Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/381b76b1-82be-3c18-bc2b-6cc9027d3b96.roa
File:                     381b76b1-82be-3c18-bc2b-6cc9027d3b96.roa (raw, json)
Hash identifier:          fz3qC9Sl+SZx+5TuljqdGYgl9/3B3fDyr6Mz8Gb3FKA=
Subject key identifier:   DA:62:64:86:C4:81:62:26:C3:DB:5F:BA:3F:10:5F:60:06:B5:70:56
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C44729B6
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/381b76b1-82be-3c18-bc2b-6cc9027d3b96.roa
Signing time:             Wed 19 Dec 2018 02:24:17 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.92.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:47:29:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=f5d90e30-6c8c-40e3-ad95-852eb53abb2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7c:7d:a3:93:38:5e:5e:78:79:49:b6:9e:3b:
                    3d:f1:b1:dc:ce:be:57:3a:e6:e8:a5:5f:ff:f4:3c:
                    5c:f4:ad:b3:8e:27:36:5d:35:51:f8:50:09:55:b6:
                    47:38:a5:a6:3b:33:8a:05:2f:3e:7b:77:99:e7:08:
                    2d:b6:4e:37:ac:dd:9f:91:0c:55:ea:e3:8d:d0:e1:
                    61:ee:75:4d:99:fd:7d:5e:f2:20:3b:2b:9e:23:9a:
                    03:58:f6:da:45:01:ab:03:35:3c:b2:e1:97:19:8e:
                    12:2a:9e:6d:a0:45:66:03:78:d0:6e:43:fd:10:19:
                    e8:f4:69:7e:19:26:82:35:cf:28:74:6d:22:ad:08:
                    d0:e5:21:a3:24:c2:69:e6:ef:d1:1c:7c:6a:fd:49:
                    b0:dd:4b:fb:79:f1:fd:2b:9d:cf:1c:ea:09:24:67:
                    e7:59:6e:84:b9:2e:b4:92:4f:4b:e3:68:f1:39:0d:
                    66:48:79:62:ee:b4:03:67:ae:11:83:87:c3:ee:03:
                    3e:e0:c1:c8:b8:b9:8c:1c:e7:ab:70:b6:9d:ec:a8:
                    27:72:95:52:6c:d6:cd:92:08:b7:51:64:75:fb:94:
                    0e:de:87:5e:23:a4:5f:a5:01:49:5f:8c:d9:f2:ee:
                    9e:3b:9d:1c:26:5a:84:e7:bb:38:95:12:f2:1d:9d:
                    db:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:62:64:86:C4:81:62:26:C3:DB:5F:BA:3F:10:5F:60:06:B5:70:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/381b76b1-82be-3c18-bc2b-6cc9027d3b96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.92.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:66:bd:24:6f:76:09:49:78:36:40:d3:db:f8:74:8d:f4:bf:
         2a:88:eb:07:b7:0f:28:0b:e3:85:41:fa:0d:6f:f9:b8:50:9a:
         0e:a3:b0:fa:0b:ae:70:ce:38:3b:43:3e:74:1b:f9:0a:a5:8f:
         9b:b9:c9:89:9b:f7:fa:8f:16:b5:a4:eb:fb:0e:91:84:6c:f3:
         88:bb:f1:66:61:bb:a3:11:b9:86:aa:e9:21:2f:6f:75:f3:5b:
         1b:65:74:ac:e7:24:7f:8e:9b:33:0e:c5:43:da:83:e9:28:0b:
         47:01:ad:23:f6:ef:26:26:ca:4d:9e:e3:4d:fb:cb:06:a8:cb:
         a7:57:6a:73:0f:69:a5:f0:8f:dc:f6:f1:e3:0a:fa:fc:12:e0:
         d7:d1:94:da:16:9a:dc:bc:42:e2:71:3f:65:94:53:27:bb:e5:
         2e:e5:c1:62:3f:b6:6e:0d:b3:2c:17:f0:f6:0b:dc:f1:57:3b:
         42:28:f3:4f:3e:d9:14:60:5e:f6:5f:c9:96:3e:7a:7f:c1:c8:
         b2:ec:0a:ea:18:16:86:dc:0b:12:b4:3e:ec:02:a0:c8:a4:a5:
         85:60:16:29:f1:22:e0:87:91:45:48:df:35:68:2b:7b:1d:43:
         4e:5d:69:ed:e8:9d:b6:2f:34:be:a4:4e:c4:0f:63:80:9a:d9:
         51:3f:ea:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----