Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/941360b7-cc23-30f1-bd26-6d14baf51b85.roa
File:                     941360b7-cc23-30f1-bd26-6d14baf51b85.roa (raw, json)
Hash identifier:          IKuGeA+nQYk1AwxltnH0dOI2AON4JNpIISkcTkbQIjE=
Subject key identifier:   03:A8:98:C6:AB:0B:DA:F4:2D:AD:5E:AB:D9:A8:82:2A:CE:C6:AA:16
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B2BF8D
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/941360b7-cc23-30f1-bd26-6d14baf51b85.roa
Signing time:             Sun 21 Oct 2018 08:16:51 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        18.182.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b2:bf:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=cc940bed-a06d-49b8-becc-f3d4faed6c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f1:2e:9c:1f:5f:d7:17:db:a4:d0:9e:e5:d3:
                    41:fe:60:89:fb:10:a8:9c:3b:65:42:fa:9c:7e:a6:
                    06:ba:a9:b3:a5:89:16:66:aa:1f:4b:eb:06:94:e0:
                    54:07:f6:a7:81:d1:e4:cb:85:91:51:9e:40:98:58:
                    e1:43:ca:b4:31:12:2a:e5:70:e0:69:4a:db:50:27:
                    c3:83:e2:5c:57:6d:9b:86:f2:a6:d4:f9:9d:fd:71:
                    5c:7a:fe:b0:01:1f:a5:e0:f9:5b:49:db:d0:7c:10:
                    72:df:0d:c7:9d:e4:90:8c:23:42:fb:62:6b:42:16:
                    35:0a:29:8a:9a:20:8a:89:ab:3b:6a:31:4b:d6:fd:
                    94:95:56:62:4c:ec:34:38:ab:e1:d2:51:a5:f3:5c:
                    f1:e4:47:78:ab:73:c2:ec:82:da:8c:19:c5:42:52:
                    71:5e:ee:5e:c7:47:89:f8:eb:31:24:d5:ee:d4:19:
                    8c:66:58:b6:1c:8e:5d:c6:f7:fd:c2:12:4d:0a:74:
                    a2:67:0b:f9:40:7e:12:75:e5:a5:26:f4:66:e1:71:
                    00:c8:59:71:b9:e9:84:4e:46:45:ad:11:c4:33:28:
                    dd:a0:ad:33:54:7e:32:16:c7:49:c1:af:5c:a7:e0:
                    cc:28:fb:5a:61:2f:51:31:04:4d:c3:bc:19:a0:65:
                    f8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A8:98:C6:AB:0B:DA:F4:2D:AD:5E:AB:D9:A8:82:2A:CE:C6:AA:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/941360b7-cc23-30f1-bd26-6d14baf51b85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.182.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:28:93:f1:af:a1:99:de:11:91:f2:d5:fc:d6:18:2d:e8:9e:
         43:bc:6f:ed:90:35:af:a4:c4:47:4e:25:37:ae:b9:95:39:5e:
         80:f3:c3:a8:b3:46:c8:18:97:9c:f1:84:e1:b2:34:35:8f:1f:
         ae:ae:f4:60:8e:40:12:28:c1:54:f6:09:e6:38:fe:9b:ae:4c:
         f0:45:99:99:98:ab:5b:35:a5:e0:2f:49:d2:04:9d:91:a9:fe:
         9d:24:94:6e:7f:12:a3:f7:e8:d0:2c:5c:3d:b1:1a:2b:6c:13:
         e6:f4:23:d7:7f:98:3a:a6:0b:13:20:c5:f7:6d:46:ba:ff:7c:
         d4:e1:e6:a3:b6:b9:3d:26:ee:14:70:96:6b:6f:e5:fb:01:6c:
         77:3d:2b:8b:93:26:a9:14:bb:dd:42:19:aa:2b:fb:3f:59:30:
         bb:a0:44:e0:7a:34:b5:a0:1a:71:50:c6:04:8c:01:b7:b6:97:
         a5:a3:52:e1:c0:d8:0d:f0:ed:ed:eb:1b:45:1f:60:80:eb:ff:
         13:10:43:dd:90:6a:3b:80:c2:09:ce:98:72:c5:39:7c:1d:2c:
         86:8c:c5:7c:b7:05:42:65:62:d4:52:6b:ff:e5:b6:2f:91:1e:
         30:3f:84:7f:5e:49:27:1c:ba:61:7d:a3:c4:00:3e:e1:7c:8f:
         f6:ab:d2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----