Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6f3adcdd-cc66-3b81-8612-224bf81ebbc3.roa
File:                     6f3adcdd-cc66-3b81-8612-224bf81ebbc3.roa (raw, json)
Hash identifier:          F7Ak1UpkhztfVhuU8CjuFYCNV8Z4XOVGlsHFo3mjO28=
Subject key identifier:   0E:A2:AC:8C:12:4A:DF:83:39:FF:02:B0:1F:CD:12:66:58:61:2A:64
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665D250637
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6f3adcdd-cc66-3b81-8612-224bf81ebbc3.roa
Signing time:             Wed 10 Oct 2018 08:43:19 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        54.179.128.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5d:25:06:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=97c43c74-1c5b-4cf5-bd20-b2ad9c53b4f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6c:ce:dc:c1:92:9c:dc:0a:60:ad:05:87:c7:
                    ea:95:1e:14:a1:14:08:0e:e8:26:93:3a:5a:19:17:
                    57:2e:4e:25:15:6e:74:51:8b:66:c0:43:20:2c:19:
                    f0:66:a1:a6:09:59:69:dd:12:20:f5:61:cb:07:1b:
                    87:33:a1:51:e7:d2:9e:f5:01:a1:ca:1f:31:96:4d:
                    9e:4f:8d:a0:89:bd:c7:d6:27:07:03:32:20:a1:a9:
                    56:bb:c0:87:e6:78:e0:1f:35:d4:aa:65:62:bb:ea:
                    23:51:eb:c6:10:8f:3e:91:41:af:dc:7c:f6:97:66:
                    c9:68:4d:28:47:15:8d:70:1f:08:90:7e:a6:d3:0c:
                    57:1b:28:13:b6:13:7c:14:9b:25:cb:42:38:36:e7:
                    04:48:21:89:27:0d:2a:0a:8a:5b:0a:69:6f:57:9a:
                    ce:af:58:58:33:f1:27:e7:2c:53:6d:e8:51:77:89:
                    2d:db:17:a5:7b:f5:48:e6:dd:15:fa:ec:0e:de:9a:
                    11:e4:b8:ca:bd:ed:f9:96:d0:78:09:11:f1:f8:97:
                    79:29:b6:19:91:52:7d:16:4c:1d:31:3f:1b:94:ac:
                    03:6c:de:ea:7a:50:f4:6c:86:4e:6a:fb:da:54:90:
                    d9:8c:72:13:3c:ef:87:75:04:5e:a2:68:cb:14:bc:
                    d4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A2:AC:8C:12:4A:DF:83:39:FF:02:B0:1F:CD:12:66:58:61:2A:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6f3adcdd-cc66-3b81-8612-224bf81ebbc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.179.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:e5:2b:6c:b9:d8:ae:6f:64:b0:c0:19:c1:d8:8e:66:77:09:
         a9:b9:30:5f:d9:3a:e7:96:8f:e2:80:be:4b:fe:ca:66:3d:31:
         20:e0:4f:1c:8f:0f:f2:5c:bf:50:36:26:16:45:33:c7:7c:62:
         76:87:50:9a:e3:0d:7b:a4:52:50:41:e4:bd:aa:cc:9f:81:3c:
         ec:60:ce:56:3d:52:18:01:3a:62:5e:4a:8c:64:ec:e3:d9:b8:
         50:94:db:d3:9e:24:f5:4d:fe:d4:b0:dd:49:78:1e:3d:13:e4:
         78:82:01:a9:49:c3:2b:6c:46:72:16:64:3f:cb:03:bc:92:1f:
         64:17:6b:9c:26:97:2b:2e:39:52:b4:3b:b6:67:92:68:36:b8:
         e1:ff:80:fe:1e:c3:17:cf:ab:9f:aa:18:c9:c2:23:ce:c7:33:
         01:9f:84:9a:e4:46:07:10:86:f0:39:a9:09:d6:18:04:4f:1d:
         eb:a5:f1:97:13:e3:13:34:17:cc:de:43:12:23:fd:65:2d:02:
         7c:38:a0:b6:2c:29:5f:04:fc:92:55:68:b1:bf:42:0e:68:83:
         2b:9f:0e:cb:51:e0:5f:d5:69:9e:f7:d5:39:9b:57:aa:92:96:
         7e:90:c1:75:66:ce:a4:31:dc:2c:b0:e5:40:db:16:33:c1:8b:
         74:81:24:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----