Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c9bfcd9f-df96-3ac5-9ae6-5c11e51231a9.roa
File:                     c9bfcd9f-df96-3ac5-9ae6-5c11e51231a9.roa (raw, json)
Hash identifier:          KFT4/GfXIpdPongXcD8bBP2pRdCxh4FEehWAW2tJ2rE=
Subject key identifier:   84:E4:04:02:0B:10:0E:63:0E:2E:51:BF:0D:3C:DA:E1:BA:54:FF:87
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B46236
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c9bfcd9f-df96-3ac5-9ae6-5c11e51231a9.roa
Signing time:             Sun 21 Oct 2018 08:18:38 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        54.168.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b4:62:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=dc0aef6a-9bfc-4f12-a759-b32413ce7946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:98:f7:c8:d8:55:11:20:e2:be:9b:f1:c9:06:
                    59:b3:9e:7c:ba:3f:8f:83:a0:ff:bf:4c:46:53:b5:
                    47:c3:45:53:89:e9:af:e3:cd:d7:63:48:3d:d9:6a:
                    c4:14:9f:31:53:67:88:dd:98:fc:32:56:62:de:81:
                    f8:07:d3:89:d4:7e:69:64:cc:22:35:c1:31:2e:a4:
                    d4:b8:ad:a7:61:c3:89:14:ef:2a:55:75:a5:b2:f3:
                    ba:56:6c:e6:fa:ce:2d:c2:b7:37:46:f6:75:ff:27:
                    78:3e:04:97:c6:91:62:f8:d9:f7:a8:35:b9:a8:f5:
                    87:52:9a:6c:33:c7:23:d6:82:fa:5b:60:85:ee:92:
                    fd:63:28:f6:1f:5d:0f:6e:48:d0:c7:aa:90:d8:f0:
                    2d:59:d3:c9:9f:ba:98:30:13:10:52:d4:ce:31:5f:
                    b7:5d:70:9c:69:ff:d6:d8:25:18:1e:fe:c8:dc:14:
                    d4:e6:7f:90:12:a4:89:db:d0:f0:a2:b7:68:ff:42:
                    34:f3:2a:49:be:08:c3:f0:4b:87:a2:96:2e:06:e2:
                    1f:4f:60:10:03:32:79:89:11:a9:60:84:8b:84:53:
                    61:46:4e:ef:0d:a8:71:55:4f:20:62:42:3b:0b:9d:
                    9c:18:08:63:e7:09:22:88:e0:f5:65:d2:05:b2:14:
                    63:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E4:04:02:0B:10:0E:63:0E:2E:51:BF:0D:3C:DA:E1:BA:54:FF:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c9bfcd9f-df96-3ac5-9ae6-5c11e51231a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.168.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:23:eb:a1:35:eb:35:b3:5a:e0:ef:2e:18:7d:4a:5a:41:0d:
         5f:c6:99:fd:ce:69:c1:00:25:b0:3f:4a:fb:86:b1:e1:71:6e:
         00:d0:3d:d1:e3:e3:6d:fb:ef:7a:b5:5c:fb:5a:c5:7d:21:77:
         f5:57:ba:29:db:29:c0:42:27:4b:cb:c1:1b:37:8e:bb:7a:b6:
         c1:74:e6:7b:c3:e1:ac:69:31:11:71:2a:09:fe:d8:d0:ae:c5:
         1d:84:31:cb:34:7a:62:b9:1f:0a:78:19:38:45:8e:7e:1c:be:
         85:f2:3f:94:5e:f4:35:4f:b3:4d:92:12:d1:25:7d:8f:5a:5b:
         28:df:44:67:09:bd:b2:c3:2b:bb:66:03:6b:db:7e:d3:a4:76:
         61:a4:de:4a:86:8a:04:9d:6a:0e:42:29:d9:4d:a6:62:47:08:
         fc:e0:e1:07:9d:46:8c:63:3f:61:4a:38:13:91:29:2a:c6:90:
         c2:97:76:02:18:93:9e:dd:48:6d:55:7b:69:62:b7:d5:f1:50:
         74:cf:98:54:73:c7:d1:0d:b1:66:d3:ea:82:b3:af:3d:13:10:
         05:bc:08:f8:ee:a2:78:40:7d:22:f2:47:e3:84:ea:9f:47:20:
         40:49:a5:e3:a7:43:3e:97:98:62:ec:38:a3:05:7f:00:ea:a0:
         56:87:4c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----