Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/89bc7810-661a-3fee-89dc-8317f59f86f6.roa
File:                     89bc7810-661a-3fee-89dc-8317f59f86f6.roa (raw, json)
Hash identifier:          pB5UdglZvGQENgwoW6k6yIDX+LXI7eOvUH+Kudd4VYk=
Subject key identifier:   6B:C5:DA:22:B0:76:DD:63:F5:A2:2B:C6:C1:C9:94:6A:E1:FE:79:A3
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1664BD4A4AF
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/89bc7810-661a-3fee-89dc-8317f59f86f6.roa
Signing time:             Sun 07 Oct 2018 00:01:58 +0000
ROA not before:           Sun 07 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.148.0.0/15 maxlen: 15

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:4b:d4:a4:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  7 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=3bbc022f-272e-4c21-9c9e-cfd495d8db53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:64:fa:db:51:1b:28:96:b0:29:7f:04:4c:6a:
                    82:b5:9f:5c:07:33:a8:5d:cd:94:d6:ff:93:8d:e5:
                    98:d3:cb:c0:a0:35:b8:ec:44:78:08:6e:5c:b0:e3:
                    ec:93:c9:a4:1c:a9:ed:a2:e4:26:3b:b0:ac:04:73:
                    37:4c:93:b4:3b:16:f5:97:ea:f4:0c:c0:33:1a:b1:
                    3b:86:d5:cc:3c:b6:27:6f:e0:17:82:df:0f:3b:b0:
                    c0:69:32:e9:ac:ca:45:08:82:c2:a7:83:ba:aa:14:
                    2d:a1:74:e1:a6:8b:e2:a9:db:b4:e2:9c:3f:6e:d1:
                    0b:47:a9:75:af:97:b7:dc:4f:72:41:26:29:6c:e2:
                    d6:99:71:07:5a:8b:a1:fe:e7:79:fd:0c:3c:3b:7a:
                    c7:b8:eb:79:e8:4c:45:b5:8c:6c:74:83:e1:96:7d:
                    8b:64:14:60:05:29:06:11:d9:8f:7e:8d:aa:94:6f:
                    36:b8:02:ab:55:b8:c6:1f:69:f0:ce:a5:4d:0f:c5:
                    5c:14:f8:f5:e9:11:3a:33:e1:28:3a:9e:f9:42:38:
                    fd:15:ef:0e:17:4a:54:33:d9:0c:46:56:d4:33:bf:
                    bb:23:5e:8f:a3:43:29:dd:d1:ee:c5:49:43:f8:7b:
                    f6:45:25:89:cb:95:69:80:e3:8c:59:2b:97:d9:33:
                    d4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C5:DA:22:B0:76:DD:63:F5:A2:2B:C6:C1:C9:94:6A:E1:FE:79:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/89bc7810-661a-3fee-89dc-8317f59f86f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.148.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:70:dc:f4:76:a6:f6:c1:76:bf:6e:6f:1b:90:f0:6d:aa:fc:
         76:ae:95:88:94:b8:9c:ee:82:00:d6:13:31:c0:07:2f:28:e0:
         be:06:48:c5:19:80:3e:94:2c:ce:55:94:bc:26:c7:f4:02:cc:
         9c:a7:b5:56:ed:8f:40:f6:67:db:80:28:1b:4e:c3:a2:23:cc:
         11:bf:7f:72:8e:ea:b0:bb:02:5a:18:69:d8:40:cd:2d:99:ae:
         7d:72:bb:a1:9d:b7:79:80:b0:ff:1e:7a:04:2f:2d:9c:28:c8:
         55:aa:f3:af:3b:e6:1b:45:00:0d:78:62:c5:a2:af:84:15:2c:
         49:39:0c:11:09:08:17:37:77:58:06:13:da:f5:1f:7b:f1:e8:
         79:2c:c3:08:79:43:bc:d0:d4:d5:dd:eb:7d:eb:3e:80:0b:3c:
         8b:06:f6:1c:52:4f:4a:5c:1a:86:7d:a0:cd:57:46:24:ea:e0:
         06:70:ea:a3:1b:23:5b:dc:87:9d:25:7d:a6:26:04:b0:e0:ff:
         05:3d:76:91:ec:8a:a1:ee:1a:cb:12:b3:45:89:97:34:22:37:
         24:be:b4:19:01:8b:73:51:b8:4c:1f:61:8c:dc:46:f2:30:c3:
         c1:6f:7a:e9:b6:02:6d:be:3e:6c:aa:ab:f1:fa:33:34:98:e9:
         2b:05:94:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----