Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e12cb0b7-7b9d-3406-8e81-f0de2632333e.roa
File:                     e12cb0b7-7b9d-3406-8e81-f0de2632333e.roa (raw, json)
Hash identifier:          JS0mFmubsXF6kei2PcgN0qqpfrdJbnchLnhfwOaPVKk=
Subject key identifier:   16:9F:4C:BE:BE:B8:71:B7:1C:09:65:8E:05:85:16:18:F2:94:83:E3
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B373FE
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e12cb0b7-7b9d-3406-8e81-f0de2632333e.roa
Signing time:             Sun 21 Oct 2018 08:17:37 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.194.0.0/15 maxlen: 15

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b3:73:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=dbb9d858-fc08-49f3-8302-23c7c45c18a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0b:c2:b4:a8:1c:f6:47:2f:f8:1c:44:a9:d1:
                    3e:f2:0d:03:75:ab:c3:36:38:9c:b5:e8:2f:52:e6:
                    ba:86:de:89:6c:da:01:7f:28:4e:69:18:63:7a:3e:
                    7d:8e:3d:9a:59:ea:16:ac:24:bd:17:f4:5b:eb:08:
                    68:ea:d9:7f:bb:ef:cf:1a:56:74:fb:e6:92:bf:ea:
                    97:8f:bd:bc:f2:17:0c:4e:57:8e:6e:43:6d:52:dd:
                    9a:46:67:0e:93:62:5f:3f:84:39:af:fd:12:d7:04:
                    3c:91:66:98:cf:ca:28:02:35:ac:5f:52:3d:48:85:
                    7a:94:c1:57:e4:18:78:08:a9:e9:18:38:62:e8:16:
                    78:8f:3d:55:66:fe:fe:ad:b5:8d:29:de:36:57:f5:
                    df:22:93:ba:1b:4d:24:fb:30:3f:ba:4a:48:ca:38:
                    bd:ba:fd:65:e9:a4:d1:89:7a:06:9f:93:92:43:a2:
                    2f:05:c9:87:5c:21:84:bc:98:90:2e:6b:f3:2d:38:
                    12:0d:eb:8e:fa:8d:4b:b3:1d:00:03:e0:2b:8d:57:
                    a0:7b:60:b6:d0:9d:bc:c8:00:1d:e2:bb:d3:1c:67:
                    3d:75:ce:39:77:ea:44:86:28:77:2d:1d:49:d0:39:
                    bb:d5:52:a6:45:86:f6:0e:4b:74:32:13:9e:ff:4c:
                    55:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9F:4C:BE:BE:B8:71:B7:1C:09:65:8E:05:85:16:18:F2:94:83:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e12cb0b7-7b9d-3406-8e81-f0de2632333e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.194.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:39:d5:e2:a5:d7:b8:04:dd:57:97:e6:fd:74:24:f6:05:63:
         85:ef:48:9c:0a:9a:ae:26:bd:56:c1:1f:71:5d:03:62:36:c5:
         44:21:f3:de:dc:55:54:71:c3:23:65:c8:4b:bb:8a:47:2b:7a:
         cb:c0:33:9c:b5:87:f5:e2:b6:ed:fd:18:fb:2b:68:8b:16:1f:
         8b:22:dc:bd:20:37:24:94:83:eb:e4:e1:e8:f8:e8:6e:02:29:
         dc:08:45:b8:d3:0b:ea:1b:e1:4e:53:b5:cd:a5:6a:14:1d:45:
         ec:40:1a:42:f0:8f:19:d0:16:7b:95:38:5d:4d:e9:ab:09:3f:
         d2:1a:c1:05:b7:fa:c4:7f:eb:51:c3:94:57:01:5e:09:8e:11:
         0b:8d:5b:ad:0b:f6:8f:11:e8:2f:5c:d4:91:c9:29:00:cb:36:
         2e:f9:29:42:34:99:aa:48:b1:bb:fc:3d:2c:33:ec:fa:8e:4b:
         56:23:25:60:50:2e:15:d9:b7:b2:98:79:78:16:48:9e:e3:0d:
         57:4a:77:d9:b6:a6:5e:0a:7a:2e:1c:2a:66:74:39:47:f6:fb:
         0a:74:14:25:ba:8c:87:62:a7:d4:71:55:dc:6a:d7:03:bb:81:
         0f:d9:72:f8:24:97:05:d5:b0:fc:af:6c:c1:cd:1b:28:59:b8:
         82:72:d2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----