Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b5dba077-a3be-31b4-85c0-c4af07537906.roa
File:                     b5dba077-a3be-31b4-85c0-c4af07537906.roa (raw, json)
Hash identifier:          dn412LmzIt0mMmNrKCQatYA8o7YgUbnXGUZEIyiZVsw=
Subject key identifier:   31:80:61:AE:75:B1:05:E7:F7:2E:B0:48:9F:ED:16:7C:E0:62:90:26
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C4691405
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b5dba077-a3be-31b4-85c0-c4af07537906.roa
Signing time:             Wed 19 Dec 2018 03:01:20 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:69:14:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=e52292af-c8ec-4f57-b92e-dd89060308d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:12:43:60:3e:db:92:2f:45:35:55:f2:2a:46:
                    79:b7:42:f3:64:a5:3e:5b:44:df:89:5a:8a:a9:49:
                    ec:6e:a4:f7:12:83:3b:ab:5e:d5:0c:4e:55:c4:8c:
                    d6:e3:ce:e4:4b:59:1b:7c:20:2a:68:0c:d3:d5:e8:
                    22:23:5f:7e:c4:ae:1f:90:ea:fe:83:f9:92:18:f0:
                    83:bd:8d:40:fb:26:a6:28:40:92:d7:6c:67:a5:76:
                    58:c3:e6:11:ef:e0:50:f7:88:f2:f5:9c:41:af:10:
                    81:57:38:bd:a6:4b:75:12:5d:f7:60:39:49:80:ab:
                    67:3f:5f:67:11:c2:0c:91:3f:54:e5:6d:8c:4a:98:
                    94:84:e1:37:28:d4:f1:61:df:79:5f:dd:f9:4b:81:
                    99:fb:f7:1c:13:2a:09:78:6b:fe:d7:91:b7:57:da:
                    fd:f0:0b:25:d5:a4:66:d9:81:05:9a:71:f5:0d:7e:
                    60:09:79:6d:ec:ea:50:c1:12:38:35:ae:46:af:6f:
                    1e:4a:29:35:b5:86:6d:af:3b:10:fb:4f:1d:76:91:
                    84:49:d5:5c:88:5c:7c:68:bb:ac:4d:1e:a3:db:fe:
                    b7:70:5e:32:e6:5e:26:f9:f7:ac:d7:df:97:e1:34:
                    e3:92:c4:f0:ba:2e:37:99:da:fb:fe:9d:18:c1:67:
                    46:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:80:61:AE:75:B1:05:E7:F7:2E:B0:48:9F:ED:16:7C:E0:62:90:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b5dba077-a3be-31b4-85c0-c4af07537906.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:66:da:8b:7d:b9:52:65:eb:62:49:71:ba:1b:0b:b4:de:6c:
         64:a7:88:19:e4:42:93:f9:88:11:6e:45:43:95:4d:57:ff:86:
         b4:d4:c5:86:47:d0:ba:b6:a1:b0:ff:9c:e5:9e:e8:c6:3f:fc:
         58:a8:fb:e5:28:6e:cc:e7:3b:28:1e:d1:c1:8a:ca:51:a7:92:
         d8:1f:aa:86:02:9c:80:d4:38:7d:65:e3:92:19:03:93:07:38:
         07:61:20:aa:89:a1:ff:c2:51:48:97:9c:c8:9e:d4:2e:2f:aa:
         43:20:c6:96:f9:f5:5f:26:9d:5f:af:60:d4:dd:9c:ce:1e:df:
         89:8b:8f:6f:63:0d:79:fe:62:d8:c7:00:12:1b:ea:50:7f:eb:
         67:c7:c1:31:3e:07:c3:2c:e6:69:33:de:41:35:d1:9c:94:af:
         5b:80:08:19:65:fc:40:38:9c:62:62:1a:b7:36:50:bf:0c:7e:
         3b:f0:d0:f0:4c:40:9e:12:c6:6d:71:d2:0e:80:77:0e:e4:64:
         2f:30:0a:db:7e:4f:79:2e:d3:16:55:a9:f3:49:eb:3d:67:6e:
         09:eb:81:0e:b9:6c:1e:0e:c2:5a:cb:c9:68:c9:4d:2f:53:e2:
         86:89:62:7f:1a:7f:bb:d9:a0:1f:43:3f:66:91:a9:7f:b5:08:
         9b:56:69:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----