Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b3da1ac7-b967-3a6f-bda6-4994b6c79a89.roa
File:                     b3da1ac7-b967-3a6f-bda6-4994b6c79a89.roa (raw, json)
Hash identifier:          SDbWPp7Q3VLWurxaJZ5kT1empGpcPftaieel65A1SCY=
Subject key identifier:   5E:7F:15:F9:75:0E:B4:E1:3E:A1:8F:84:B4:28:88:3E:02:1E:C7:B6
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C50B1DBB
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b3da1ac7-b967-3a6f-bda6-4994b6c79a89.roa
Signing time:             Wed 19 Dec 2018 05:58:19 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        52.219.42.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c5:0b:1d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=92ffe934-6bfb-40c6-9caa-9f178d818809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:12:e3:ac:46:5d:d3:99:ce:0d:8e:8b:a5:8b:
                    79:03:8b:50:9c:d0:1b:df:fb:22:2a:4c:f4:61:28:
                    c3:20:2b:03:a7:bc:f0:d2:27:56:2a:bc:44:9e:71:
                    53:84:4d:8e:0a:c9:d3:34:7a:e8:e3:02:6f:7d:fc:
                    bc:25:3b:ce:99:da:bd:ee:58:9b:6c:14:fe:6b:c4:
                    eb:5e:23:e8:2e:62:b3:d9:6b:f4:26:77:fb:c6:c9:
                    4a:8e:ad:99:a0:e3:7f:06:80:9a:6c:3b:6e:2f:bb:
                    6a:a6:58:47:aa:0b:7c:56:65:87:a9:0e:da:95:06:
                    ec:16:46:15:df:ac:f7:de:ab:db:dc:32:9b:4e:20:
                    c3:d1:1c:bb:11:58:1d:7b:30:3e:a1:f1:c6:3e:4c:
                    8c:04:9a:7e:f4:0f:b2:8c:b5:3e:7f:08:ae:a7:f6:
                    cd:47:66:1b:23:a5:83:f3:35:2f:83:d8:5c:16:db:
                    7f:68:04:23:e7:5b:f1:ab:8e:62:7e:f8:80:6c:ff:
                    6f:36:a2:a2:0c:b1:1a:a9:a9:7c:17:89:9e:33:01:
                    d3:c4:13:8a:ca:ac:c8:03:8e:c1:bc:70:fc:50:a0:
                    1f:11:b7:d4:f0:c6:2f:70:17:62:2e:40:00:8b:64:
                    e5:3e:98:44:d9:5e:5d:5e:ed:31:c6:65:20:dd:80:
                    7e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7F:15:F9:75:0E:B4:E1:3E:A1:8F:84:B4:28:88:3E:02:1E:C7:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b3da1ac7-b967-3a6f-bda6-4994b6c79a89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.219.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:d9:7f:e6:13:de:fd:96:34:c1:20:fc:c6:d6:14:23:78:5d:
         e9:76:41:62:fe:89:c7:b1:b0:67:fa:ac:ee:c8:ba:56:ff:20:
         5e:9f:04:b0:49:f9:5f:ae:56:b9:51:3f:bb:a9:35:84:f6:cd:
         12:0c:a8:f1:a0:94:3b:e8:d3:32:75:a6:96:15:d0:62:02:9e:
         bf:dd:01:88:fe:d9:94:db:aa:73:20:95:45:6e:3f:16:8d:28:
         27:84:f1:bc:8a:8b:bb:cd:16:52:ff:fb:61:7b:31:af:8f:0e:
         43:3c:00:eb:be:10:3a:8c:5d:fc:24:1f:29:d0:89:52:bb:2b:
         56:55:d3:9e:b8:08:04:8d:30:45:fc:7d:b3:e6:1f:dc:ac:a3:
         e0:71:81:65:5f:93:e9:be:2d:97:2d:a8:c3:a6:d2:d9:e9:9e:
         1e:12:06:20:af:c4:72:97:df:e9:dd:2c:17:4f:9f:88:dd:28:
         31:b0:ef:92:33:eb:56:c9:70:81:5b:65:03:c7:4c:61:76:ce:
         45:a1:9c:c8:ea:11:f6:e7:9c:cb:18:01:e1:25:e0:9a:bf:6a:
         2f:02:7a:67:ed:00:5c:63:26:06:ab:37:c2:4c:9b:4d:02:65:
         2b:0e:ac:d3:02:c9:a2:25:b5:16:6e:26:dc:ad:15:4c:bf:d5:
         1c:e2:3c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----