Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4f14b0ae-fee7-36d9-9de0-219859cfd957.roa
File:                     4f14b0ae-fee7-36d9-9de0-219859cfd957.roa (raw, json)
Hash identifier:          TSgn4T4k2HzXomhKdZ1Nw49IXPKCZOmIQBgG4v/qFok=
Subject key identifier:   AB:CB:0B:0E:31:4A:24:CA:BC:66:17:CD:A9:98:FB:0B:53:B5:D9:0B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665C2E9F38
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4f14b0ae-fee7-36d9-9de0-219859cfd957.roa
Signing time:             Wed 10 Oct 2018 04:14:11 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.92.32.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:2e:9f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=20b4899b-5477-4044-8841-5a6298eaf402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:05:17:31:1e:2c:0e:e7:b0:cb:f9:6c:15:a4:
                    b2:92:bc:1a:e7:55:5e:cc:8b:1c:b9:93:61:1e:78:
                    43:c0:e3:d8:fd:c2:e5:89:d7:e9:b3:92:07:28:fa:
                    37:12:66:bd:f6:00:d1:b1:01:18:c7:cb:42:b8:50:
                    3c:2f:a0:27:e0:77:e0:25:8b:92:43:3f:51:b3:4e:
                    34:37:1f:b8:c0:e3:ae:78:9c:b1:58:fe:c6:8e:b7:
                    ea:be:4a:83:45:50:8f:cd:42:eb:ed:2a:45:93:b7:
                    0a:7d:2a:5d:d5:38:e2:2c:04:fc:e6:f3:db:33:c6:
                    81:b6:85:9e:8c:7c:c7:f5:1a:b5:0c:18:5c:40:0b:
                    c9:fd:69:46:46:24:36:2d:df:aa:0b:36:91:f7:14:
                    32:ce:2c:4b:ea:70:cb:0a:23:f7:00:9c:b1:57:be:
                    fc:9e:e3:a0:f9:4d:e8:d3:4e:c7:55:59:19:17:fe:
                    02:74:dc:e1:32:54:94:24:f2:13:e4:fd:e6:50:d4:
                    21:7f:73:40:6c:21:ff:c5:58:0c:31:b9:c0:eb:61:
                    63:8c:5f:c9:e7:42:5f:d6:8b:de:81:42:f1:51:f1:
                    db:4e:ff:74:7e:96:0c:cf:76:9a:57:40:ff:ef:26:
                    26:5a:1a:a5:44:5b:e4:be:cc:f2:00:cf:4b:28:20:
                    65:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CB:0B:0E:31:4A:24:CA:BC:66:17:CD:A9:98:FB:0B:53:B5:D9:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4f14b0ae-fee7-36d9-9de0-219859cfd957.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.92.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:80:f7:c6:51:14:3e:74:21:a7:51:cd:68:3d:a1:3c:2b:c8:
         b8:42:fa:2f:5b:77:62:b7:db:7e:eb:35:93:2f:89:5b:32:e0:
         8d:3d:60:6a:f9:26:60:67:75:32:29:d3:68:77:88:f2:7a:5c:
         c1:59:95:76:85:d8:2a:6f:07:1e:b7:d4:e0:6d:1d:01:36:05:
         4f:08:8a:2c:e8:ff:54:5d:20:9b:a5:68:75:7d:2e:a3:9f:8f:
         86:6a:53:5c:36:78:f3:7a:e6:c8:0e:2a:05:54:37:bf:19:e5:
         e8:12:5a:84:a4:b4:f2:1e:1e:4e:52:54:72:7e:2f:55:f2:0a:
         a4:fe:d5:b7:17:74:d1:1c:2c:ac:6c:03:41:d9:45:ed:85:92:
         95:23:30:c0:85:85:ea:c2:58:40:27:0d:15:77:32:5a:43:e6:
         d6:65:67:fe:17:82:cf:54:ec:d2:1a:08:d1:1b:55:71:cd:ee:
         96:66:95:c8:f0:2f:09:47:ad:36:5a:3f:f6:49:ab:ef:28:b0:
         88:4d:05:43:97:d3:2d:cf:9b:fb:05:77:49:cf:36:f3:c8:53:
         4f:95:c5:79:82:ac:6e:1b:62:70:72:22:30:2a:ce:72:e5:03:
         83:53:a7:4d:a5:10:c5:ea:0d:aa:07:c7:71:c7:8f:99:34:e2:
         54:62:93:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----