Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/60196c44-5974-3814-9ecc-452bd6977dd2.roa
File:                     60196c44-5974-3814-9ecc-452bd6977dd2.roa (raw, json)
Hash identifier:          ii8khPG1+zIAcA+2sL85WcDJmeTFBUmSQTOqMqpvWjs=
Subject key identifier:   FC:74:7A:D3:F4:A9:F3:31:39:B5:F5:EA:09:40:1C:E0:43:8D:99:AB
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16693C6F550
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/60196c44-5974-3814-9ecc-452bd6977dd2.roa
Signing time:             Sat 20 Oct 2018 23:19:41 +0000
ROA not before:           Sat 20 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.92.84.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:93:c6:f5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 20 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=08327cce-3f9e-46bc-b56f-96d20949cab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0f:d7:7d:20:69:87:2f:a1:6f:9d:e5:32:5e:
                    4f:49:5d:78:9b:71:3c:e4:61:9c:05:8c:74:bf:46:
                    2f:38:28:fa:2c:63:f1:d1:76:47:ae:f2:ee:b6:55:
                    e5:7a:e7:0d:c3:31:67:90:ed:72:bc:da:6b:0f:e1:
                    a7:12:1c:f7:fd:e5:3a:8e:22:a6:c9:a5:22:ac:32:
                    9f:ae:1f:b8:52:f2:e7:94:eb:c2:f8:5a:c8:a9:8d:
                    fa:52:69:45:fc:5a:f7:f2:87:3d:69:1f:57:90:4e:
                    7e:47:c5:1a:1c:66:d8:91:3a:41:69:70:d2:60:15:
                    04:c0:41:19:5c:62:d8:2d:0b:53:b2:23:c3:ca:c8:
                    64:6e:ea:4b:a1:48:88:c8:05:42:34:88:a0:6a:fd:
                    48:e1:af:f8:42:4e:05:26:5e:00:6e:59:05:94:dc:
                    a1:22:63:c9:ed:0a:73:90:4f:73:62:5d:43:55:68:
                    fe:7f:84:d5:65:82:19:8b:4e:2c:8b:f5:09:eb:ac:
                    f4:4e:86:09:8d:5b:55:63:80:8c:cd:0f:a3:e1:eb:
                    43:bd:d1:ff:64:42:b5:56:b8:0c:cc:19:0c:4b:6a:
                    c3:32:42:b8:80:6a:43:e4:0d:aa:7c:ef:c3:44:11:
                    2d:1f:92:79:55:0b:21:9f:9c:ce:fb:fb:b7:8f:68:
                    1d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:74:7A:D3:F4:A9:F3:31:39:B5:F5:EA:09:40:1C:E0:43:8D:99:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/60196c44-5974-3814-9ecc-452bd6977dd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.92.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:0b:10:50:e6:ba:75:a5:1e:f5:64:46:42:8d:c1:fd:2e:e8:
         e7:45:02:4c:00:24:e2:dd:15:ba:74:7b:02:9b:a8:04:6d:17:
         a6:38:eb:5c:c8:57:bf:4b:a6:de:2d:bb:f1:de:7e:0a:84:36:
         3d:ca:ac:13:43:83:9b:38:87:e9:2d:01:0f:21:23:15:3e:08:
         3a:0a:f2:05:75:60:4d:21:18:5f:c2:8e:8c:bd:12:5c:de:bc:
         3f:4e:d7:f5:bb:62:04:26:9f:2b:50:bb:92:1f:f1:56:79:a9:
         95:66:c8:aa:89:f9:a4:f9:b0:a3:ff:98:ff:34:b5:e6:cc:2d:
         58:47:0e:bd:32:34:c1:5e:7c:ac:47:a5:f5:02:2f:f6:90:b8:
         3a:d7:2a:81:dd:92:7c:03:49:70:51:b4:8a:5e:d3:83:95:79:
         6c:02:a4:c7:25:76:20:d0:5f:1e:3d:92:46:19:aa:b6:8b:72:
         32:9c:0d:1c:df:53:c6:a3:1c:23:12:ce:67:15:fd:90:c6:67:
         73:10:4c:76:d5:01:fd:89:d4:ff:a2:df:b2:8b:2a:82:9d:ee:
         f2:f8:55:39:37:16:1f:c8:58:8e:82:66:c9:c5:63:89:09:5a:
         84:fb:bb:06:f7:de:df:99:94:78:81:59:b4:e8:48:15:be:5a:
         80:5f:06:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----