Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/709f7f90-128e-3d48-ad87-a871a820a19a.roa
File:                     709f7f90-128e-3d48-ad87-a871a820a19a.roa (raw, json)
Hash identifier:          qlj4B0IEcMId5GuublWjjwbjOTUD0lxRyDEkNXMYYsk=
Subject key identifier:   AB:85:61:1F:69:96:1F:63:C7:4D:4E:F4:72:E0:55:2D:39:1E:B6:E8
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665CD3E7B4
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/709f7f90-128e-3d48-ad87-a871a820a19a.roa
Signing time:             Wed 10 Oct 2018 07:14:43 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        52.74.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:d3:e7:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=961faa46-b3bc-49a6-b66b-ba364f869a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e0:41:7c:1e:2e:84:bc:88:5a:aa:09:c5:82:
                    41:37:9a:32:c3:b8:55:bf:34:77:7e:47:42:90:9c:
                    21:f5:de:33:1c:2e:f7:73:23:ee:fe:42:24:81:c3:
                    f8:17:51:2b:cc:24:8d:63:f6:71:7a:e6:49:3b:d9:
                    8e:aa:bd:69:ae:fa:28:ef:bc:66:47:bb:01:cb:02:
                    04:2b:57:6a:db:d4:d5:5b:3d:91:ec:51:8a:02:42:
                    4e:84:cb:a1:66:9c:8e:2c:fc:d0:e9:86:42:3d:ed:
                    b8:6b:ee:c3:e3:a5:cc:59:49:49:4b:bf:78:57:3a:
                    c3:76:74:d6:3b:79:07:15:78:c8:d8:f3:fb:e6:8d:
                    69:32:af:ab:8a:f6:df:7e:5e:95:b5:e9:73:68:41:
                    36:e4:79:53:45:1e:98:c0:56:44:52:99:8f:07:27:
                    2b:26:e1:84:f2:67:3e:a6:73:0e:00:99:cd:ec:2a:
                    87:cd:81:9a:51:40:d7:f0:5a:9b:a4:bc:29:80:d8:
                    0b:ed:57:ea:29:ca:30:61:1c:4e:26:d9:37:a7:41:
                    20:b1:dd:72:f6:23:3f:9e:75:ac:cf:5e:b7:a6:64:
                    b3:2a:19:8b:7d:b1:4a:ba:11:25:49:3f:aa:79:4b:
                    b8:15:4c:cd:66:fb:f5:86:43:f6:3f:8d:d2:e7:a2:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:85:61:1F:69:96:1F:63:C7:4D:4E:F4:72:E0:55:2D:39:1E:B6:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/709f7f90-128e-3d48-ad87-a871a820a19a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.74.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:44:c6:bc:4c:d0:3f:89:b0:d1:cd:d1:7e:87:5f:9b:29:21:
         c4:df:30:2d:ec:47:34:b9:68:79:51:6d:06:70:fc:49:bd:96:
         e8:5d:76:c2:18:fa:2f:89:4c:3e:c7:a3:ea:5f:34:53:1f:8b:
         a6:bb:b2:0b:0c:60:a2:a1:4a:4a:27:c3:c7:e7:2b:31:71:78:
         49:c0:f3:eb:9f:09:19:01:5a:83:02:6e:20:e8:4a:f7:8c:bf:
         68:a7:2a:97:40:e1:b7:0b:43:64:30:06:39:69:0b:b2:fc:39:
         bf:78:2d:e9:e3:3a:ac:c0:14:44:bb:0f:1f:37:19:b9:d1:b2:
         ff:45:27:3e:f5:80:a7:5a:92:dc:96:76:26:5f:4e:65:cc:89:
         98:38:39:6d:86:ca:99:e3:c4:73:da:c7:f9:28:c9:ae:43:b4:
         92:d3:73:54:48:c0:53:f9:01:47:81:09:5c:1e:f1:c5:3b:03:
         cb:c0:fb:e1:16:7e:2e:9f:38:2c:26:c9:04:0f:21:54:57:23:
         16:30:a0:6e:c3:cc:24:f5:08:a7:be:2e:83:ec:db:3e:79:5e:
         ab:5b:18:1e:89:8b:f6:c9:88:8c:d2:3e:08:c8:e8:8c:6d:a3:
         c5:90:71:ae:78:35:ab:2e:6f:67:05:5c:88:53:eb:95:a1:7e:
         bc:47:77:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----