Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0df593f6-5b90-399a-ac5a-1638233b8e9b.roa
File:                     0df593f6-5b90-399a-ac5a-1638233b8e9b.roa (raw, json)
Hash identifier:          DwNkm2pnEJN0Be1rksMsUActSFoCTiDh5mVR8+k38IE=
Subject key identifier:   1B:27:D5:D8:9A:7F:90:DC:A7:95:8E:D6:C3:3C:87:D7:5B:3B:37:67
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665CD40345
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0df593f6-5b90-399a-ac5a-1638233b8e9b.roa
Signing time:             Wed 10 Oct 2018 07:14:50 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        52.76.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:d4:03:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=da74d9b6-6281-4102-8ae3-76fc239d549e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:da:e1:12:7c:55:c4:f7:66:58:b9:2f:2d:38:
                    f4:c6:aa:36:38:22:c5:19:1c:56:e3:c8:9a:e5:3c:
                    ea:40:a1:de:81:ea:3b:46:8f:96:01:29:dd:26:3f:
                    d7:36:db:9b:de:86:b1:9a:26:35:d2:76:9f:fe:35:
                    0e:0d:8b:90:e4:c8:3f:cf:56:62:86:61:c9:4a:43:
                    fd:d0:92:74:71:c7:3a:5a:b7:31:68:62:99:72:90:
                    0a:3f:90:af:df:cd:05:19:33:0e:2e:a1:f0:32:02:
                    a5:95:02:9c:37:e5:54:61:75:96:90:65:6c:ad:15:
                    0b:6c:fd:bf:70:2e:d3:00:9e:dd:eb:ce:ff:85:61:
                    27:4d:ab:e8:37:91:86:8b:5a:e4:f5:42:09:9b:03:
                    d0:53:cc:05:c1:7f:8d:cd:4d:d5:b9:f6:57:33:bc:
                    73:9c:05:9f:8c:61:d9:5e:b9:c1:c8:28:94:e6:89:
                    03:94:13:97:5b:38:e2:93:d8:2b:c2:36:d7:3a:8f:
                    01:67:95:9f:a5:84:2a:c4:fc:3a:ee:03:e1:c7:1c:
                    44:37:6c:88:ea:86:4b:9c:f8:43:e4:6d:a5:67:32:
                    60:9a:10:b5:08:7d:e7:4f:92:df:33:80:18:08:7f:
                    7d:ac:7f:15:74:60:f3:f5:43:a0:e6:80:6d:6f:86:
                    f1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:27:D5:D8:9A:7F:90:DC:A7:95:8E:D6:C3:3C:87:D7:5B:3B:37:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0df593f6-5b90-399a-ac5a-1638233b8e9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.76.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:f5:db:31:72:d2:e3:e8:c8:92:12:b8:a0:51:11:8d:d0:64:
         2c:79:88:f7:0f:37:31:e0:0c:78:c0:b5:a5:3e:d0:54:f2:03:
         9c:fc:64:3f:5a:aa:57:fb:b0:69:4b:5f:35:e9:5c:8d:71:89:
         90:d4:a6:b3:ba:69:67:47:26:1b:c4:8e:2a:04:ca:c8:1e:d9:
         d3:1e:0d:b1:ce:32:a5:a0:c1:21:50:1a:15:1d:a0:ae:67:cb:
         f6:dc:d0:40:df:36:3c:79:00:dd:65:37:69:f6:31:d5:05:f3:
         e3:57:1c:00:53:16:49:f6:a2:9a:37:f1:bb:66:b1:d6:27:11:
         75:55:61:f6:b7:0c:f3:f7:17:d4:82:33:0e:2c:87:37:33:25:
         69:bb:b1:b0:ea:64:7b:17:6b:34:e2:e1:ac:1d:4d:20:5e:d5:
         82:9b:57:6b:99:36:de:a4:c9:86:a9:00:84:8e:63:fd:25:51:
         a5:c0:53:fd:23:9a:81:d5:c5:0d:d9:60:6c:0f:eb:fe:1a:70:
         af:0d:cd:74:af:cc:28:cb:9c:b2:28:9d:26:89:f4:88:60:a3:
         d7:e0:59:6c:83:6a:8a:fb:ff:9e:02:7e:d1:70:e1:1b:82:6c:
         bb:db:d7:81:09:d6:ab:49:dd:33:0e:0f:9c:41:b3:47:d8:3e:
         84:f2:5c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----