Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b0b6896-07ab-325d-a6f4-05b0b25855c3.roa
File:                     0b0b6896-07ab-325d-a6f4-05b0b25855c3.roa (raw, json)
Hash identifier:          cM6/SOtJhM8V0uSkXC/nu2xuTUBQ76mDTxxUgQgkf2I=
Subject key identifier:   DE:BA:AE:94:00:01:49:CF:D4:95:EA:A7:1F:D3:5F:A6:8E:79:C3:21
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B5C17C
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b0b6896-07ab-325d-a6f4-05b0b25855c3.roa
Signing time:             Sun 21 Oct 2018 08:20:08 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.249.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b5:c1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=66a87f0c-5ef1-43d8-8269-542c8a78c986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:5a:46:03:cc:57:e3:19:72:b3:df:3d:2a:0a:
                    54:29:59:82:f0:a8:92:9e:65:cf:df:e6:f1:6a:78:
                    7e:fb:e6:d3:0d:15:e6:4d:a6:d7:1c:39:d5:1d:70:
                    13:66:18:53:c2:50:4d:47:ce:36:a3:89:47:ba:9e:
                    f0:ac:ae:07:19:65:d0:e5:fa:d3:38:82:e6:57:74:
                    97:53:6e:3b:c7:7c:f0:b3:6a:40:3d:97:de:e0:24:
                    9a:cc:17:d2:af:ec:49:6b:98:77:95:f3:31:4d:9c:
                    8f:fd:14:7f:57:eb:ee:58:ea:df:9c:db:83:28:0f:
                    f5:fe:19:74:35:82:98:8e:9e:3e:db:35:b8:31:02:
                    64:03:ec:26:4c:f7:87:4d:7d:a1:fa:51:16:82:c9:
                    46:a7:d3:f3:9c:f1:8d:06:e9:82:fc:81:ee:71:4b:
                    dd:42:52:ce:48:d7:9d:21:18:c3:50:6c:58:71:3d:
                    60:9c:cf:c8:f9:43:c0:60:9a:2e:f2:e6:7d:f5:2d:
                    a9:7e:8d:85:34:e8:94:8e:b5:d3:9d:38:13:88:dc:
                    a4:b0:67:1a:2f:5a:05:da:3a:4e:61:83:e3:27:23:
                    ac:80:7d:39:4a:6b:87:9b:e7:79:41:f8:19:12:96:
                    5b:aa:2b:0c:96:15:5e:56:d3:c0:07:f1:37:12:05:
                    82:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BA:AE:94:00:01:49:CF:D4:95:EA:A7:1F:D3:5F:A6:8E:79:C3:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b0b6896-07ab-325d-a6f4-05b0b25855c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.249.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:cd:cd:be:ca:58:8a:bd:3b:a9:e0:18:bb:39:21:e1:1f:bc:
         42:ed:c1:6b:48:91:3b:07:a0:c3:c6:9d:bb:48:05:33:c8:b1:
         5b:8d:12:3e:8f:76:9b:65:53:eb:5f:5f:cf:dc:10:a2:f3:00:
         0d:eb:87:9e:00:81:28:5b:0e:a9:71:60:16:7d:8e:3a:71:ea:
         0e:40:54:fe:20:8d:a2:d5:05:d1:ca:43:fb:f1:c8:76:c3:77:
         bc:77:8a:b6:fb:4c:18:50:9b:52:da:c8:ee:96:bd:b3:a2:92:
         42:da:58:90:de:e7:f8:e2:41:ee:00:65:4a:61:52:fd:c4:ca:
         04:13:65:46:c6:57:36:ed:d8:b6:f3:cc:50:4f:9f:5f:93:c2:
         09:db:3f:14:5d:c3:12:41:16:93:87:ee:40:6c:83:7a:f4:08:
         a0:bc:5d:fe:63:8c:e3:5b:0d:b0:84:6b:6d:1e:a1:30:4c:8b:
         65:20:e3:9e:07:1c:36:da:d3:73:67:54:f9:42:2a:be:7b:ee:
         f2:55:cf:2c:7d:15:8d:67:65:ed:04:8f:cc:9d:da:2b:c1:e7:
         be:31:4e:06:bf:20:16:1f:0d:56:fb:41:cd:ba:d7:b0:eb:87:
         d7:97:64:9c:70:18:e9:7e:d3:73:06:98:7a:78:50:7c:f4:d7:
         4f:02:fc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----