:e7:a8:ba:a7:f4:db:74:44:
                    27:95:d9:3a:02:b9:56:1b:ea:1a:60:c7:04:9f:f0:
                    06:29:bc:9b:17:2f:1a:73:2c:5c:a4:24:29:29:20:
                    6e:3b:44:41:c4:a1:57:f7:d9:57:f0:65:cb:90:6c:
                    d1:7f:31:47:cc:d1:ee:ee:27:6f:06:46:64:54:aa:
                    fd:e8:ef:08:d0:ec:de:be:bc:ce:21:ab:10:24:aa:
                    f5:72:c3:b9:3f:f8:de:83:d9:f1:9b:35:70:95:10:
                    be:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D4:A3:5A:E8:46:CB:3A:88:D1:A9:25:E1:8E:3B:A9:10:91:3E:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7f5be309-20a5-37b0-8b4d-4e09cca18ecd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:9d:57:dc:f1:c0:00:13:b7:3b:82:3d:0f:32:f8:ed:16:e7:
         18:c9:5a:b8:2d:31:d0:c7:38:dd:a4:a0:a7:f6:84:18:c1:ec:
         05:b4:ad:d2:45:48:00:6d:d2:77:66:e0:c5:e0:44:af:31:e4:
         31:00:55:0d:61:ee:20:83:40:46:ea:0b:b3:8a:2a:67:7d:08:
         36:17:f2:76:08:9b:1a:48:a3:2e:cc:ad:5c:21:20:75:4e:15:
         76:d9:13:00:34:29:ba:0c:eb:da:70:4f:4e:cc:c2:a1:2f:b1:
         e3:fa:bb:3c:c4:53:f7:e0:29:dc:24:04:cc:b8:ef:64:c9:19:
         d6:7a:d8:0f:df:1e:86:df:fa:9a:02:27:90:41:8c:92:5c:38:
         75:74:ca:a1:aa:30:d4:2c:4e:70:03:c1:01:6a:13:78:95:34:
         0c:39:d6:8a:a7:cd:84:80:5b:16:db:b5:36:25:78:e7:63:39:
         ef:ca:f0:94:e5:cd:2c:0b:f1:c9:e1:4f:ee:7c:75:63:bb:c5:
         db:3f:e6:7e:e2:e7:b9:b0:02:69:b7:51:c4:c7:28:ea:5c:4c:
         36:ad:a2:47:30:22:f5:6c:d6:d4:b2:9c:23:8d:90:d4:39:ec:
         ff:8d:08:41:d7:ca:86:5b:1f:1d:16:77:7a:85:84:02:b2:6c:
         3e:5b:69:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----