Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c69c809-f47a-3f4c-9a9d-54ddd6a03cee.roa
File:                     2c69c809-f47a-3f4c-9a9d-54ddd6a03cee.roa (raw, json)
Hash identifier:          LjTQEZEXv1q++x6aG/7VlvN/VurP2ziXG+d5/2oHg9s=
Subject key identifier:   99:CD:D4:AB:E3:9F:63:F8:35:18:58:A8:89:B2:33:CB:F7:6B:ED:9D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C4470FD7
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c69c809-f47a-3f4c-9a9d-54ddd6a03cee.roa
Signing time:             Wed 19 Dec 2018 02:24:10 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.92.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:47:0f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=09af20c7-8d73-4dc2-a178-2f42c756a3e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fa:99:4f:b9:c2:a4:9c:20:13:cd:d4:3b:45:
                    f5:b8:e7:3e:11:d3:f9:a6:c1:d8:bd:28:ab:6d:a5:
                    98:7f:ad:70:b9:0d:9d:2a:e8:a4:67:ce:b6:f6:49:
                    0a:29:50:4f:f4:1f:c7:8c:fa:a3:63:91:55:d9:69:
                    c5:bd:ca:5a:38:3e:a0:a3:e9:6e:d0:fc:c5:65:3b:
                    34:52:f7:1b:81:ef:f1:e3:29:0b:52:60:37:d0:f0:
                    e7:26:d5:77:55:77:76:6e:93:71:fb:93:3f:85:7e:
                    68:03:81:76:12:c9:fe:5e:46:50:fb:d0:73:81:e4:
                    b5:3e:72:81:a5:6b:37:ee:53:dd:e7:66:7d:17:68:
                    c8:52:c5:a8:72:4f:02:79:43:ad:42:7a:ff:25:f9:
                    d6:f0:d8:ac:0e:92:2f:82:dd:df:ea:cd:8a:e9:a6:
                    01:a6:2d:78:c1:87:3e:91:88:b0:d9:b3:10:f9:2a:
                    c8:ea:e2:7f:02:87:2c:96:53:d5:0b:1d:4f:8a:fd:
                    ec:23:82:a5:15:38:73:68:6c:ae:4c:4a:c2:f5:b2:
                    82:cb:d1:43:d4:87:0b:60:0f:07:c9:50:08:a0:19:
                    53:55:c0:58:59:0f:7a:33:81:f4:32:76:cf:a7:44:
                    3f:b6:74:95:04:d8:c5:ac:46:0a:0d:51:2c:8e:da:
                    23:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CD:D4:AB:E3:9F:63:F8:35:18:58:A8:89:B2:33:CB:F7:6B:ED:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c69c809-f47a-3f4c-9a9d-54ddd6a03cee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.92.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:af:ed:80:70:cf:52:29:10:95:a5:d3:08:b9:26:d2:7f:06:
         af:1d:e9:68:59:80:15:50:6b:9c:a1:6d:d4:bb:3f:a6:75:8a:
         b4:62:11:0f:2e:dc:e9:de:bb:bf:ae:9c:4e:5d:7e:61:c0:51:
         2f:26:d3:12:3f:e8:96:1b:34:97:6a:d8:72:ed:ec:db:61:72:
         1c:65:4f:63:ab:c8:8f:1f:e8:51:cf:c2:51:88:6c:7f:b3:04:
         f0:c8:f8:f8:9d:f4:37:09:7f:cc:8d:86:68:18:0f:35:15:03:
         a2:fb:c7:36:c9:29:c1:a2:dd:90:fc:a0:af:e3:3c:f3:46:00:
         9e:bf:d9:4f:0d:5c:87:9a:c2:a7:58:9f:24:75:d4:a1:ee:c3:
         8c:6b:6b:35:2e:08:88:21:55:72:b7:6e:3e:d7:83:ae:d7:19:
         9a:b2:4e:5b:50:20:51:1a:11:90:d7:11:32:8d:44:66:04:75:
         89:e5:e5:2b:57:1f:2c:58:0b:39:7f:28:02:1d:a1:f5:43:50:
         8c:19:1f:ce:25:27:68:f1:01:b7:e0:86:36:e8:4f:52:8b:dd:
         a5:0d:6b:91:cf:77:35:2a:db:ae:94:c3:18:ca:38:f8:3e:ea:
         21:56:28:8e:be:2e:9b:55:cf:2b:84:fe:c7:80:dc:11:0b:0e:
         4e:da:9a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----