Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d1cb9622-45b3-3545-ab7f-ba9000485179.roa
File:                     d1cb9622-45b3-3545-ab7f-ba9000485179.roa (raw, json)
Hash identifier:          GZlJlP7wJZNtQArxUj/pIg35uq0RSiSd/HVR9t0mxMQ=
Subject key identifier:   A8:FD:FF:85:0C:45:5D:F9:4B:7E:36:BD:98:B8:2D:04:0D:82:C4:B9
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16834375ED1
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d1cb9622-45b3-3545-ab7f-ba9000485179.roa
Signing time:             Wed 09 Jan 2019 20:04:30 +0000
ROA not before:           Wed 09 Jan 2019 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     7224
IP address blocks:        52.46.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:68:34:37:5e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan  9 05:00:00 2019 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=d6ad2c64-a32d-4a8f-b14d-367b7a80ec7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:db:bb:21:d5:57:0d:21:e9:98:ad:24:b7:c1:
                    13:df:09:68:0e:5c:e2:d3:e4:d3:7f:4b:b0:1c:98:
                    b4:bb:06:bb:9a:d3:dc:74:8f:09:fc:93:f4:b2:3d:
                    81:fe:1c:90:92:79:01:d9:ce:8a:56:34:b8:52:60:
                    6e:09:d9:c6:3e:e9:2e:9b:2a:92:86:f2:30:2b:91:
                    59:ab:db:7a:a1:be:25:3a:88:bb:f9:f8:e7:c2:19:
                    b8:90:10:72:61:f6:3e:4c:e4:d2:c9:01:30:7e:9f:
                    bb:c6:1e:79:54:e5:a2:d5:70:77:1e:64:1d:36:d2:
                    39:56:8a:91:92:18:59:17:f5:ac:49:53:d8:ea:28:
                    c4:fe:76:7b:a1:0a:c4:39:bf:11:86:44:00:89:6d:
                    66:5c:91:f7:3c:3b:28:67:df:e5:3e:a6:2d:8a:21:
                    3c:7c:cb:9d:bf:72:aa:37:ca:71:b5:f2:be:d7:b8:
                    3d:a3:a8:8f:52:18:4d:5f:e2:53:77:c9:46:16:1c:
                    50:a2:74:50:54:32:53:e2:6f:a1:29:54:9b:0c:1c:
                    9f:6f:bb:16:eb:58:fe:4d:3e:68:48:46:7b:92:0e:
                    31:13:c2:c9:5c:a4:00:4a:8e:a2:ff:3b:ed:c9:34:
                    1f:d7:0f:a5:49:2a:72:e5:75:13:3a:ed:61:a7:ad:
                    a8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FD:FF:85:0C:45:5D:F9:4B:7E:36:BD:98:B8:2D:04:0D:82:C4:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d1cb9622-45b3-3545-ab7f-ba9000485179.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.46.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:07:42:d2:23:b2:aa:71:a7:a0:5b:da:42:25:56:e2:e1:b2:
         b3:b0:9c:e6:00:c8:ca:48:0d:f8:b0:9a:ef:d2:25:f3:f6:81:
         da:05:f1:c3:1f:a5:af:eb:24:5b:96:e4:a9:03:0b:8f:e1:88:
         4d:96:6c:1a:a6:63:f4:27:f3:70:f8:9a:56:65:6c:b4:6a:63:
         a6:74:df:d1:5c:5a:61:39:46:2b:95:cc:bb:6d:36:64:7e:53:
         77:0a:fb:29:a0:88:b9:cc:21:6a:69:01:50:1b:a3:08:8a:c2:
         bd:2f:f0:d4:83:e6:45:cb:f7:ef:51:34:71:83:98:10:a3:08:
         5c:c3:13:de:b9:d9:25:ba:b5:d6:01:f4:ee:8c:e5:9a:6c:8b:
         74:76:51:16:f4:b8:c6:d7:25:83:0d:7b:1a:09:a6:5f:ed:5a:
         b5:50:97:22:5b:5e:e8:bf:b5:0c:94:4a:9b:a4:49:80:b2:8b:
         b9:00:9a:d8:c0:a1:da:5b:78:99:2f:2e:44:15:38:98:2a:ed:
         b4:85:74:d9:fb:8f:59:ce:11:d1:3a:0b:14:29:4a:1e:b0:a5:
         e0:25:a7:79:f5:b3:cc:7a:41:81:4d:9f:3c:f9:d4:3c:61:35:
         15:ee:6a:e6:b9:22:e3:85:a4:0f:f3:81:bf:7b:d8:24:99:95:
         d7:4c:60:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----