Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/56e71fb7-6dc3-3570-ad2f-f2f1509085f6.roa
File:                     56e71fb7-6dc3-3570-ad2f-f2f1509085f6.roa (raw, json)
Hash identifier:          FilKKzXw48X5ebKXxWsEgEY/+wX4gibpllsN2QOS67M=
Subject key identifier:   D3:67:91:8B:06:82:D2:85:52:E6:33:98:2F:FC:E3:B0:62:6D:FE:55
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B36A66
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/56e71fb7-6dc3-3570-ad2f-f2f1509085f6.roa
Signing time:             Sun 21 Oct 2018 08:17:35 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        52.194.0.0/15 maxlen: 15

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b3:6a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=4fdecfa6-6768-4c6f-85b9-f80d6e0ba591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b3:d1:5c:c2:9c:68:41:61:96:27:7a:ab:39:
                    2a:d8:cb:a0:ba:f1:44:3d:36:ee:1d:f3:8c:ee:72:
                    55:e2:84:1e:de:ae:6b:5e:72:05:a6:45:7c:7e:02:
                    8e:1f:b3:77:17:3d:d3:8c:0b:8d:d6:81:58:02:6d:
                    59:b2:0b:2b:4b:50:c3:6a:16:50:ff:4e:3f:1d:d7:
                    ca:65:8c:a0:ae:81:f1:a9:9f:9f:e0:ef:e8:1f:5d:
                    11:69:d3:fe:f6:aa:6e:2f:4a:64:1b:7c:6e:0e:67:
                    fc:15:7a:b6:9e:0c:56:2a:b0:9c:76:8c:25:81:21:
                    8e:3e:b2:12:65:e8:2b:4b:4a:9a:81:74:d1:40:6b:
                    52:19:fe:fd:df:cd:00:99:9e:9c:fe:fa:02:91:67:
                    20:da:c9:c2:f2:dc:69:0b:2b:14:99:99:d7:e3:24:
                    94:44:e8:71:90:17:33:59:4c:ce:f7:b2:4a:c5:31:
                    0b:59:17:44:fe:ac:bf:5e:90:78:ba:ce:78:83:29:
                    cd:b1:0f:c0:fd:c3:7a:05:4d:4d:0d:45:29:4a:1f:
                    29:40:5d:f8:db:13:31:9a:40:92:9f:8b:f4:fb:da:
                    44:2f:66:8c:71:07:98:3d:4a:1a:6f:8c:aa:55:04:
                    62:6e:84:7d:e4:72:5b:6b:fe:c0:9a:9a:b8:d1:fa:
                    13:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:67:91:8B:06:82:D2:85:52:E6:33:98:2F:FC:E3:B0:62:6D:FE:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/56e71fb7-6dc3-3570-ad2f-f2f1509085f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.194.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:f9:df:17:e5:3b:66:f2:96:72:d1:fc:c2:2b:28:4a:6d:35:
         35:c0:a4:0b:5b:d6:f4:d4:c6:98:6d:56:6a:0b:0a:71:48:f0:
         f4:36:d7:ff:31:9d:fb:ac:f8:88:fd:de:e4:4b:a5:e7:61:0c:
         1f:b4:8f:9e:e3:79:4e:d3:58:7a:93:3a:96:5b:c0:ff:96:b5:
         59:67:c6:ae:2c:48:0b:1f:51:24:66:64:02:0a:54:78:61:c0:
         f4:41:09:7e:42:dc:b7:c8:b8:c4:ff:19:89:7f:de:63:01:2a:
         71:b0:da:b6:53:5d:d3:55:17:b7:be:67:39:ec:b2:f6:0a:60:
         c9:00:67:90:d6:d9:45:73:56:3a:0d:af:71:35:11:81:2d:78:
         8e:8e:b3:ad:a1:d3:02:49:27:d6:2d:ef:94:a7:bc:39:5e:da:
         01:8f:62:e0:9d:c4:5a:93:03:44:90:d1:0e:00:91:7a:a4:e0:
         99:7a:19:86:86:cb:93:bd:ee:b2:9f:e7:d1:bf:42:03:77:1f:
         73:95:b8:85:37:ba:60:d9:58:5e:c0:57:1e:0f:24:1a:85:2d:
         48:f1:6a:26:82:d8:8e:7b:14:85:ab:bb:1c:17:35:0d:b6:62:
         38:24:6a:79:b7:dd:ad:ee:5d:d2:97:b5:88:06:a7:11:f8:52:
         bf:65:c5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----