Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a86cd503-1c4c-30c5-8d5e-f6a7ab23f48b.roa
File:                     a86cd503-1c4c-30c5-8d5e-f6a7ab23f48b.roa (raw, json)
Hash identifier:          CGikwrR0JcWly6fu4sSB6hOGvCMXR8VxBH+Lznaabww=
Subject key identifier:   F3:4E:CE:1D:ED:9C:77:EE:46:CF:9B:4F:3A:23:E8:37:7C:46:1E:25
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C469027D
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a86cd503-1c4c-30c5-8d5e-f6a7ab23f48b.roa
Signing time:             Wed 19 Dec 2018 03:01:15 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:69:02:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=be138ed0-ba8e-4521-8fe9-b51d16b48010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6f:cb:78:97:7d:ef:b6:10:15:00:ed:26:2d:
                    0c:7b:de:c9:e1:06:4b:2a:42:26:c0:7e:60:3e:c2:
                    f6:d4:d5:4c:45:c8:1f:87:c7:fb:85:53:ba:4f:05:
                    94:d4:8b:88:ee:81:15:e0:f7:0e:d2:c3:42:a1:65:
                    8d:4e:99:15:03:47:a6:fa:f4:39:c4:5c:10:56:7f:
                    7f:42:4c:14:96:91:c6:c8:1e:89:79:a3:16:39:b4:
                    3d:73:7a:0c:dc:ae:f6:3b:12:a2:38:dc:4e:d5:30:
                    d3:6b:9d:2b:9f:75:83:f8:c5:eb:6d:6d:e9:59:b8:
                    f4:53:82:47:fc:70:51:44:8f:8e:be:ae:27:f1:46:
                    9e:2c:2c:a8:22:dc:1d:66:d2:76:35:2a:c5:97:b7:
                    5c:66:42:a6:73:96:f0:d2:32:aa:09:3e:96:0f:79:
                    26:5a:f1:84:bd:07:ca:93:a5:7a:06:97:9c:29:76:
                    ea:77:f2:57:22:d2:15:f7:71:84:a0:bc:b4:0b:d3:
                    6d:fe:6d:1c:fc:f7:4c:1b:d4:fb:21:f2:b9:76:d7:
                    69:3f:bf:72:8e:f3:7c:45:e3:5a:d4:fc:8c:60:b7:
                    14:ac:06:27:1d:6a:e2:95:6e:53:df:30:28:5c:8f:
                    20:d6:1c:13:80:65:32:b3:4a:d9:99:79:3f:21:13:
                    27:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4E:CE:1D:ED:9C:77:EE:46:CF:9B:4F:3A:23:E8:37:7C:46:1E:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a86cd503-1c4c-30c5-8d5e-f6a7ab23f48b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:11:58:91:44:95:70:7f:28:d3:a7:b2:5f:04:ce:b0:18:36:
         19:48:42:65:e4:73:fb:fc:3a:63:3c:35:5b:3a:65:97:19:ca:
         87:e6:b4:2f:74:d7:40:8b:99:93:96:40:4d:cc:a2:2d:81:3b:
         7c:f6:ea:74:40:3a:44:e8:48:1b:5a:f5:1c:97:17:ad:eb:bc:
         e9:1a:b1:a8:13:1e:07:70:21:97:70:0e:ca:79:31:32:44:a8:
         bb:76:01:9a:b3:eb:3c:0b:ed:78:0a:ae:bc:91:4c:1d:b5:0e:
         70:bb:47:8b:86:13:cb:52:1f:11:4c:4d:2a:35:9a:19:73:42:
         54:de:86:12:1a:4a:ad:de:c8:3b:b6:c5:74:1a:04:e7:cf:76:
         ef:fe:2b:ba:5d:4d:d7:a6:bc:d6:90:a1:83:e5:f3:d4:d5:f9:
         31:9f:72:df:55:c3:a9:43:b4:2a:ee:7c:4f:7f:b8:7c:c1:83:
         d4:4e:ca:92:30:2a:8d:7d:cb:1d:d7:64:05:99:b9:c8:86:67:
         e6:da:84:99:df:76:03:e2:19:a4:dc:6d:bb:5f:7b:f5:a2:71:
         08:36:8d:7d:05:6a:93:51:88:ac:9b:48:9d:83:c6:25:d0:ad:
         49:74:8a:3b:61:cc:f6:4d:1d:04:d6:d6:de:60:d3:2d:43:ce:
         e3:f1:2d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----