Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/839af563-6498-3c06-8a7e-a5bbddf4c731.roa
File:                     839af563-6498-3c06-8a7e-a5bbddf4c731.roa (raw, json)
Hash identifier:          yfPMV573Fdoheqxjuxt5k8tHizOjs64J1I8mJIf5VFU=
Subject key identifier:   BC:CE:F3:AA:8F:AC:E8:9E:FD:77:99:8B:F0:30:CB:A1:C5:8E:10:95
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B3B67E
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/839af563-6498-3c06-8a7e-a5bbddf4c731.roa
Signing time:             Sun 21 Oct 2018 08:17:54 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.219.4.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b3:b6:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=dc665dd0-c38e-44e0-bad1-d4d9f9e24bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0f:4d:0e:60:72:3d:7d:6c:e9:d3:21:37:51:
                    63:a1:a7:3e:f5:b9:54:46:ab:7c:a4:a1:55:29:15:
                    2b:15:64:80:46:1c:09:5b:de:05:6f:d2:2e:c8:46:
                    13:f4:b2:ff:b3:e9:66:d3:8f:b2:5a:c8:6c:e3:de:
                    ca:4e:5c:34:db:97:36:c4:20:f5:77:2b:56:e6:b0:
                    f8:d9:2c:d9:97:e9:75:87:5e:97:16:b6:a1:a6:42:
                    32:ed:7a:af:68:31:b4:a0:3e:18:4c:71:f7:83:16:
                    41:c8:9d:75:30:3b:13:95:da:f0:40:aa:4a:b7:cf:
                    3a:5d:98:91:89:56:5b:a7:ae:8d:96:ac:05:e8:46:
                    73:c1:98:66:e7:ea:58:3b:7f:ee:c2:a6:11:f2:c8:
                    d3:5a:05:68:bf:8b:f0:36:f8:75:73:12:1a:e4:aa:
                    2e:1d:6b:01:b4:18:ae:45:f4:1e:a2:e8:49:d7:37:
                    35:0a:0c:42:54:d7:e5:bd:d5:3b:8c:15:03:86:46:
                    ba:0e:09:63:18:b0:3a:a2:7a:04:47:49:bf:82:5b:
                    22:d9:1f:8a:8c:5b:2b:f7:92:23:38:fa:93:f7:13:
                    64:6f:18:f5:91:4a:41:92:32:85:8d:8a:a5:93:35:
                    b5:cf:0f:48:0a:ae:7d:bf:3a:0e:2e:b2:25:e2:ea:
                    ee:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CE:F3:AA:8F:AC:E8:9E:FD:77:99:8B:F0:30:CB:A1:C5:8E:10:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/839af563-6498-3c06-8a7e-a5bbddf4c731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.219.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:ef:bb:dd:21:c1:89:e3:40:96:02:d9:36:80:d1:09:90:86:
         ac:57:bb:1d:bb:05:b4:4e:d9:24:3f:7f:2a:fe:98:81:29:79:
         5a:4d:bd:bf:ea:3f:65:3f:50:09:a2:73:eb:1d:70:22:76:43:
         af:c4:57:db:f9:aa:47:f8:12:92:7d:c1:fb:91:86:87:7f:69:
         00:80:0b:bd:6f:5e:a2:4e:ac:81:eb:ce:41:4a:a1:5f:6d:1d:
         6f:db:b6:52:30:2f:ba:0d:71:f5:ed:44:f8:3f:39:4a:3d:a2:
         64:1c:46:28:eb:61:e4:fb:71:8e:e5:b0:48:45:22:a6:62:87:
         f4:c8:51:58:e3:01:61:ac:21:ed:8c:ee:12:49:51:2e:cc:d2:
         c1:86:80:77:9a:81:05:e3:b7:3b:fa:ab:0b:81:c9:d4:3c:90:
         95:c9:9e:b9:fe:b1:4c:21:ca:b1:fe:87:f6:be:e6:cd:78:5f:
         a9:7a:19:f8:61:2d:20:ce:2b:58:e2:eb:e5:00:7e:45:f4:3d:
         d4:aa:c6:04:f6:5c:a6:90:32:17:f6:a6:de:eb:14:99:2b:a3:
         94:bc:72:c0:b3:ce:50:aa:84:64:f7:ed:94:e5:ce:21:ab:ed:
         f8:9c:52:ef:55:c1:03:66:ca:a7:7a:67:6f:3e:5e:a4:f7:27:
         95:c6:bb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----