Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b42a0490-84ef-32ef-aef9-82cdcab9140c.roa
File:                     b42a0490-84ef-32ef-aef9-82cdcab9140c.roa (raw, json)
Hash identifier:          2gqE5wDSxzUCgnilWYJMi4j2V1D+Z+vTx9QIzDpNlbI=
Subject key identifier:   30:BD:D8:72:F6:99:87:39:F8:69:65:27:99:1B:F2:17:48:C0:F6:98
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C4928F75
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b42a0490-84ef-32ef-aef9-82cdcab9140c.roa
Signing time:             Wed 19 Dec 2018 03:46:38 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.219.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:92:8f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=b6c91c09-2972-403d-810c-366cf3420ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f1:63:31:81:8d:f8:08:77:a3:a9:1e:bf:e0:
                    4c:d9:f3:7f:f6:32:eb:4f:95:47:6b:f3:72:ba:66:
                    42:87:08:a6:8f:03:da:63:1e:88:30:e6:1a:b7:ab:
                    a8:55:2e:ac:5e:c8:ff:a0:b8:d8:4a:1a:59:78:61:
                    3c:6e:1f:e9:04:b8:03:38:bd:48:b8:f3:68:f1:7e:
                    94:ba:4a:89:ff:d5:a8:1d:5c:85:60:4a:a5:c4:13:
                    80:e5:90:f0:bd:36:b7:dd:38:05:4b:99:f8:3d:20:
                    dc:5e:ad:71:80:cb:10:3d:6a:af:cb:5b:e5:19:8c:
                    48:d2:88:12:32:b2:14:97:ef:7b:1b:21:52:f4:63:
                    ab:f1:1f:e6:19:63:e4:a5:6b:07:cb:84:f6:6f:e9:
                    6e:18:45:99:b4:b9:1f:a0:05:ed:d5:41:1d:fe:16:
                    ee:86:90:ff:a0:11:13:18:a5:93:96:26:c9:dc:08:
                    db:7e:fd:a9:64:53:a9:08:b2:f5:bf:03:e3:96:1f:
                    49:fd:7f:ea:18:9d:f6:e9:4b:4c:5a:f8:3d:61:8b:
                    55:c8:70:f3:27:0d:1d:5c:ef:e0:f7:f3:80:c4:86:
                    e2:21:f3:e0:ea:54:db:c6:5c:f1:54:e6:81:0a:25:
                    74:13:1e:dc:6b:68:eb:f7:ce:6d:f4:61:90:e0:e1:
                    b0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:BD:D8:72:F6:99:87:39:F8:69:65:27:99:1B:F2:17:48:C0:F6:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b42a0490-84ef-32ef-aef9-82cdcab9140c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.219.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:63:cd:23:ea:01:36:ed:c9:6a:ed:02:6b:8c:1e:0e:4a:8a:
         3a:fe:a7:59:0c:04:37:07:0d:7f:0f:4e:68:9c:13:ed:dc:16:
         95:62:27:80:09:a5:1a:f0:58:29:fc:da:a6:55:e0:22:9d:5e:
         fe:b1:ec:77:f1:5d:19:cd:a5:12:db:0d:35:ba:cb:e9:25:14:
         ac:32:f7:40:34:3a:2d:fb:bd:28:b6:43:60:89:77:e5:51:2a:
         32:57:b7:bc:3e:e2:e6:12:98:f2:47:b0:ca:22:4c:4c:02:58:
         86:36:22:f3:90:e5:37:dc:c1:b7:3f:6a:ad:16:f5:d9:9c:1a:
         e2:ad:04:50:da:86:27:a6:0f:e9:c7:1f:14:79:40:a2:ca:70:
         ab:9d:fe:5d:7d:63:b6:ae:16:4b:37:bf:8e:56:f8:a9:35:4b:
         61:4e:6a:7e:af:80:68:0c:0a:01:8d:9e:69:0b:c8:88:ec:7c:
         23:5d:e9:61:a9:4a:06:f5:53:05:7d:76:cd:58:28:8c:9d:27:
         f2:aa:ab:c3:95:d2:8e:f6:84:bf:2e:bd:ad:a4:84:f2:f4:e2:
         64:0f:44:cf:30:7a:27:aa:bb:ab:a2:2f:a7:f3:d2:36:6d:63:
         f4:01:e7:f8:8c:86:7c:3e:62:38:c3:d9:df:51:9e:de:ad:46:
         6b:a3:18:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----