Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a1ea12f2-86ac-3bae-82b7-e177da43270e.roa
File:                     a1ea12f2-86ac-3bae-82b7-e177da43270e.roa (raw, json)
Hash identifier:          SwIHX4G7IzDL73gppID6PTfg4H7K7wCUSdaK5LNe40M=
Subject key identifier:   E2:CB:8E:97:36:07:DE:39:29:9D:8E:2B:CD:D9:45:E4:98:09:3E:99
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16693C74029
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a1ea12f2-86ac-3bae-82b7-e177da43270e.roa
Signing time:             Sat 20 Oct 2018 23:20:00 +0000
ROA not before:           Sat 20 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.95.146.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:93:c7:40:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 20 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=7527e71e-5599-4ed7-932a-99489578e29c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e5:ba:55:e8:12:b5:c7:bd:07:f7:04:0d:5a:
                    cd:0c:f5:33:44:cf:8b:3d:69:e3:5b:e3:54:4e:d9:
                    90:ae:f3:3a:58:b0:ad:8a:5c:ac:1c:75:e3:b0:f6:
                    5e:b0:ff:7b:4e:13:dc:1d:06:d8:df:32:33:0b:6c:
                    7a:3e:d4:32:4c:ff:53:d3:8e:6e:43:0e:ae:5f:b4:
                    9f:37:6a:1e:56:e6:44:00:79:9d:ff:1e:ea:ca:6e:
                    db:d5:73:b8:a3:e6:bd:a0:db:fc:46:8b:7a:77:2c:
                    75:c0:4f:39:7a:6a:e8:93:80:63:d9:db:b8:6d:4f:
                    36:41:dc:10:29:2f:47:7b:d1:6f:db:b2:48:7b:ba:
                    82:84:7c:57:3d:43:32:f5:16:f6:00:d8:0e:50:2e:
                    35:93:99:45:1f:93:46:6f:e3:f0:74:5b:57:b3:02:
                    2b:dc:da:fa:6a:26:ab:5f:40:25:8e:33:c8:3b:eb:
                    b0:a2:0a:51:12:57:a7:82:f9:9b:ff:ef:9b:4b:8c:
                    97:25:32:a5:b8:7a:44:9a:c7:15:f6:30:81:28:19:
                    90:27:19:3c:ce:44:e9:34:11:5d:9a:75:ba:ba:42:
                    3f:f6:d8:30:15:bc:f3:a0:8b:c4:9b:f6:67:6c:ec:
                    11:f5:67:b7:af:48:20:d6:37:1a:c0:8f:20:c5:93:
                    d7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CB:8E:97:36:07:DE:39:29:9D:8E:2B:CD:D9:45:E4:98:09:3E:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a1ea12f2-86ac-3bae-82b7-e177da43270e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.95.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:80:39:be:8c:ed:fb:1b:fe:75:73:f8:c5:11:84:26:a6:3a:
         14:ae:3f:29:09:75:be:19:49:85:8d:16:c1:1a:fa:11:77:b3:
         90:a9:dc:eb:76:10:4b:be:d9:fc:37:a0:c8:96:fb:5f:49:64:
         9d:62:ad:43:3e:2c:43:73:2e:46:7c:de:e3:59:07:1e:f5:06:
         1f:05:b1:b9:cb:7d:1c:6f:bd:d2:73:5f:6d:5f:b3:6e:c3:86:
         e2:50:c6:a0:5a:b0:50:01:37:76:bb:19:d6:ae:a1:85:46:34:
         93:a0:f9:c3:89:e4:3e:04:46:c9:59:90:18:1c:8c:a8:27:bc:
         54:ce:32:63:d1:21:eb:49:49:a6:16:f6:68:db:b1:df:d9:28:
         29:bc:26:df:8f:2a:26:51:69:23:0e:55:e7:1c:2b:b6:98:29:
         c0:59:91:1a:cc:6e:9d:2d:fc:75:c4:c7:2a:0a:80:ef:e0:7f:
         ce:fe:15:50:df:c9:f0:aa:21:67:ed:9e:e6:e6:54:bf:ef:33:
         8c:99:24:f1:45:35:0d:d9:d6:b3:21:ec:7f:d7:8c:ce:81:2d:
         57:87:ab:8b:84:70:33:ef:35:91:17:e8:e6:12:1a:be:2a:da:
         bb:03:5b:51:7f:03:3f:be:18:65:2e:ff:ba:a8:ba:12:96:44:
         67:e7:3d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----