Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dc7cc4e8-19b8-3982-ad93-41403e23c39e.roa
File:                     dc7cc4e8-19b8-3982-ad93-41403e23c39e.roa (raw, json)
Hash identifier:          vNztO5tj557RCpT/K383+yKRmBZZhbrltAqJ7TY87h8=
Subject key identifier:   5B:AB:CF:C2:AC:A8:0C:4D:82:65:56:DF:A0:74:5E:E6:CC:D3:17:0A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665CD409DD
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dc7cc4e8-19b8-3982-ad93-41403e23c39e.roa
Signing time:             Wed 10 Oct 2018 07:14:52 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        52.76.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:d4:09:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=11e335f6-1450-43a1-bd03-ad921a0645ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ba:46:2b:ed:b7:fc:70:39:5e:0a:36:10:53:
                    42:35:17:2c:a6:cd:3e:f0:ad:23:6a:ca:b5:02:a5:
                    5f:3f:56:fc:01:4a:27:9e:2b:14:39:14:cf:0f:1d:
                    03:d0:81:1f:f5:17:d3:1e:19:7c:87:ab:12:c4:1d:
                    6f:c5:74:9d:dc:ea:6f:22:7e:88:74:a9:3b:4d:35:
                    72:30:ae:37:3a:7f:ce:42:02:fd:62:d1:d6:58:19:
                    5b:f9:cc:0d:86:5d:71:5c:70:8a:2e:03:80:ce:3e:
                    2c:12:9c:87:3d:3a:18:e9:a2:b5:0c:c8:7b:e9:c5:
                    0f:15:9c:df:a8:52:34:12:08:46:4d:86:9f:e8:c2:
                    65:ed:f5:44:b3:65:ac:31:b9:43:b5:13:ae:5f:fe:
                    16:3f:99:07:3d:3d:d0:31:96:e5:bb:70:1d:3d:88:
                    01:a8:35:c0:e8:8b:d3:d1:f3:24:87:36:f5:63:b3:
                    e0:0f:2a:04:c6:4b:bb:c3:14:60:92:58:77:21:ef:
                    06:e7:f2:99:37:28:a0:56:d0:5b:ff:ab:9b:48:9d:
                    19:b4:d7:6e:dd:6f:bc:11:1d:3c:3f:ac:66:a8:a1:
                    a6:27:e3:08:ff:9d:6a:c7:2c:b7:4b:ce:45:53:34:
                    97:95:fd:05:80:08:3c:f6:69:a5:16:30:df:ce:01:
                    fd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AB:CF:C2:AC:A8:0C:4D:82:65:56:DF:A0:74:5E:E6:CC:D3:17:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dc7cc4e8-19b8-3982-ad93-41403e23c39e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.76.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:19:60:e3:d5:61:4f:04:b0:1b:96:97:4e:5b:d2:96:13:ec:
         74:36:cb:32:b6:56:d8:87:3e:82:0e:e2:c2:5e:0f:5c:ec:8a:
         f0:0d:0d:77:54:d0:c0:5a:84:cc:9a:59:6a:f9:23:cc:c7:a0:
         99:53:15:dc:b9:93:bd:f9:52:b1:f7:e0:7f:f9:70:06:cf:c7:
         93:df:ec:ae:97:9f:79:d9:4f:1b:20:a2:97:5f:66:cf:ad:67:
         20:9f:87:0d:37:4d:52:5b:55:0c:c1:aa:1a:0b:4c:b4:83:0b:
         7a:1b:64:01:6e:4c:43:1a:11:ff:25:99:27:93:c7:30:1e:df:
         4e:63:fb:40:2a:48:d1:8e:59:ab:c2:13:4a:d3:f1:d6:41:f0:
         ed:fa:e2:ef:0f:21:5a:1f:d5:48:9e:37:76:ab:46:1d:7c:ef:
         50:7b:e5:af:41:bc:20:44:3d:55:08:9d:f4:30:f6:72:0c:70:
         ea:2a:25:a2:2b:5f:b6:44:56:0d:3b:4f:03:23:02:3d:24:b5:
         a5:2b:33:76:eb:50:64:fa:7f:60:82:c2:3e:cb:75:af:19:3a:
         9a:ed:63:a5:5f:ee:06:ab:fc:13:91:33:57:9e:ac:52:f3:b3:
         d6:d5:7a:c7:2c:a2:92:79:5a:7a:cc:63:00:6d:9d:ad:9a:ad:
         84:95:ba:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----