Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1bafc113-5fdd-3372-bfb2-883f924e798a.roa
File:                     1bafc113-5fdd-3372-bfb2-883f924e798a.roa (raw, json)
Hash identifier:          gb9dPh00YSZUzvtbBjlgSUO2pctHhjiBSCU2UUH60g4=
Subject key identifier:   8A:BF:3B:6A:5B:58:BD:5F:88:91:58:6F:9D:EE:8B:C9:04:83:F2:8C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665D24D269
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1bafc113-5fdd-3372-bfb2-883f924e798a.roa
Signing time:             Wed 10 Oct 2018 08:43:06 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        54.169.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5d:24:d2:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=7843231e-c48c-4507-bc4b-e120de7846d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d1:41:89:39:71:0c:b5:b9:17:c8:46:94:cf:
                    83:14:13:b4:94:8c:8e:96:f1:ee:76:52:79:48:a2:
                    2f:0a:10:c4:a7:ea:7d:d1:5e:ae:50:43:6f:c9:69:
                    17:56:72:0c:63:2c:c6:77:fb:5f:b9:5e:21:9c:a5:
                    84:94:0d:ca:51:2a:74:74:68:75:9b:05:36:9a:85:
                    ff:27:37:37:13:04:fc:82:67:eb:cb:0b:1c:77:58:
                    84:6d:51:22:f7:16:7f:58:9b:8d:46:cd:d0:6a:cc:
                    a3:eb:a7:d9:72:7d:f1:b8:30:b0:15:58:bc:48:92:
                    9e:0c:b9:bf:f2:30:5e:86:34:87:65:a5:f9:8a:2f:
                    a1:3c:4a:10:b4:c1:84:dc:e9:41:27:23:cb:8a:82:
                    05:f4:99:32:77:50:3b:27:27:f6:71:df:5b:be:f5:
                    64:b1:fe:76:91:4d:e2:cd:48:5a:e4:d9:5c:d1:0f:
                    a1:f0:88:19:b5:c9:05:bf:0b:2b:55:60:ae:0c:f1:
                    03:7c:64:d2:fb:9d:23:ec:7c:45:7b:06:ba:9f:af:
                    88:f6:fb:14:a9:11:2c:3a:9a:16:d3:2a:19:6b:f9:
                    bb:f6:cb:c7:4f:fe:4b:73:48:5a:fa:d7:36:20:13:
                    df:d2:b6:11:8e:15:ca:e9:fa:2f:75:74:d3:7a:58:
                    44:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BF:3B:6A:5B:58:BD:5F:88:91:58:6F:9D:EE:8B:C9:04:83:F2:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1bafc113-5fdd-3372-bfb2-883f924e798a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.169.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:73:35:59:5f:15:bb:14:67:7c:1d:88:34:a8:f0:54:99:c7:
         e1:9d:87:90:91:37:8b:7d:fa:20:09:99:f3:10:22:2a:31:4c:
         1e:de:b1:dc:d5:22:4b:58:27:3c:5a:56:d5:a4:2e:b1:55:bd:
         03:ae:09:c0:1e:c4:03:d0:9b:fd:a0:43:ac:fb:5f:3a:fc:64:
         6f:93:a6:46:fc:82:08:7c:d2:f3:bf:9b:cb:bd:c2:20:fd:d3:
         40:50:97:e1:46:41:f1:24:f0:f4:c4:ed:c0:3e:1d:d6:7f:98:
         98:dd:84:b1:23:4c:9d:a4:35:99:a5:cc:55:a2:1f:26:12:c9:
         ad:1c:2e:f6:35:8f:67:40:a8:f1:dc:2c:be:21:78:eb:15:9d:
         a0:64:18:26:87:cf:67:ab:ec:79:0d:e8:4f:9d:6d:db:0d:d0:
         11:b6:ec:5e:be:e2:f9:d0:a7:1a:2e:48:1d:a7:21:c0:02:d7:
         a1:92:ab:f2:22:99:7c:4c:50:c5:b5:37:b0:14:f7:20:cb:17:
         c9:78:e7:c5:89:89:23:2a:ff:b6:8f:aa:11:c4:07:45:26:24:
         aa:27:c7:53:4b:02:98:94:e3:16:6c:1e:35:8b:d4:38:fa:62:
         90:e7:eb:77:09:8c:25:d5:33:0c:72:51:5a:79:23:1d:7e:e6:
         7d:2b:6f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----