Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5418589a-a19b-3afe-8284-c7c9b0553a27.roa
File:                     5418589a-a19b-3afe-8284-c7c9b0553a27.roa (raw, json)
Hash identifier:          3rYOeiHZHwq34d/rHel9h7HPUALW8lwy/8gVuSXNQ0E=
Subject key identifier:   7F:20:25:E6:1B:7C:CA:17:D8:97:F2:B6:40:66:0D:54:E6:5B:06:D1
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665D2631AE
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5418589a-a19b-3afe-8284-c7c9b0553a27.roa
Signing time:             Wed 10 Oct 2018 08:44:36 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        54.255.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5d:26:31:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=2f784782-1c15-49fb-9c15-8499102db075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:67:18:5e:bc:7b:8f:71:7a:9a:01:e5:82:15:
                    6a:02:d8:fb:ae:d8:8e:2f:a7:a0:1e:92:7b:bb:ac:
                    4b:fc:06:2a:19:46:51:b6:8d:e6:ef:79:57:89:9a:
                    33:ea:38:26:d9:37:4c:10:aa:26:25:54:9d:de:c0:
                    bb:c4:d0:f7:4d:62:50:4b:d7:c9:9a:80:2c:25:53:
                    76:c0:94:b9:8f:14:61:9d:17:80:4c:13:0c:f1:e1:
                    37:24:49:3e:a7:46:f5:a0:da:a1:93:44:f0:fb:61:
                    09:ba:6e:79:99:23:9e:e4:4d:3b:24:53:e1:27:0a:
                    ec:49:1e:51:8f:2d:26:e4:5e:64:0f:db:0b:67:09:
                    25:46:f7:d2:91:6d:9f:7d:5e:ea:6e:2c:48:58:62:
                    e0:4a:cb:fb:85:3f:b9:6a:1b:16:e6:f7:5b:6e:77:
                    e7:5f:f0:6e:32:89:7b:a3:21:66:d9:d3:02:0c:79:
                    72:45:f2:c9:48:44:3d:ba:39:62:0a:4e:3c:e2:fa:
                    59:07:17:4d:dc:6a:a2:c4:c7:aa:4b:5c:a2:e8:07:
                    c8:44:05:52:01:40:73:3e:9a:7c:62:69:5f:99:ba:
                    6b:2a:b3:e2:71:f0:f8:3a:52:71:3a:ee:30:29:ee:
                    a9:7b:9b:8f:32:3b:a0:53:52:57:56:43:87:46:e1:
                    da:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:20:25:E6:1B:7C:CA:17:D8:97:F2:B6:40:66:0D:54:E6:5B:06:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5418589a-a19b-3afe-8284-c7c9b0553a27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.255.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:55:1c:2d:27:17:9d:a2:db:b4:11:8c:14:73:df:dc:a5:3f:
         f9:3f:ad:f5:af:81:22:7a:dc:c6:b3:ab:7f:42:82:4a:69:be:
         cf:d7:6d:c6:56:19:08:41:69:e8:87:15:b5:62:4e:fe:cf:e1:
         6a:0e:ff:90:51:fd:5b:a3:83:28:fb:c3:3c:98:ab:4a:75:b0:
         1a:1d:e1:61:07:b6:b1:1b:36:ac:b6:38:88:3e:b8:ea:b1:5a:
         10:25:8b:45:f9:dd:7d:fb:1f:88:aa:98:2d:63:ab:98:b0:0e:
         b3:7e:0a:48:cf:96:7e:da:c8:15:21:90:3b:cd:b7:f0:71:33:
         ec:c4:5e:f6:29:95:24:50:e8:20:95:e4:b2:ae:bd:ed:f2:63:
         7f:2d:f6:12:a3:f3:5b:c8:9e:99:23:49:f5:e0:e1:8f:bb:0e:
         3f:af:f7:23:a8:97:88:8d:34:5d:da:61:17:5b:80:1f:2c:c3:
         5a:65:10:9e:04:41:37:9f:b0:d2:e8:ef:7d:a7:81:12:c7:08:
         59:31:cf:fb:85:99:39:20:54:28:95:c1:ea:0f:53:96:56:19:
         50:cc:26:a9:e5:ce:2a:e9:30:2d:4b:e7:ef:9f:4d:51:8f:f1:
         70:dc:47:d3:5e:ac:c6:75:11:00:4f:f4:0e:8b:c7:7b:2f:a7:
         29:d1:0b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----