Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/af70fc23-3e43-301e-95ac-0250c8e26af7.roa
File:                     af70fc23-3e43-301e-95ac-0250c8e26af7.roa (raw, json)
Hash identifier:          7YDT6gKzPyjecd7rpl491fKFgHWco3514Iv+9WLBurA=
Subject key identifier:   7F:37:5C:74:63:1F:13:EB:B5:54:E0:93:8D:E2:9C:46:B5:CF:12:DC
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16694453934
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/af70fc23-3e43-301e-95ac-0250c8e26af7.roa
Signing time:             Sun 21 Oct 2018 01:37:36 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        13.210.0.0/15 maxlen: 15

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:94:45:39:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=08143b2d-5362-436a-ba6e-01d858325b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c6:3d:48:44:99:f0:3d:06:35:dd:f8:3e:e5:
                    ba:00:54:50:21:29:12:8f:a5:5a:af:be:68:f5:b2:
                    9a:7f:23:54:cf:2f:cd:55:31:25:17:f5:75:c7:72:
                    1d:25:ff:6d:17:fa:36:94:9b:3c:e5:84:52:97:55:
                    93:4b:9d:14:cb:da:55:09:b6:a5:67:b7:d8:d7:c7:
                    2a:93:fb:a9:f5:ac:04:04:86:e2:14:ae:9e:01:42:
                    79:7e:6a:9a:76:42:da:45:7c:aa:c9:4c:2a:8f:b6:
                    07:6d:d7:f2:78:bb:ae:8d:ed:5e:b1:8e:ad:cb:63:
                    06:cd:4f:4d:e7:15:7f:bc:d7:0e:7d:78:29:52:b7:
                    5c:ee:f0:78:36:09:25:03:65:e3:3e:b9:96:cd:97:
                    8a:26:9e:47:2a:05:a5:b6:f7:f5:1d:6d:e5:4b:29:
                    aa:d1:2f:52:34:93:26:b6:8d:e9:a2:59:40:61:31:
                    d2:1b:c5:f8:3f:ab:fa:ce:87:35:da:07:fe:86:c5:
                    4d:89:13:d0:43:ef:da:f1:d0:49:cc:d0:10:81:7b:
                    08:17:16:cc:39:58:12:9d:a8:f3:53:2a:ce:d0:d1:
                    61:a6:7f:34:d1:80:7a:9a:12:5f:24:cf:18:5d:d7:
                    84:73:8a:20:a0:5d:8c:dd:3a:f0:21:07:a6:11:dd:
                    fe:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:37:5C:74:63:1F:13:EB:B5:54:E0:93:8D:E2:9C:46:B5:CF:12:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/af70fc23-3e43-301e-95ac-0250c8e26af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.210.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:92:36:53:4c:d5:62:25:3b:d2:30:c0:2a:7c:c0:c9:88:f8:
         84:cb:aa:15:bb:d7:01:51:e5:2f:e2:60:6c:ef:fc:76:d4:27:
         1f:c1:01:fe:52:3a:99:70:ee:15:45:c3:ef:c9:e7:6d:ec:81:
         9e:8a:7d:94:b3:a3:73:a2:a4:f2:f1:31:8f:81:be:ed:64:d9:
         af:bb:0f:7f:6b:07:97:1f:61:3f:2f:74:cc:2f:8c:5d:1f:c0:
         11:97:31:a7:81:cf:2a:ef:00:bf:76:a7:f2:ca:dd:5b:e7:24:
         f4:1c:73:f9:16:4d:f2:30:fb:99:e6:e4:68:cd:ac:36:e8:b7:
         32:44:d8:66:1f:d0:2e:d2:26:7a:45:13:b5:69:63:9c:84:2f:
         96:f0:fa:ee:3d:5a:dd:23:6f:db:19:69:c8:71:0c:82:68:a7:
         81:1c:2e:fe:85:40:7f:8a:51:eb:e8:e4:21:4e:44:c6:78:52:
         54:3d:6f:5f:60:c9:5e:4d:c4:94:29:12:b5:00:2e:ef:6a:7b:
         9b:dc:3b:eb:79:b5:23:67:85:34:06:7b:05:03:da:5f:bc:82:
         13:94:5f:a0:d2:23:be:b8:d8:84:e1:2f:b5:14:bd:36:1c:4c:
         fd:10:1f:3b:d7:c3:c4:8b:b2:a7:d4:a7:a4:93:bd:af:e5:b8:
         f3:98:f9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----