Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a06e98a6-0ada-384a-add6-1ded6030f907.roa
File:                     a06e98a6-0ada-384a-add6-1ded6030f907.roa (raw, json)
Hash identifier:          CB/kQtvKIRTfmwPcV0hzao13UPVXj/d+y2X71rIyJ24=
Subject key identifier:   FC:89:EF:0A:D7:74:3E:F2:8D:5F:64:37:DF:C0:F0:B0:3C:91:7C:33
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B5DB6C
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a06e98a6-0ada-384a-add6-1ded6030f907.roa
Signing time:             Sun 21 Oct 2018 08:20:15 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        54.250.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b5:db:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=9361c499-bf64-41b2-9714-8486da391b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2a:9f:8d:55:ee:4e:3c:32:a2:38:8b:7e:5c:
                    d2:92:bf:dc:e7:37:b7:ad:26:bf:1e:06:d6:e7:ef:
                    1b:32:81:fb:8c:a8:fb:24:8e:9e:24:07:f1:06:86:
                    31:66:7a:be:a7:8e:47:69:ad:68:12:8c:ea:ae:dc:
                    27:b0:36:f4:47:37:3a:03:91:2d:f2:8c:ee:73:73:
                    e1:bb:cf:65:00:73:43:2e:30:02:0a:c1:d8:d5:31:
                    30:5f:9b:f1:68:2e:ca:47:a4:ad:df:b8:4f:cc:98:
                    d2:23:68:77:f3:f2:4e:83:4e:d6:c8:70:51:b7:11:
                    cd:0d:85:22:6a:d1:c0:16:19:2d:71:58:c9:24:cf:
                    3a:da:41:d1:69:a4:9c:c7:0c:65:b9:11:fa:fd:09:
                    58:14:3b:f2:c3:96:a7:20:59:ac:c9:06:2b:f3:7a:
                    45:a2:42:ab:3f:c4:32:1f:bf:78:84:fa:cf:76:98:
                    38:f2:62:70:2e:0a:12:d2:ed:c0:3c:78:7a:0a:19:
                    48:56:e0:89:f0:06:e3:a6:51:86:4a:86:1e:de:bd:
                    9b:1a:3f:3c:38:9e:b1:ee:90:43:57:5f:75:3f:e1:
                    57:13:d4:3c:54:48:1d:5c:83:2b:67:16:8e:ce:97:
                    58:fb:64:d0:a3:54:3c:58:30:66:ea:ed:0a:2a:77:
                    d1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:89:EF:0A:D7:74:3E:F2:8D:5F:64:37:DF:C0:F0:B0:3C:91:7C:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a06e98a6-0ada-384a-add6-1ded6030f907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.250.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:84:eb:ac:6a:a9:7d:ab:4c:18:6e:56:dd:b3:86:c6:f5:ef:
         58:c3:9b:61:df:8b:00:28:b2:20:da:8d:6d:5a:91:cc:93:27:
         b6:0c:41:9d:06:23:cf:75:fd:11:93:74:ff:2d:05:59:2d:ca:
         e9:98:ed:7c:37:0f:0c:3e:93:09:73:dd:0b:77:c1:73:44:64:
         a0:7d:ce:3f:c9:c5:9a:d1:c9:08:d0:dc:19:63:fa:bd:bc:d1:
         fa:57:45:5f:07:2c:c8:6a:4b:de:05:91:fc:af:f2:3f:19:b2:
         5d:e0:83:7a:f3:c9:e0:31:6f:75:c7:14:97:b9:81:b5:1a:f3:
         73:4e:4e:7b:74:15:c0:28:81:98:09:dc:02:54:ec:eb:48:2a:
         2f:5e:c3:ec:71:b0:c2:88:ed:d9:75:dd:2f:06:19:a0:d0:f1:
         8d:f5:20:3c:84:18:94:4f:24:5e:b6:fb:60:78:53:65:02:ac:
         40:5a:76:81:12:f8:01:b5:a8:aa:e1:c2:03:da:6c:fb:7c:5c:
         59:59:e6:61:aa:48:d2:2a:c9:d4:4e:f0:e2:9c:3e:e2:5d:30:
         5a:67:75:0e:bb:84:91:81:a7:ea:02:60:30:67:03:56:e3:7c:
         92:61:c7:7e:97:40:8c:1d:e2:a1:dd:74:b4:50:cc:64:59:a1:
         c4:c3:28:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----