Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a68eca6-3a95-3b1a-8390-df8fd9d74b54.roa
File:                     4a68eca6-3a95-3b1a-8390-df8fd9d74b54.roa (raw, json)
Hash identifier:          6ev+nszNKcnTHaWCxh1silb8mhHx4jpgWFFSmauW49M=
Subject key identifier:   DA:E7:EF:EC:B9:74:BA:0E:10:9B:6A:A4:98:A8:8A:1F:80:B0:F5:5A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1669631C1BD
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a68eca6-3a95-3b1a-8390-df8fd9d74b54.roa
Signing time:             Sun 21 Oct 2018 10:35:35 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.92.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:96:31:c1:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=49e55f05-f56f-4aae-809b-d596341320fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2e:a8:f6:64:f9:26:dc:f9:70:b5:84:41:6e:
                    5b:36:d1:19:d5:9c:27:b0:e0:99:1c:b2:7c:51:7a:
                    5e:0a:b6:2c:96:24:e9:03:26:10:cc:f0:38:63:57:
                    7a:e4:da:9d:dc:ce:ef:63:9e:36:72:3c:0a:cb:32:
                    b1:f4:be:4e:5b:77:92:c5:c3:fa:6f:8b:5f:fc:c8:
                    75:be:77:c8:37:11:92:ea:63:91:64:7a:d7:bf:34:
                    6c:bc:38:04:c0:4d:1e:ec:84:2e:29:00:b8:fd:e0:
                    02:56:ad:6e:25:6a:94:7a:1d:1d:34:7a:12:85:aa:
                    6c:bf:e1:d3:48:53:54:f9:bb:41:18:1c:11:1d:a6:
                    10:aa:dc:88:71:7c:30:3a:a5:7d:b3:db:9f:e7:74:
                    74:29:45:16:31:eb:29:e1:20:3f:78:4e:65:89:5d:
                    a4:16:65:1b:88:2d:6b:52:a4:ce:b7:e8:c1:7b:89:
                    23:d2:7f:11:19:6d:2b:d4:b5:2b:8b:eb:e0:9c:40:
                    96:84:57:11:c2:b0:83:5e:03:fd:a5:2f:f6:7c:1d:
                    0e:c1:b6:04:36:50:29:b0:29:c5:6e:7e:fb:9e:f5:
                    32:de:87:47:27:0f:60:3e:9e:80:00:a7:1b:e1:fe:
                    a2:47:8c:5a:66:71:81:fb:aa:41:d0:b9:ac:e3:c6:
                    b4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E7:EF:EC:B9:74:BA:0E:10:9B:6A:A4:98:A8:8A:1F:80:B0:F5:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a68eca6-3a95-3b1a-8390-df8fd9d74b54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.92.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:0c:1a:13:67:a0:2a:16:2b:31:91:72:22:15:56:9a:47:57:
         4e:a0:3d:e2:0c:00:bb:f5:f9:c1:8a:a9:65:3d:5f:7d:34:20:
         13:13:be:27:21:7c:40:b9:a2:b4:83:06:6c:63:a2:f1:bd:b7:
         20:22:fb:f4:6a:5e:72:6a:c1:d1:de:58:3c:ea:ba:5a:14:6f:
         67:f9:67:60:55:47:95:f1:60:3b:9d:0f:0f:ff:eb:69:1a:9b:
         63:b0:d0:1c:14:07:f4:95:f7:ad:60:c9:1a:a7:61:84:09:54:
         2f:6b:12:a7:21:12:f0:5c:1b:04:db:58:5c:9c:ee:9e:b9:da:
         bb:50:c3:cf:62:b9:8f:74:fb:6c:c3:6a:87:77:19:f5:5b:2e:
         d9:c8:58:c2:fa:ee:15:96:46:bb:c7:a8:c9:d2:2d:8e:d7:e5:
         d8:51:e1:71:33:57:da:c0:b0:c9:c2:2c:2e:10:bd:63:f6:64:
         e1:2a:c4:c6:68:b1:56:ee:62:7a:ab:e5:b2:6e:c5:69:1e:6a:
         34:ff:0c:82:82:1e:48:60:45:db:dd:9b:5f:18:31:b5:a6:3f:
         78:9c:73:09:c3:fd:f5:ed:db:ee:fa:7c:c9:af:e2:71:79:75:
         3c:06:76:ec:43:fa:87:4b:77:22:a2:c6:42:e1:a5:61:ad:0c:
         b0:62:dd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----