Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b39bf1f6-fdd2-300b-8906-bf111fccaf4f.roa
File:                     b39bf1f6-fdd2-300b-8906-bf111fccaf4f.roa (raw, json)
Hash identifier:          TrnCAMIt4Tg7g/0SUElVce4x//lc5CKrA78GB/Fz+cY=
Subject key identifier:   C8:5D:6D:05:C7:79:6F:65:2E:6B:2E:BB:F2:3F:BD:F0:D8:7D:19:EB
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B5FBE7
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b39bf1f6-fdd2-300b-8906-bf111fccaf4f.roa
Signing time:             Sun 21 Oct 2018 08:20:23 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.250.192.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b5:fb:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=c89237a7-3ea6-4de1-b9d0-0e50f9fd905c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bb:f9:93:f4:58:fa:a7:21:3e:b2:39:14:c3:
                    b2:95:e9:93:b2:81:fa:4c:fb:85:5d:56:67:f1:a0:
                    6d:24:35:85:56:d4:64:77:c6:1b:2e:3b:00:6a:12:
                    e6:9f:f6:19:8f:92:86:bd:e4:bf:fc:c7:ad:23:b6:
                    5b:4d:94:a6:01:a8:e4:7c:b3:b3:35:14:24:53:6f:
                    5b:a1:28:e6:d0:ab:a3:06:45:24:b5:b0:0a:5a:60:
                    36:dd:aa:50:22:4a:53:ef:76:1b:52:2b:83:e0:5d:
                    87:9c:87:04:45:d3:2a:4e:9f:0f:ff:1f:cf:0f:1d:
                    51:c9:42:22:f9:fd:f6:34:53:0f:20:72:80:33:16:
                    21:9b:ba:9c:21:d1:ea:cb:b6:8b:cd:6c:eb:a4:3b:
                    30:d9:28:44:a5:34:b3:02:ed:3b:8a:0c:24:23:4a:
                    ed:a2:e9:9b:30:aa:87:8d:98:0e:29:97:e5:ef:7b:
                    48:c5:60:e0:30:c0:02:91:85:29:be:5e:ef:0a:c5:
                    83:ae:48:94:e3:40:e7:ec:48:ff:2e:3b:58:8c:2a:
                    97:70:b1:f4:87:19:76:41:3a:a4:bb:3b:17:43:0f:
                    ff:d6:5d:78:46:d2:be:ee:16:95:2e:79:5a:2c:18:
                    e2:c4:96:9a:cf:a7:d0:c6:2b:d4:25:f9:86:6f:fe:
                    48:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5D:6D:05:C7:79:6F:65:2E:6B:2E:BB:F2:3F:BD:F0:D8:7D:19:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b39bf1f6-fdd2-300b-8906-bf111fccaf4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.250.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:ab:45:5b:fc:70:2b:52:6b:72:e0:5e:9b:69:7b:06:0e:a7:
         73:54:1e:33:e0:6c:8f:9c:4b:15:f9:4d:18:63:48:5c:de:e7:
         ea:9d:16:51:83:bf:6a:e3:a5:95:3b:70:11:66:44:d1:40:b6:
         d6:f2:42:56:38:5a:a2:42:72:67:42:d6:14:75:cd:c8:29:9e:
         5b:2d:1a:85:a2:48:79:b9:d1:c6:f9:b4:25:a0:eb:65:c7:b7:
         70:85:d9:1a:87:3c:3d:57:c8:23:e6:e4:10:27:49:dd:86:88:
         b0:84:64:da:6f:64:6e:8d:50:e1:02:5f:38:be:b6:4b:fd:8c:
         dd:06:a1:85:e4:fd:5f:e6:9c:f8:58:c6:e6:6a:9e:85:fa:fc:
         2c:71:a5:fa:9a:c8:b1:05:9b:cf:41:1d:ec:4c:a3:e8:1f:9f:
         38:02:de:98:af:6b:71:4b:c0:38:ce:ad:6c:b8:0b:90:85:27:
         f7:72:89:e5:22:30:80:78:c1:ff:56:02:c9:9a:53:c4:50:2e:
         a4:73:68:3e:0b:23:e1:47:d6:65:fa:20:38:0e:62:f3:6e:94:
         20:a7:25:c5:8b:45:da:6b:bb:32:4f:0b:7e:fa:64:a3:a0:d1:
         b5:b9:1d:1b:a4:69:ae:8c:d0:2e:b9:8c:3d:02:0b:d6:0c:55:
         45:9a:90:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----