Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/293d0d9b-fca1-312d-8447-927d7765285e.roa
File:                     293d0d9b-fca1-312d-8447-927d7765285e.roa (raw, json)
Hash identifier:          AKNpA088yDjp9lxLn5/pWkUKg9n1+cpa7CJa5GBt9zk=
Subject key identifier:   55:BB:21:22:E1:AB:44:4A:96:FB:4C:5B:CA:49:D0:60:B7:83:83:6F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665D25F5A8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/293d0d9b-fca1-312d-8447-927d7765285e.roa
Signing time:             Wed 10 Oct 2018 08:44:20 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.251.192.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5d:25:f5:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=2a97f06b-8fd5-4026-a450-3a719df0d1f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7a:40:00:7d:42:82:fb:92:d9:0d:c8:88:bd:
                    75:e3:07:dc:96:88:3a:8c:c1:15:94:ef:25:37:c9:
                    8f:0c:ff:b0:98:b1:2c:b5:ef:77:86:bb:e7:af:de:
                    40:e4:44:c7:06:a5:d5:41:2f:f9:16:8c:3c:cd:19:
                    0d:ab:6e:d7:10:5f:65:3f:b7:b4:1f:b0:a2:27:a5:
                    eb:e6:45:3d:a1:a5:2f:67:18:59:ed:77:31:b4:2d:
                    0f:4b:ef:3f:6b:bd:93:6f:ef:37:03:51:0f:b4:7e:
                    37:f7:37:20:21:f9:96:59:fe:a8:dd:15:a0:c9:3b:
                    22:a2:5b:26:d5:e3:24:45:ee:a5:08:39:5b:ab:12:
                    01:25:89:a1:77:d5:45:92:c8:7d:4b:14:60:c9:04:
                    b6:37:fe:35:3d:14:8e:80:04:95:e9:b9:a7:29:24:
                    4d:10:fc:4c:85:dd:41:e5:34:43:67:80:8b:64:6f:
                    09:d9:f0:21:19:0b:4e:fc:0f:5e:d4:be:c3:1e:6e:
                    9e:7f:ff:ed:15:77:de:07:ff:2f:f7:42:9f:50:38:
                    eb:6a:33:98:16:51:9c:19:77:4c:7c:ae:34:5e:dc:
                    80:86:c8:97:39:ed:66:58:46:12:92:70:0c:a4:03:
                    1c:86:77:0b:d3:72:5f:4b:ef:e8:39:7a:b4:22:de:
                    af:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BB:21:22:E1:AB:44:4A:96:FB:4C:5B:CA:49:D0:60:B7:83:83:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/293d0d9b-fca1-312d-8447-927d7765285e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.251.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:c1:d5:a0:8d:b9:c5:cf:20:73:54:97:4a:ad:9c:62:e1:66:
         d2:ce:cb:73:ed:fc:97:31:dd:be:70:ac:13:2c:21:3d:84:07:
         e4:38:b0:cf:3d:d8:72:53:2a:3d:a2:44:76:a4:83:02:85:8d:
         9b:86:24:2a:af:d4:85:a5:25:10:a1:cb:74:ed:a4:0b:62:63:
         41:35:88:4d:d2:d4:3c:20:fd:84:37:b1:30:73:b2:b7:21:a4:
         0b:23:46:53:57:5b:b4:9c:11:58:87:13:63:25:b7:b4:12:d1:
         6b:60:bb:b7:86:6a:6a:30:98:b9:51:bc:54:7e:19:66:c0:6c:
         0c:bb:67:91:30:aa:70:89:5d:9d:c3:0a:c5:11:5d:5d:00:ab:
         79:e9:be:ba:2b:af:38:00:7b:bf:25:dc:31:8a:15:c7:08:ef:
         e0:26:67:24:56:ad:ce:65:cf:e2:3a:75:94:50:b2:fb:68:8b:
         f4:ad:bb:23:a7:b0:3a:c2:7c:25:54:89:35:0e:3f:0a:d4:ca:
         7f:77:f5:5f:a3:18:fa:6c:5c:e1:ad:fb:75:50:8a:a8:bb:ca:
         26:4d:78:31:12:a1:c7:5b:55:12:24:3c:11:74:fb:73:1a:a6:
         fd:0a:7b:70:e8:c7:78:2b:ee:ea:da:55:9b:55:c2:65:18:ce:
         c0:a2:d3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----