Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/acdc3132-ba6d-3d00-8ede-ce5032f08c15.roa
File:                     acdc3132-ba6d-3d00-8ede-ce5032f08c15.roa (raw, json)
Hash identifier:          YOp9tAMu9II/bGvvGDI6naeff7kHtLuwdYcNAo/ndpY=
Subject key identifier:   3F:F6:D9:C7:9A:A9:DF:B6:BE:E7:EF:5C:F2:AC:B3:14:BC:14:51:13
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B43EC6
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/acdc3132-ba6d-3d00-8ede-ce5032f08c15.roa
Signing time:             Sun 21 Oct 2018 08:18:29 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.95.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b4:3e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=4805f061-7469-4df5-ac84-5d12f36dbbd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:31:82:4d:89:b9:0b:e4:08:72:44:33:f1:46:
                    6f:3b:cc:6f:2c:3b:ba:b6:ab:e8:1e:86:88:ee:b1:
                    32:05:d4:1a:51:1b:51:8c:bf:37:2c:50:65:8a:4e:
                    ea:1f:d1:7d:7f:48:aa:4c:e2:74:91:1c:30:1c:c2:
                    90:ac:0c:3d:89:2f:40:a5:57:94:01:12:7b:26:69:
                    40:c2:d8:49:7d:9b:3b:02:26:0c:89:c5:f8:70:9e:
                    32:f6:8e:91:07:76:25:bb:28:d8:5b:2c:d1:43:0f:
                    4e:85:98:ed:d3:56:70:02:c1:20:06:bf:c5:0b:ea:
                    c5:33:3f:63:74:4a:6e:ff:5e:52:fe:58:d6:39:63:
                    d2:13:18:fb:dc:c4:ee:2c:97:2e:54:5a:b9:1f:c9:
                    29:8e:c9:5e:17:2b:14:5a:5d:c1:90:ef:9b:63:67:
                    bc:f5:41:5a:9d:26:fb:29:84:93:3c:0c:0e:1e:eb:
                    77:5b:c5:fe:fe:64:3b:0a:01:9e:61:c6:af:8b:98:
                    e7:ce:58:e0:e7:6f:2d:58:42:f0:11:0e:47:cf:f7:
                    7d:24:53:5f:0a:a4:c9:9c:3a:cc:bd:4e:b9:f2:4d:
                    d5:6f:46:b6:e5:6e:53:f4:32:5c:e4:bf:a4:69:44:
                    12:1d:85:f8:40:85:35:21:2d:04:1e:4f:a4:8a:cc:
                    67:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F6:D9:C7:9A:A9:DF:B6:BE:E7:EF:5C:F2:AC:B3:14:BC:14:51:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/acdc3132-ba6d-3d00-8ede-ce5032f08c15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.95.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:36:fd:e3:28:89:88:b8:d8:3e:cc:be:32:df:d0:9a:a9:85:
         3b:68:ca:c8:3e:1d:1b:ad:a8:2e:63:a8:8d:7f:54:ee:b2:94:
         45:49:6a:b0:9b:d4:d3:0a:02:17:22:0c:5e:28:20:26:59:92:
         24:da:bf:db:4d:58:12:cc:48:29:af:0a:3d:bd:5d:c8:10:0d:
         dc:9a:2a:b0:bf:5a:a2:de:94:79:aa:e8:07:3f:78:3b:ab:8f:
         e6:b0:a0:2a:e5:4c:4a:2b:86:d2:b4:6d:0e:5f:d3:94:45:f5:
         36:47:ea:b3:32:84:12:70:f2:e8:a8:15:21:51:cd:cc:cf:49:
         f7:af:8a:78:08:e3:28:c8:fa:d4:f5:f4:32:91:da:65:65:8c:
         8f:cc:eb:ca:6f:33:cf:2a:35:23:19:c0:74:b0:b0:83:fe:5e:
         c9:24:93:28:91:c5:ca:3b:7e:4f:99:81:89:7d:b5:ff:05:de:
         92:ae:9d:d3:45:64:f1:7d:d2:dc:d2:80:57:76:dc:c1:ea:0a:
         c3:6a:58:93:cc:d8:52:cd:ec:f3:88:58:1a:cb:df:2f:c7:1e:
         58:05:97:f6:ff:3e:34:10:3c:ce:60:b5:2c:d4:e6:1d:12:30:
         c8:3b:5c:ee:c5:b0:ab:95:e4:9d:13:57:39:af:b9:b4:bd:2c:
         4e:27:b3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----