Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c9615a3e-79dd-3d50-94d7-c04f787050e6.roa
File:                     c9615a3e-79dd-3d50-94d7-c04f787050e6.roa (raw, json)
Hash identifier:          PFqXxFG8IkMs4NbAilZPsmPua8umpXgHs677JYglqAM=
Subject key identifier:   04:E0:0A:19:1B:4D:A2:CC:DB:E9:72:A9:C5:41:DA:E0:42:03:A8:5E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1664294C450
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c9615a3e-79dd-3d50-94d7-c04f787050e6.roa
Signing time:             Fri 05 Oct 2018 04:55:37 +0000
ROA not before:           Fri 05 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.9.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:94:c4:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  5 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=72f27bc5-80fb-41af-a930-236b25c63bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:04:0c:40:6a:f9:c3:0e:39:1e:2e:07:da:59:
                    c3:28:2e:d0:56:ab:22:ce:99:b4:00:7e:2e:c6:c7:
                    8e:98:82:e1:ba:a5:fd:9c:1c:ff:7b:22:7f:f1:e9:
                    f4:d6:dd:53:6c:4c:7c:cd:f0:88:8e:8e:02:9a:e3:
                    1c:85:6f:2e:2f:d5:ec:47:40:89:e9:d4:f7:55:e6:
                    6c:20:1c:5d:8e:fd:41:c2:37:f2:f9:63:ed:3d:51:
                    19:b7:4e:02:3a:b7:e1:02:2f:7d:ca:30:ba:43:86:
                    c8:5f:2b:16:13:f1:d0:48:ce:f8:d0:7e:1c:46:18:
                    1c:0f:95:85:48:43:e2:e0:b9:3b:ee:5a:7b:29:87:
                    54:31:a6:36:c6:19:a1:fd:70:d6:9d:50:22:63:dd:
                    2b:91:ff:d0:32:c4:7a:d0:be:f7:5f:7b:2d:e0:23:
                    14:d6:5e:8a:99:b4:22:1b:99:b8:fe:6e:c8:2c:e1:
                    5f:ec:94:a7:95:66:da:d6:ff:71:de:e3:25:ba:91:
                    67:f6:a1:d7:7e:f1:d0:15:85:04:fa:5e:d3:39:95:
                    29:ae:68:13:04:ba:3a:83:ab:a5:7e:89:4a:12:ef:
                    6a:35:66:99:ae:c9:4d:56:24:3e:90:6b:f1:fb:90:
                    a9:b5:49:c6:9c:ee:e3:6f:00:5b:19:09:83:3f:95:
                    f8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E0:0A:19:1B:4D:A2:CC:DB:E9:72:A9:C5:41:DA:E0:42:03:A8:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c9615a3e-79dd-3d50-94d7-c04f787050e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.9.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:43:e5:24:1f:cb:89:e9:41:80:b7:af:d5:2d:b0:18:65:5b:
         a1:2c:33:f3:b7:c0:ba:07:50:86:87:f1:6e:d5:a4:b8:9d:3b:
         37:5d:d5:e3:3d:2d:a9:95:2e:2a:30:43:13:2c:29:91:06:2e:
         5e:97:0c:d3:87:7a:08:4b:a8:27:3e:e7:14:75:25:20:94:1f:
         d7:eb:46:a8:da:cc:69:4e:91:ea:2b:8a:56:b8:70:97:78:73:
         96:17:94:90:94:1c:78:84:a2:4f:77:3a:7d:8b:2e:95:30:aa:
         fc:21:60:6d:d5:b9:e5:d9:75:83:78:a7:78:59:4f:b2:89:74:
         1f:c3:33:f9:6e:23:45:2a:5b:13:39:12:b9:d6:fc:27:05:87:
         d8:bc:cf:41:2f:3d:38:61:d8:4d:ec:c3:98:b5:ce:40:ba:ba:
         a7:ce:70:6a:40:66:b5:9a:5d:ac:da:fa:e5:e2:f3:10:97:08:
         8d:7a:25:db:06:75:e0:08:a6:c8:e2:16:c4:cd:a7:56:ec:40:
         69:e6:93:37:24:fd:2d:ac:a6:36:a6:60:97:81:54:63:c6:cf:
         a9:45:e3:7a:ba:e9:ba:47:a7:9d:7a:82:f7:b8:78:ac:eb:d6:
         85:f3:72:40:34:80:78:e0:87:c0:09:36:1b:87:b1:6b:3e:a0:
         88:48:f6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----