Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d50f4408-fb6b-3eda-a032-2a43971bfc1f.roa
File:                     d50f4408-fb6b-3eda-a032-2a43971bfc1f.roa (raw, json)
Hash identifier:          sfLSekjnXCYkND2Fs9qWoKdz8c9l98X32xAM0EmR0Ys=
Subject key identifier:   A2:C3:BD:F5:77:9D:43:D5:DD:75:41:28:13:7D:8D:17:D9:82:E0:0A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C447B208
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d50f4408-fb6b-3eda-a032-2a43971bfc1f.roa
Signing time:             Wed 19 Dec 2018 02:24:52 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.143.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:47:b2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=f3b5f436-930b-4ca7-a833-5cfcc64bf57a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:db:9e:e5:a4:ec:94:ee:16:94:2b:85:b2:63:
                    82:ab:d4:8f:7a:46:25:5e:f4:0b:7d:93:bf:5b:c2:
                    40:86:aa:e4:05:a5:bb:2c:ef:39:f5:34:4b:c5:b5:
                    b3:30:11:45:c0:10:8d:fe:5f:ab:0c:67:30:6f:eb:
                    e2:97:3a:8a:25:cd:04:82:9d:ab:4f:4b:cd:0d:d5:
                    ed:24:f9:5d:f6:9f:c9:30:06:c2:86:df:d2:69:e6:
                    61:5c:ad:62:05:7d:ea:8f:56:2a:ce:0c:ab:22:51:
                    28:7c:d0:73:a9:b8:8f:b8:ea:9b:f2:a7:bc:79:39:
                    66:4a:77:47:fe:d3:0d:e4:09:2f:94:ee:02:e0:33:
                    38:ba:b6:3f:c9:54:5d:2a:79:1a:2d:6e:4b:a8:22:
                    f9:5c:d0:81:f7:99:6d:a1:bc:fe:97:bf:74:4a:70:
                    32:88:e9:c7:b7:38:0b:d8:28:41:51:37:f4:0c:6a:
                    4d:f7:b0:49:6f:dc:bd:bb:8c:2c:91:5d:d7:f2:45:
                    98:f6:6f:e4:2e:10:b7:b4:9a:b8:22:69:46:a0:a5:
                    23:f4:85:36:af:d4:81:61:12:18:f3:b0:fd:51:66:
                    a1:fb:8d:d0:b2:2e:96:f1:4d:f0:89:f1:01:0d:1c:
                    0d:8e:79:b1:58:d3:29:e6:6f:45:ca:d1:02:98:08:
                    5b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C3:BD:F5:77:9D:43:D5:DD:75:41:28:13:7D:8D:17:D9:82:E0:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d50f4408-fb6b-3eda-a032-2a43971bfc1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:49:77:b4:6e:ca:db:84:1e:c1:c7:69:d4:0c:d7:de:ef:8e:
         55:9d:fd:85:ba:33:b2:34:29:71:1f:1b:c1:57:92:b1:a4:71:
         cd:55:2a:3b:3c:a2:23:5b:7d:42:6d:b9:0c:2c:aa:da:04:e3:
         93:b2:d8:f6:29:b1:7f:bf:32:77:46:3a:6f:c6:94:59:82:01:
         44:ea:57:e4:88:e5:cc:0f:ee:11:e5:9e:17:c4:93:76:45:64:
         67:6b:52:41:3d:d7:13:43:ba:fb:b9:72:35:27:32:78:18:36:
         f6:89:32:6e:d1:09:7c:f5:58:d7:d9:00:6d:1a:af:aa:3a:8b:
         a4:4e:bf:f4:e6:3a:ec:e7:db:7c:2b:0f:85:53:89:2d:75:05:
         d4:44:a0:7d:bf:75:92:ba:0e:83:e5:8e:89:6d:8c:89:14:46:
         72:ba:38:7e:4f:10:4d:54:3a:80:f4:9a:ea:24:c8:05:72:0b:
         34:1c:f0:3c:d0:87:98:31:86:b2:76:25:86:d8:cc:73:95:4b:
         e1:5e:bc:00:75:8d:6a:85:cd:78:93:91:d9:3a:33:22:62:0c:
         16:66:da:d8:e8:cf:1d:cc:f9:dd:ab:45:a9:d4:11:d8:f2:7d:
         2d:cc:f7:23:15:3a:e6:e4:cf:2d:89:6a:5c:a4:fc:38:b9:7a:
         fe:44:4f:d3
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ8RHsggwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEyMTkwNTAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJGYz
YjVmNDM2LTkzMGItNGNhNy1hODMzLTVjZmNjNjRiZjU3YTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALfbnuWk7JTuFpQrhbJjgqvUj3pGJV70C32Tv1vC
QIaq5AWluyzvOfU0S8W1szARRcAQjf5fqwxnMG/r4pc6iiXNBIKdq09LzQ3V7ST5
XfafyTAGwobf0mnmYVytYgV96o9WKs4MqyJRKHzQc6m4j7jqm/KnvHk5Zkp3R/7T
DeQJL5TuAuAzOLq2P8lUXSp5Gi1uS6gi+VzQgfeZbaG8/pe/dEpwMojpx7c4C9go
QVE39AxqTfewSW/cvbuMLJFd1/JFmPZv5C4Qt7SauCJpRqClI/SFNq/UgWESGPOw
/VFmofuN0LIulvFN8InxAQ0cDY55sVjTKeZvRcrRApgIWzECAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSiw731d51D1d11QSgTfY0X2YLgCjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2Q1MGY0NDA4LWZiNmItM2Vk
YS1hMDMyLTJhNDM5NzFiZmMxZi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADTajzBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAGEl3tG7K24Qewcdp1AzX3u+OVZ39hbozsjQpcR8bwVeSsaRxzVUqOzyiI1t9
Qm25DCyq2gTjk7LY9imxf78yd0Y6b8aUWYIBROpX5IjlzA/uEeWeF8STdkVkZ2tS
QT3XE0O6+7lyNScyeBg29okybtEJfPVY19kAbRqvqjqLpE6/9OY67OfbfCsPhVOJ
LXUF1ESgfb91kroOg+WOiW2MiRRGcro4fk8QTVQ6gPSa6iTIBXILNBzwPNCHmDGG
snYlhtjMc5VL4V68AHWNaoXNeJOR2TozImIMFmba2OjPHcz53atFqdQR2PJ9Lcz3
IxU65uTPLYlqXKT8OLl6/kRP0w==
-----END CERTIFICATE-----