Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9e6cf846-348b-3f34-a83b-14bbb4cdb5ea.roa
File:                     9e6cf846-348b-3f34-a83b-14bbb4cdb5ea.roa (raw, json)
Hash identifier:          7Khu/Lj52Zgj1gj4sn3q2u8WSmju81Yb0BRDMP8eP98=
Subject key identifier:   E0:05:33:13:AD:4B:DA:6D:7C:99:C1:D3:FE:F5:B6:F0:59:0A:59:77
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665D24EBCE
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9e6cf846-348b-3f34-a83b-14bbb4cdb5ea.roa
Signing time:             Wed 10 Oct 2018 08:43:12 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.179.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5d:24:eb:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=f178f208-d1d9-45e8-9454-85403f68f3a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fe:a9:e1:4b:41:11:8d:d7:39:3a:39:d8:43:
                    d2:43:6b:74:7b:4b:2f:21:a6:72:ef:55:a6:a9:5a:
                    e3:43:52:eb:7c:e2:2d:08:6e:9c:14:04:69:fe:24:
                    85:c4:32:58:91:dc:59:a1:1f:7a:7a:c9:91:17:56:
                    f5:af:80:4d:23:a8:c4:67:f8:e8:42:1e:d3:b6:95:
                    56:24:3a:ca:7f:1f:94:05:de:d3:a3:c2:29:3e:80:
                    26:71:5c:fd:50:39:d7:f9:eb:d7:d7:5e:87:fa:10:
                    3b:44:33:2f:d9:63:be:e1:9f:f6:3b:85:1c:50:13:
                    41:21:9d:b9:2a:d6:25:52:e0:54:c5:25:60:24:42:
                    b6:b0:04:f3:49:9f:21:fa:03:b9:26:40:8f:36:82:
                    f3:61:9a:79:9c:6b:1e:84:15:4d:6c:7e:32:4d:96:
                    e2:60:05:87:8d:eb:f5:5d:03:bc:78:c5:05:8b:3f:
                    9f:d7:25:bc:20:89:0d:df:53:d0:75:1a:b0:b1:14:
                    58:a6:93:e7:44:3b:52:d3:79:79:e5:5a:d7:ff:a8:
                    50:97:c2:c5:9e:79:91:70:bd:54:26:21:bf:14:c9:
                    5b:9c:a9:e8:0e:8b:c5:e2:40:69:cb:a5:47:79:84:
                    92:d1:a2:80:e3:a4:3b:7c:9e:a2:e4:44:92:ee:d4:
                    c9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:05:33:13:AD:4B:DA:6D:7C:99:C1:D3:FE:F5:B6:F0:59:0A:59:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9e6cf846-348b-3f34-a83b-14bbb4cdb5ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.179.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:07:f9:dc:8e:7e:4c:46:c8:22:cd:13:95:da:c5:7e:c1:98:
         b2:cd:4c:1e:84:b2:29:df:99:77:5a:b7:94:41:f5:9a:c6:a4:
         01:c3:cf:48:81:b1:48:0a:e8:09:85:0f:2e:07:bc:47:6d:20:
         e4:5f:62:41:c5:bf:c2:32:3b:bd:76:28:e9:2c:2e:37:6c:db:
         b2:74:cd:c2:cd:4f:aa:fb:8c:2f:2d:69:21:cf:ef:ce:ef:33:
         82:1e:d9:26:c3:73:06:48:4a:8f:eb:9b:5d:e8:28:10:91:0a:
         4a:9d:24:14:53:79:03:0f:aa:a7:aa:2d:d7:3c:35:c5:45:58:
         36:45:78:44:43:64:54:be:94:22:cd:72:00:91:74:1c:cd:d5:
         45:27:3a:00:fe:fd:f2:ff:38:b0:ee:f4:93:07:25:40:49:61:
         ff:1a:f5:d0:44:b0:1e:34:d0:89:2d:3f:85:17:f7:b1:12:f5:
         6c:7c:01:e5:53:93:62:ac:2c:00:8c:13:1d:05:0b:71:66:83:
         a2:18:55:40:70:0e:61:5c:dc:19:69:a5:2a:26:6c:f6:28:3d:
         ca:ef:42:97:b7:35:44:4d:cf:aa:6c:3b:65:24:60:24:62:45:
         86:57:5a:9a:71:e3:ed:20:8e:31:e2:aa:85:9d:7f:a8:99:29:
         7c:a3:e4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----