Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/160308d1-fec9-3d84-9cfc-0bbab9133e44.roa
File:                     160308d1-fec9-3d84-9cfc-0bbab9133e44.roa (raw, json)
Hash identifier:          BiHRn92VyTR0PsqG9Dg6OD2enjXfz3/gv/sW4Jle3Dc=
Subject key identifier:   BE:06:E3:BC:1E:16:34:BC:A1:B8:02:25:47:42:F2:44:6D:60:4F:68
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1669445D536
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/160308d1-fec9-3d84-9cfc-0bbab9133e44.roa
Signing time:             Sun 21 Oct 2018 01:38:16 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.66.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:94:45:d5:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=a76d11dc-a4ce-4e22-ab0b-60015728bc58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3d:0c:00:87:6f:fc:34:58:36:84:07:7d:7a:
                    9b:5b:f5:f1:b0:48:05:63:7a:c2:8d:d3:61:69:a4:
                    45:a8:6c:35:2b:ab:e3:8c:8f:ec:fd:4b:a4:96:5f:
                    06:36:c2:b8:82:0f:ca:9b:4a:a9:09:50:9a:6a:a9:
                    d7:46:fe:9b:de:87:6b:09:dc:eb:89:af:37:55:3f:
                    ea:28:81:78:18:c6:e5:0b:fe:4b:d0:95:50:d5:cc:
                    03:69:a2:88:f7:b1:82:bb:52:ec:b6:bf:d9:4e:a4:
                    b2:25:5f:2d:3a:97:ca:a0:b3:80:0a:81:6c:4b:15:
                    8b:a6:93:0b:39:56:7c:e9:26:dd:ef:89:75:75:8b:
                    05:d0:81:f7:7d:b2:7d:1a:58:3a:08:d9:d0:4a:4a:
                    1c:da:0b:88:f8:5c:d3:66:49:99:c2:cb:90:19:99:
                    cc:a6:05:1d:7f:da:47:22:53:9d:e3:da:54:1f:34:
                    9d:a3:7a:2c:30:9b:db:57:cb:43:7b:12:85:f6:6b:
                    91:7b:41:a3:8d:01:e1:c4:4a:2e:b9:47:d1:c7:4a:
                    0d:3a:7d:e3:56:1c:3a:ea:58:43:6c:a6:ff:65:ce:
                    ef:4c:75:6a:d5:83:fa:42:c6:50:71:86:82:f8:04:
                    12:3e:07:87:dc:b5:84:b8:3a:b7:55:eb:d1:dc:a9:
                    90:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:06:E3:BC:1E:16:34:BC:A1:B8:02:25:47:42:F2:44:6D:60:4F:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/160308d1-fec9-3d84-9cfc-0bbab9133e44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.66.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:da:e8:f1:13:27:20:44:99:99:8d:e7:13:96:99:36:a1:f9:
         78:20:d2:80:42:a9:f8:72:c0:10:2d:76:7a:8b:48:8e:35:b6:
         de:9b:4a:b0:89:d6:0b:df:57:5f:a7:3c:23:41:34:18:3d:01:
         63:e9:17:57:a9:f3:a6:84:65:89:3a:fa:19:9a:52:85:eb:fa:
         41:af:bd:5f:cb:cf:bb:8e:a3:8e:fc:c4:0c:7b:2a:79:fc:88:
         4b:f9:c5:17:5d:00:27:1d:ee:8c:51:c1:3d:18:8a:ad:b4:9b:
         75:3f:dd:12:8e:7d:d1:0c:bc:75:4e:13:41:c5:b5:9b:6b:da:
         81:eb:6f:03:3f:0c:d3:2b:68:61:84:04:07:f7:01:7f:4f:3a:
         b6:81:2c:a5:2a:5d:5d:97:b8:c2:7e:cb:f2:dd:ca:b4:f3:bb:
         98:ad:27:92:49:47:53:91:83:23:9f:02:10:d6:ab:4c:40:7a:
         bb:ce:c4:02:17:b1:9c:0e:bf:46:7b:36:44:e7:eb:df:f7:9a:
         bc:b5:ae:c9:58:5e:40:ae:63:18:a9:a7:45:02:11:04:24:9e:
         dd:a8:47:22:59:7a:8f:c0:bb:d9:76:88:16:07:15:1a:3c:71:
         4d:e9:28:92:79:a8:a2:7f:5a:6a:aa:9e:1d:b2:44:bc:14:3e:
         67:f6:86:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----