Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/17a75b9d-a35a-3be8-a771-fcff19a07b9c.roa
File:                     17a75b9d-a35a-3be8-a771-fcff19a07b9c.roa (raw, json)
Hash identifier:          qB6rwsRgdtWH9GL6XslIJsk5jwBphWo6YoKYx6FBaXM=
Subject key identifier:   FB:94:7D:90:BD:32:91:6C:45:D9:D1:B8:CB:09:BA:B6:5D:A6:26:D7
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C447228D
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/17a75b9d-a35a-3be8-a771-fcff19a07b9c.roa
Signing time:             Wed 19 Dec 2018 02:24:15 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.92.87.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:47:22:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=867f96d8-f852-4dbd-ba09-dd5b2f2d6051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:26:42:4c:88:1b:17:4d:fc:a8:c5:d1:df:6f:
                    bb:c0:62:91:45:34:4d:0e:77:cc:e1:76:96:ac:a4:
                    26:8f:b8:13:af:e7:77:f4:3b:0a:dd:e9:12:91:ba:
                    0d:6f:79:e4:81:23:b8:c4:ab:9c:9e:4b:3f:66:b8:
                    e1:12:b9:ba:69:a6:dc:15:2a:93:1c:79:66:4f:db:
                    bc:9f:dc:d6:05:53:7b:c9:5c:e3:32:36:0d:e8:22:
                    47:0f:2f:9e:3b:c3:09:0e:0d:b7:db:34:67:3b:0a:
                    fa:ca:10:77:89:92:10:f5:b7:30:bd:08:01:72:02:
                    02:35:09:ee:87:4d:a8:a3:78:9c:51:b4:51:fe:81:
                    74:9e:2f:e6:a2:df:80:e2:a8:34:b9:2a:6c:8e:14:
                    86:df:39:9e:6d:65:fc:85:3b:68:b6:54:c3:1e:98:
                    bd:c1:44:3e:6b:7c:6e:f1:1b:a9:ed:dd:04:be:63:
                    09:06:d2:42:a9:3e:bb:26:7d:53:34:db:ef:f6:87:
                    de:80:49:f6:a2:2a:fa:86:8a:6b:d1:56:b5:fe:8f:
                    9c:1c:2f:4a:e5:e3:6d:ba:ed:49:2a:56:1e:9e:d6:
                    af:db:60:3c:74:45:0e:7b:5d:ab:70:97:6f:d8:bc:
                    31:83:25:2a:b3:81:69:21:85:6b:49:2b:44:69:98:
                    88:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:94:7D:90:BD:32:91:6C:45:D9:D1:B8:CB:09:BA:B6:5D:A6:26:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/17a75b9d-a35a-3be8-a771-fcff19a07b9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.92.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:e4:90:f8:41:1c:de:ae:7c:e7:e9:03:aa:56:52:9e:04:01:
         4b:7f:15:47:e1:96:18:72:ae:db:6a:59:e3:dc:35:de:10:28:
         8b:92:3e:cc:a4:4f:b4:95:e2:78:e6:76:6f:65:2c:5c:39:41:
         79:af:da:9f:a1:0b:2f:8f:98:f5:2d:fe:3a:40:cc:31:57:3d:
         5c:92:03:2c:64:5c:3c:e6:06:6d:3f:62:5d:62:a0:c0:65:e7:
         21:6f:b3:56:91:81:0c:06:9e:aa:cb:8b:a9:ea:d9:88:b5:91:
         c7:da:21:f4:a5:96:8d:29:cd:a9:86:37:57:91:4d:65:9b:f1:
         2b:f8:7c:d7:a9:ce:01:2d:92:21:ed:80:ba:f9:02:e5:8c:6d:
         9b:39:8f:81:9d:c9:79:c3:22:74:30:20:17:61:a8:24:ff:56:
         d1:da:22:22:36:b5:25:6e:7f:2f:53:07:c4:2e:f4:6c:ae:e7:
         09:51:8f:60:bb:7b:68:81:3c:37:e8:7f:c6:4f:89:29:1a:8b:
         92:5e:65:ab:3f:c8:41:f5:27:a1:27:6a:4c:f7:c5:ed:4e:fd:
         6b:b2:43:62:2a:16:0e:32:3f:56:66:81:a0:d1:24:f5:d0:ea:
         67:7b:a5:73:9b:1d:88:88:76:3d:0a:bc:27:0f:e0:55:0a:a5:
         4d:2a:0c:dd
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ8RHIo0wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEyMTkwNTAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDg2
N2Y5NmQ4LWY4NTItNGRiZC1iYTA5LWRkNWIyZjJkNjA1MTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKMmQkyIGxdN/KjF0d9vu8BikUU0TQ53zOF2lqyk
Jo+4E6/nd/Q7Ct3pEpG6DW955IEjuMSrnJ5LP2a44RK5ummm3BUqkxx5Zk/bvJ/c
1gVTe8lc4zI2DegiRw8vnjvDCQ4Nt9s0ZzsK+soQd4mSEPW3ML0IAXICAjUJ7odN
qKN4nFG0Uf6BdJ4v5qLfgOKoNLkqbI4Uht85nm1l/IU7aLZUwx6YvcFEPmt8bvEb
qe3dBL5jCQbSQqk+uyZ9UzTb7/aH3oBJ9qIq+oaKa9FWtf6PnBwvSuXjbbrtSSpW
Hp7Wr9tgPHRFDntdq3CXb9i8MYMlKrOBaSGFa0krRGmYiGMCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBT7lH2QvTKRbEXZ0bjLCbq2XaYm1zCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjLzE3YTc1YjlkLWEzNWEtM2Jl
OC1hNzcxLWZjZmYxOWEwN2I5Yy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADRcVzBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAC+SQ+EEc3q585+kDqlZSngQBS38VR+GWGHKu22pZ49w13hAoi5I+zKRPtJXi
eOZ2b2UsXDlBea/an6ELL4+Y9S3+OkDMMVc9XJIDLGRcPOYGbT9iXWKgwGXnIW+z
VpGBDAaeqsuLqerZiLWRx9oh9KWWjSnNqYY3V5FNZZvxK/h816nOAS2SIe2AuvkC
5YxtmzmPgZ3JecMidDAgF2GoJP9W0doiIja1JW5/L1MHxC70bK7nCVGPYLt7aIE8
N+h/xk+JKRqLkl5lqz/IQfUnoSdqTPfF7U79a7JDYioWDjI/VmaBoNEk9dDqZ3ul
c5sdiIh2PQq8Jw/gVQqlTSoM3Q==
-----END CERTIFICATE-----