Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/158dc257-83f3-32d4-beb9-910342a3efb0.roa
File:                     158dc257-83f3-32d4-beb9-910342a3efb0.roa (raw, json)
Hash identifier:          8jS683fjG0HJg/ALP82n8BuKVtcgJ/98IdHxTOBwfmc=
Subject key identifier:   A4:0D:DD:41:5F:CE:44:A4:05:00:28:9A:AE:A7:A4:13:E4:02:6C:90
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665D24DAD7
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/158dc257-83f3-32d4-beb9-910342a3efb0.roa
Signing time:             Wed 10 Oct 2018 08:43:08 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.169.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5d:24:da:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=560bbb5b-9131-4de7-a689-cab729f8f312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7a:03:39:5e:cc:1b:49:99:c0:99:56:54:a3:
                    88:a8:70:9c:5b:55:59:ba:68:67:f0:9c:e1:71:f1:
                    54:c1:7a:4b:4d:3c:6d:09:e1:dd:3a:4f:50:58:2f:
                    0d:45:80:db:c9:33:39:13:0b:ed:5c:d4:4f:f7:61:
                    47:32:a3:3c:04:91:ef:26:9c:37:af:3a:04:d4:3c:
                    88:77:ad:f2:3a:cb:a0:9a:e8:65:86:9c:3a:7f:29:
                    2b:b8:fa:9b:bc:aa:02:6b:85:62:d3:99:ad:c9:37:
                    d8:b8:8d:db:2c:50:34:ab:35:2b:9b:c8:9e:eb:59:
                    b9:f5:c7:92:9e:0e:80:ed:4f:c0:d3:51:20:45:21:
                    47:f3:cc:af:1f:b6:f4:ad:48:76:83:5b:c8:3d:28:
                    a4:41:03:10:ab:b8:7d:00:60:74:d7:3b:7a:d3:27:
                    17:67:13:bd:89:2c:d6:da:6d:40:d1:f9:10:85:c9:
                    69:eb:30:17:00:95:78:67:df:5f:79:3e:18:a2:9d:
                    43:bb:51:e3:93:83:88:ae:e1:c2:73:b7:85:50:19:
                    bb:9e:61:8e:0f:56:e8:a5:9f:28:8a:35:fd:d6:68:
                    08:2d:af:63:9a:e7:9f:3e:a4:55:ea:71:35:a3:23:
                    3f:76:60:36:29:b9:94:3b:3d:58:bb:78:42:54:9e:
                    ee:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0D:DD:41:5F:CE:44:A4:05:00:28:9A:AE:A7:A4:13:E4:02:6C:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/158dc257-83f3-32d4-beb9-910342a3efb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.169.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:1c:59:f2:80:80:77:92:99:6c:8c:43:33:98:a8:2a:d2:57:
         52:ac:00:a0:17:96:c0:72:12:a5:92:5a:14:5a:dd:68:16:f5:
         1a:a8:1b:f1:61:f3:ec:70:83:e3:d2:72:fc:fb:ac:34:8e:8e:
         42:bb:14:44:a1:68:df:cc:cf:e0:28:a9:99:d5:be:19:3c:fc:
         d6:0f:48:b6:93:85:61:e8:78:3c:bf:8a:1d:d6:35:a8:43:7e:
         2b:77:6c:7c:cc:53:0a:2f:d5:74:71:20:83:97:42:0e:87:1f:
         3b:5a:c1:b9:47:ca:07:cd:00:46:8d:08:49:85:76:f3:2d:fb:
         90:b9:d2:09:ab:8e:6d:f4:dc:af:39:4b:86:60:62:0a:a0:3e:
         99:9f:62:c5:ec:56:1f:b7:a1:e2:c4:6a:c3:27:2a:d3:d3:fc:
         ac:46:fa:84:f9:0b:7f:d8:79:cc:5f:c5:aa:a3:df:55:03:8c:
         24:a1:ab:f3:b7:3f:a0:ec:12:7d:e8:5a:53:8f:ff:4a:f2:c1:
         5f:92:fa:62:87:8f:db:df:04:5e:24:32:fc:90:93:45:17:23:
         9b:d9:51:a9:19:65:2d:c7:c0:15:b7:e5:09:a1:16:5b:11:3a:
         2a:c7:2e:ff:b4:6d:b1:28:51:2a:b4:c8:d6:b9:92:66:5d:2b:
         d3:f4:41:5a
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZl0k2tcwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMTAwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDU2
MGJiYjViLTkxMzEtNGRlNy1hNjg5LWNhYjcyOWY4ZjMxMjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAJd6AzlezBtJmcCZVlSjiKhwnFtVWbpoZ/Cc4XHx
VMF6S008bQnh3TpPUFgvDUWA28kzORML7VzUT/dhRzKjPASR7yacN686BNQ8iHet
8jrLoJroZYacOn8pK7j6m7yqAmuFYtOZrck32LiN2yxQNKs1K5vInutZufXHkp4O
gO1PwNNRIEUhR/PMrx+29K1IdoNbyD0opEEDEKu4fQBgdNc7etMnF2cTvYks1tpt
QNH5EIXJaeswFwCVeGffX3k+GKKdQ7tR45ODiK7hwnO3hVAZu55hjg9W6KWfKIo1
/dZoCC2vY5rnnz6kVepxNaMjP3ZgNim5lDs9WLt4QlSe7h0CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSkDd1BX85EpAUAKJqup6QT5AJskDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjLzE1OGRjMjU3LTgzZjMtMzJk
NC1iZWI5LTkxMDM0MmEzZWZiMC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBzapgDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAoBxZ8oCAd5KZbIxDM5ioKtJXUqwAoBeWwHISpZJaFFrdaBb1Gqgb8WHz7HCD
49Jy/PusNI6OQrsURKFo38zP4CipmdW+GTz81g9ItpOFYeh4PL+KHdY1qEN+K3ds
fMxTCi/VdHEgg5dCDocfO1rBuUfKB80ARo0ISYV28y37kLnSCauObfTcrzlLhmBi
CqA+mZ9ixexWH7eh4sRqwycq09P8rEb6hPkLf9h5zF/FqqPfVQOMJKGr87c/oOwS
fehaU4//SvLBX5L6YoeP298EXiQy/JCTRRcjm9lRqRllLcfAFbflCaEWWxE6Kscu
/7RtsShRKrTI1rmSZl0r0/RBWg==
-----END CERTIFICATE-----