Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e8459ec4-8d38-3782-a698-0dc49c3c89eb.roa
File:                     e8459ec4-8d38-3782-a698-0dc49c3c89eb.roa (raw, json)
Hash identifier:          vAblUcCXDeT5mCEOdiifWR3tydjlckunVlavD/DMtfI=
Subject key identifier:   03:55:81:B5:58:E7:2F:9F:7A:62:2F:FD:1F:67:A7:FC:A6:DA:0E:48
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16693C6D1E8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e8459ec4-8d38-3782-a698-0dc49c3c89eb.roa
Signing time:             Sat 20 Oct 2018 23:19:32 +0000
ROA not before:           Sat 20 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.60.0.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:93:c6:d1:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 20 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=0c6d8a20-8d90-4768-942a-e95360da7ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:86:09:5e:4d:70:18:2b:6a:80:b0:4a:19:1a:
                    94:bf:e8:44:34:3f:cb:a3:99:96:9d:15:18:90:6b:
                    65:18:b6:98:cc:b4:a0:93:5e:65:11:4f:e0:6c:9b:
                    57:ce:52:70:46:13:47:32:9f:db:49:65:1f:20:2f:
                    ee:43:67:c7:9e:27:ad:1a:cc:86:57:17:bd:f2:ac:
                    85:c5:bb:da:59:60:5e:d9:11:8b:f4:b3:33:46:68:
                    31:cb:01:15:79:3c:51:28:db:2f:70:75:dd:74:10:
                    bd:7f:c9:11:4b:68:75:07:43:4f:03:f9:8d:f0:0b:
                    1b:b8:2c:e0:60:6d:f9:3a:12:cf:68:84:fa:10:b7:
                    1d:80:be:e5:4b:1a:d7:45:01:f6:68:0e:7c:eb:8b:
                    b5:7f:a9:1d:ff:77:ab:26:56:55:97:a0:c3:f9:59:
                    7f:2b:bc:e4:39:b5:96:c6:0b:8d:fe:97:64:04:58:
                    65:86:a2:e7:85:66:00:7f:d6:97:a8:a2:92:28:28:
                    54:53:02:b4:57:33:78:a3:7f:bd:06:57:47:bb:00:
                    64:81:6a:ce:d8:51:f2:42:e5:ba:e2:a2:80:8b:11:
                    2e:c7:85:91:a7:01:77:10:c5:9f:9f:87:d6:50:95:
                    6f:f1:02:0d:df:e0:32:61:c3:6c:fa:1e:e9:e7:69:
                    b2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:55:81:B5:58:E7:2F:9F:7A:62:2F:FD:1F:67:A7:FC:A6:DA:0E:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e8459ec4-8d38-3782-a698-0dc49c3c89eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.60.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:0f:08:b4:32:e6:e8:01:26:bf:d5:14:44:fe:7c:87:27:bd:
         36:09:fe:2a:d9:3f:ff:36:55:34:ff:82:41:1e:d7:fb:93:4c:
         78:32:26:d9:09:f7:38:f6:58:85:73:69:4d:41:48:da:40:6c:
         ce:0d:69:e4:5b:02:2b:5c:64:12:ad:9f:eb:45:7e:7b:38:8f:
         e4:36:bb:20:41:73:99:c8:5f:c5:a9:c6:6f:b4:3a:1e:62:15:
         ae:e6:c0:e7:ff:ae:cb:ca:d7:34:48:60:bb:24:e8:90:3b:d6:
         f7:5a:f6:cd:21:3c:f1:dd:cd:49:26:bb:96:f7:33:c8:59:9a:
         f2:03:fa:8e:76:61:7e:e0:3a:42:cf:b2:1c:44:ef:18:e0:03:
         91:46:d0:7d:2c:99:ac:2d:ff:68:e4:b2:3a:04:4a:00:54:eb:
         88:0c:42:04:a0:78:7b:96:5c:b9:ef:57:7f:f6:2f:79:be:2c:
         0f:f0:cb:d6:4f:70:22:64:ef:2c:e0:e9:9b:83:ee:43:0b:ad:
         47:4f:74:4d:76:c7:5f:c6:9d:6c:bc:fa:82:50:02:aa:b0:b7:
         af:41:8e:98:ea:a3:ea:95:b3:bf:01:27:18:e4:14:c9:0f:fa:
         61:05:f8:98:b8:aa:bf:73:84:37:35:77:33:c7:3e:e3:f4:95:
         90:14:d3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----