Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9faec0b3-6ea9-3ae8-8d7c-3310b87d05d7.roa
File:                     9faec0b3-6ea9-3ae8-8d7c-3310b87d05d7.roa (raw, json)
Hash identifier:          InWm9NAwRoanpfD4FIzZPzzx8OhSROBF9sE1SdwKnsA=
Subject key identifier:   6C:8C:F9:A0:D8:F8:72:BB:BC:A0:CC:9A:80:F0:72:76:E0:67:B1:D4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C49180F7
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9faec0b3-6ea9-3ae8-8d7c-3310b87d05d7.roa
Signing time:             Wed 19 Dec 2018 03:45:29 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:91:80:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=6bb68d24-77ff-4a1f-9754-d881f2365f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:36:0e:aa:42:c4:d1:ed:35:ff:00:6e:39:02:
                    40:ce:29:47:96:20:7b:b0:b4:d2:3f:00:5f:20:1e:
                    4c:da:e8:9e:b0:4d:69:43:ff:fc:32:a7:49:b5:a8:
                    c9:7c:f5:1b:c0:4e:32:ac:6d:3e:4e:0b:e0:8b:5d:
                    d3:93:19:d8:96:67:6c:3a:89:bb:8a:a3:67:08:50:
                    a5:9b:62:ff:30:75:54:d3:04:5e:89:95:87:31:3a:
                    b5:02:8f:6a:ce:56:61:b9:bc:28:6f:3e:8f:98:5d:
                    33:7e:9c:1f:a5:6d:47:98:c3:ef:b0:85:89:74:75:
                    f4:a7:e2:a9:37:4a:69:d5:5d:e0:e6:75:04:07:61:
                    27:3e:f0:b3:1e:0b:35:9d:69:99:86:f2:94:a1:ac:
                    a8:0a:fc:76:e7:f0:21:8b:ee:be:0c:fb:8c:38:37:
                    25:cd:5a:c8:ae:10:a8:08:bf:95:f1:64:ed:04:e7:
                    28:b7:dc:e6:f5:07:5a:d9:16:10:17:b4:e7:83:3d:
                    09:62:4c:28:8e:4f:98:92:d4:61:44:7c:53:4c:10:
                    7c:70:af:4a:27:73:17:7d:21:17:b0:45:36:5e:9e:
                    c9:da:16:a6:8f:dc:98:57:00:cf:1c:18:1e:ab:ab:
                    47:96:e9:cd:f6:0c:0e:cc:09:d4:0a:33:6c:14:4f:
                    0b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8C:F9:A0:D8:F8:72:BB:BC:A0:CC:9A:80:F0:72:76:E0:67:B1:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9faec0b3-6ea9-3ae8-8d7c-3310b87d05d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:64:f9:ca:52:cc:15:c9:97:da:5e:6d:3f:4a:ab:ae:90:ae:
         bd:1d:f5:08:7c:8f:20:71:34:c4:0a:2d:f8:4f:92:52:cb:85:
         4b:b9:b5:44:1e:d7:2f:82:be:86:8f:49:fd:d9:69:e6:50:67:
         2c:fd:35:0e:37:5a:97:76:5c:a2:e4:d2:1e:26:d2:a6:92:6b:
         b4:f9:6a:97:de:0e:5c:b7:18:5d:1b:9b:bb:15:21:85:2f:53:
         28:c1:37:4d:d7:98:a5:a7:a6:bf:e4:27:ba:b8:a1:ca:1d:3d:
         b5:68:4c:51:15:4e:c4:8e:68:2f:6d:f1:7e:42:14:61:f5:a1:
         55:92:f5:2b:cb:b7:33:97:fb:a9:90:d3:b6:c1:67:01:ff:c6:
         07:f0:2f:84:aa:ed:2d:33:b6:b9:31:67:b2:89:26:3e:13:42:
         4b:de:66:5c:30:c8:26:d5:85:13:cc:0e:5c:9a:d3:39:ab:21:
         de:b5:70:0f:f0:a4:77:43:d3:7c:82:f6:e0:2b:e9:c3:3a:0f:
         fd:49:1c:81:66:44:d1:f9:9d:36:87:b6:d6:5c:67:7f:16:14:
         62:6a:cc:40:3a:0e:57:03:88:5f:87:78:ad:50:47:79:e9:28:
         ff:33:db:9a:e5:c4:ce:b8:51:2d:4d:62:fa:35:48:eb:c9:01:
         72:b7:1c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----