Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d71c6bc0-bea0-3636-804f-f802047f06f3.roa
File:                     d71c6bc0-bea0-3636-804f-f802047f06f3.roa (raw, json)
Hash identifier:          xNA4Z6UNEGbLEqMFnmn1BouhVFQJpP4qsJbbHSp/TK8=
Subject key identifier:   93:A8:41:FF:AA:5C:7A:C6:9E:BE:B6:C6:A9:37:30:EE:50:44:E1:A6
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1664BC19E26
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d71c6bc0-bea0-3636-804f-f802047f06f3.roa
Signing time:             Sat 06 Oct 2018 23:41:12 +0000
ROA not before:           Sat 06 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        18.236.0.0/15 maxlen: 15

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:4b:c1:9e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  6 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=323b4a4a-de46-4730-9744-15c78449a469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e4:2b:64:59:f0:12:f8:a7:2b:04:20:1f:15:
                    37:eb:8e:a5:39:f1:83:20:22:d5:d8:ce:4c:6e:89:
                    55:77:26:fe:a7:1b:30:f2:d2:3f:11:a3:ab:42:b9:
                    68:09:d3:14:12:c4:60:8e:61:bd:c2:29:d8:34:4c:
                    08:e5:df:29:5e:e6:9c:b9:43:10:40:28:58:b0:06:
                    94:98:0b:05:f5:7f:20:0d:7e:31:65:3d:0e:34:0c:
                    5e:9a:1d:2f:c5:d5:45:f3:f8:45:65:47:8a:ee:53:
                    ee:f5:a8:87:5a:10:47:35:ab:f8:ae:08:2e:01:e2:
                    c5:0f:6a:d8:20:4a:94:42:3e:50:c7:5a:39:42:52:
                    1a:02:90:ac:3a:69:a1:17:1d:93:e2:8d:37:ed:17:
                    42:d6:35:2c:a3:8f:44:29:e3:fb:48:00:9d:65:a5:
                    37:54:d6:e8:8c:cf:a3:15:88:74:3b:1b:79:3a:42:
                    e4:5a:02:15:2e:a9:77:c5:e4:b0:6b:91:d8:9b:39:
                    2b:5b:e9:f5:71:10:f4:e6:8e:08:0e:6b:be:1d:cd:
                    79:7f:10:aa:dd:82:31:10:a6:1b:ff:52:1a:c3:f2:
                    25:a0:b9:d3:e8:b2:47:dc:07:8c:6c:89:a3:ea:66:
                    87:96:14:56:42:18:84:aa:a9:1c:59:00:11:2b:88:
                    8f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A8:41:FF:AA:5C:7A:C6:9E:BE:B6:C6:A9:37:30:EE:50:44:E1:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d71c6bc0-bea0-3636-804f-f802047f06f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.236.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:ea:ee:d9:8e:5f:49:f1:c9:c9:9a:e6:c6:5a:4a:02:37:f3:
         4a:9d:64:12:46:fc:d5:ac:0f:41:ae:44:56:bb:de:e9:85:ed:
         f8:db:b5:51:a3:a7:1d:e3:c6:9f:67:66:34:ac:6b:4c:a8:95:
         17:59:3e:d8:07:5e:fd:76:2e:88:5d:6e:77:2f:d4:68:ca:cc:
         d4:3d:5e:7b:c1:44:ca:82:be:d3:8c:b4:d7:74:53:bd:1a:e1:
         71:de:91:6e:d9:db:e5:40:a8:23:17:df:6f:7d:cf:57:cb:99:
         66:53:62:4f:70:c5:2f:d3:81:62:02:b0:10:94:5b:84:7e:2b:
         1c:f0:a3:94:f4:35:84:70:01:1a:38:b3:22:86:9a:af:6f:2c:
         4f:fc:a2:ca:7a:36:4c:42:67:0a:8c:c1:d1:a0:39:40:dd:32:
         ac:90:5d:b4:c9:17:82:d6:97:cf:1c:e3:37:45:42:79:7f:2d:
         d4:fb:f7:d1:a9:ef:8f:ee:21:ae:27:f2:29:b6:20:01:d6:b8:
         df:eb:88:83:d3:cf:3e:9d:53:af:63:23:dc:dc:42:87:2b:53:
         70:73:25:80:79:37:21:49:48:57:b2:fb:81:2e:3d:b7:0f:5c:
         da:d0:8d:78:c5:a6:07:97:bc:21:ad:cd:d9:7d:1c:f8:9f:ec:
         8b:4f:be:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----