Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a4cfc25c-af1b-3f0a-b3c5-e53f25c6fe70.roa
File:                     a4cfc25c-af1b-3f0a-b3c5-e53f25c6fe70.roa (raw, json)
Hash identifier:          xnGgEwDAC3e2pzipH1jijIhGysxFIao0bWTAjQyC3c8=
Subject key identifier:   36:96:05:3F:36:50:D2:4B:0D:F4:65:B1:B6:9D:EE:FA:6C:40:D5:54
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1669631B952
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a4cfc25c-af1b-3f0a-b3c5-e53f25c6fe70.roa
Signing time:             Sun 21 Oct 2018 10:35:33 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.92.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:96:31:b9:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=45be50c5-18de-4f2d-bf8a-35f05beb8777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3b:f3:3f:8e:36:97:4d:8b:75:0a:e8:94:44:
                    cd:1e:9b:69:89:81:dd:30:72:92:02:1b:35:0b:10:
                    2d:7c:64:55:58:16:9a:aa:b9:ca:ee:83:6c:b5:3f:
                    28:ae:aa:07:db:2b:99:67:d6:74:57:78:83:71:37:
                    a4:b2:28:8f:0b:72:0c:27:ff:47:93:0b:ef:4b:10:
                    7d:b4:88:1b:b1:51:94:c0:7e:e8:10:31:62:27:f5:
                    1d:9f:c2:6d:b5:ba:9b:c9:a6:1e:20:4a:d4:86:0f:
                    c8:0b:35:6c:db:82:74:6e:c0:a5:bb:00:5f:d8:69:
                    b0:59:51:07:36:d8:74:e5:dd:04:d5:fc:8f:c9:b1:
                    1b:2c:06:cf:6a:3f:31:47:f2:02:24:f0:12:4d:55:
                    13:f6:6e:10:98:87:57:fb:04:25:f1:c6:a3:4b:5b:
                    6d:b6:c8:c6:89:ab:2a:27:fa:2a:52:58:eb:c9:ab:
                    da:4b:ca:a6:ed:ab:9b:ec:d0:ff:b9:fb:91:49:38:
                    48:f5:51:e3:59:83:f5:1c:d6:c0:56:95:14:9c:32:
                    2c:17:52:1f:ba:b9:d9:e6:b5:80:63:db:55:6d:85:
                    01:0d:f5:3d:ae:83:be:07:90:e3:31:c0:7e:3b:71:
                    63:60:05:c0:e4:a6:46:de:82:88:e5:59:88:55:8d:
                    a7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:96:05:3F:36:50:D2:4B:0D:F4:65:B1:B6:9D:EE:FA:6C:40:D5:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a4cfc25c-af1b-3f0a-b3c5-e53f25c6fe70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.92.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:da:fd:37:70:13:92:03:d7:db:4d:0e:90:39:92:d4:8f:41:
         eb:68:c2:59:d1:fd:70:09:90:1e:76:b3:62:41:ea:27:d6:24:
         a7:69:e5:0b:9a:81:1b:f9:63:ff:8e:e5:18:e0:0d:37:7f:b4:
         f2:88:f9:6a:d4:a6:0d:c5:35:7c:2f:83:ab:db:82:76:0e:78:
         2b:fc:2c:a4:e0:5b:01:14:9f:68:35:c9:ca:93:d9:3a:af:68:
         bb:30:ae:23:df:1d:5b:28:05:e1:7a:40:44:a6:4a:28:65:4b:
         2a:9f:f5:23:25:11:e4:c9:0a:05:45:74:a3:9c:b5:f6:2e:31:
         84:d1:d8:f5:b9:6f:2c:e1:a2:db:68:d5:cf:9d:7c:3b:eb:8e:
         b2:f7:c2:b3:24:1d:25:47:68:3b:2e:3f:72:1a:c4:b5:c7:8d:
         c3:d4:3f:dc:67:f6:d3:6b:7b:7d:f1:20:24:d4:85:69:48:78:
         dc:39:29:f1:85:45:9b:5a:41:c0:7d:ec:70:33:21:19:7a:d8:
         8d:01:82:35:01:b6:97:fd:9e:fa:e0:b8:5c:c0:96:46:e5:c9:
         76:1a:ec:07:ba:86:43:09:26:6e:6d:c7:0e:0c:67:26:c3:94:
         43:ea:35:6c:14:33:92:6a:90:e3:78:21:f4:a5:a3:a5:c7:1f:
         77:f9:54:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----