Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b1b08efc-5fb7-3ea6-a489-0a8184d5bcef.roa
File:                     b1b08efc-5fb7-3ea6-a489-0a8184d5bcef.roa (raw, json)
Hash identifier:          6bWkssjv4gow+WsFL1kNjshmHkZAkFH0xgaJcGImHrA=
Subject key identifier:   72:D1:D1:E7:83:10:05:87:93:1D:6B:BD:08:99:A0:23:3F:CF:AF:CB
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B32601
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b1b08efc-5fb7-3ea6-a489-0a8184d5bcef.roa
Signing time:             Sun 21 Oct 2018 08:17:17 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.95.56.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b3:26:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=b87d00ff-882f-4fbe-950a-d3990aa4954d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:77:d0:4d:a5:ad:77:74:17:4c:6e:dc:00:24:
                    a3:05:f4:f5:8f:83:60:f5:ac:ef:16:71:c0:f7:69:
                    a0:a8:b5:f3:07:0d:da:ca:05:ca:b3:7c:1f:30:b6:
                    d5:37:46:80:8e:a0:33:38:9d:93:6a:61:46:21:9e:
                    77:cb:94:e9:7a:d7:8a:e9:cc:6a:bc:53:fa:c1:87:
                    ca:4a:e9:13:81:55:b9:c6:0d:53:ea:39:88:4a:40:
                    d4:20:82:7c:ac:1c:ea:02:a4:97:c8:bf:eb:54:34:
                    00:a1:28:a1:d7:64:a1:29:c9:e3:4d:46:09:f0:e8:
                    3b:05:a3:e6:e2:5b:51:e5:e8:c2:45:d9:67:cf:5c:
                    79:d8:74:10:36:66:af:39:55:98:1b:6c:ad:a7:fd:
                    6b:5b:7d:f3:96:24:32:db:c1:9b:dc:02:49:ed:30:
                    d6:41:f2:be:6d:55:b2:10:49:b0:44:87:ba:40:a4:
                    80:aa:e5:c1:86:ca:d8:8e:aa:4a:f3:ce:91:6e:e1:
                    4e:01:c2:dc:77:bc:b2:c7:f9:25:bc:b4:a6:f3:79:
                    34:37:67:df:ca:c2:50:6d:21:47:77:cd:66:56:1e:
                    b3:f5:f3:70:6b:bb:57:de:59:44:c5:d2:3b:be:7c:
                    e9:f6:41:01:6e:46:f6:ea:95:2f:ae:57:29:31:8b:
                    c1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D1:D1:E7:83:10:05:87:93:1D:6B:BD:08:99:A0:23:3F:CF:AF:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b1b08efc-5fb7-3ea6-a489-0a8184d5bcef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.95.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:33:86:d2:07:a0:4a:18:3e:ca:75:81:79:e9:d3:5b:ed:22:
         ac:1e:f7:ac:3c:6d:3c:37:f9:29:b9:fb:e2:aa:e9:62:9b:db:
         49:92:d6:29:5c:d8:b4:2e:db:4a:9d:3c:49:8f:a0:ac:53:33:
         0c:b3:39:e6:91:eb:67:68:26:f2:12:2a:d8:27:25:7b:99:97:
         dc:97:9d:c7:5d:ed:06:cd:56:e8:f1:e1:e1:de:38:e4:9f:ba:
         86:20:54:e9:4b:e1:03:62:28:86:29:91:1b:b1:4c:1b:8e:a4:
         3b:de:04:7d:d0:95:4b:72:0a:d0:ad:d6:fd:26:c7:23:1b:48:
         e9:c5:bc:40:70:54:ad:99:07:c1:b0:e1:2c:2d:eb:6d:8d:51:
         6a:56:bc:90:e1:85:11:2c:d9:f8:4e:09:09:5b:b2:16:7b:e1:
         d2:e7:23:c0:f2:fe:c5:17:cd:2d:82:78:1c:8d:a3:b0:01:24:
         c3:42:a3:28:83:68:52:fd:f1:d8:1f:f9:3c:9d:26:93:67:26:
         95:76:2e:48:14:6b:a4:45:22:8a:fe:78:96:15:78:9d:f8:3b:
         57:fe:59:be:6d:df:3d:a0:ca:35:48:30:4f:5d:fb:13:7e:d2:
         a0:61:d3:58:ae:6a:71:c4:19:48:99:79:cb:73:ed:bd:56:32:
         bd:43:f0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----