Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1679470d-f8bf-34f5-a08a-9d69c0635a2d.roa
File:                     1679470d-f8bf-34f5-a08a-9d69c0635a2d.roa (raw, json)
Hash identifier:          Md6QQtsFFX9+MZf/k0PzbhsEqqd9Jlky3LCcNGI9P6E=
Subject key identifier:   CA:E5:90:5A:1E:E8:8C:4D:5C:B5:48:46:9F:00:7A:C1:97:35:2A:D4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665CD47B02
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1679470d-f8bf-34f5-a08a-9d69c0635a2d.roa
Signing time:             Wed 10 Oct 2018 07:15:20 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.95.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:d4:7b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=b44f1c0f-364b-407d-9719-b3b75a8a6c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7d:3e:7f:2b:67:a5:e0:f8:0c:65:9f:c8:8f:
                    6f:b5:13:66:b6:4e:a8:e0:d3:74:97:7c:6f:db:f0:
                    8c:56:f9:54:e1:42:99:0e:38:8e:07:0f:2f:be:9b:
                    d4:5a:b5:d0:d5:07:c1:3b:6f:f0:e2:f0:b5:e7:c6:
                    10:12:1c:f8:9d:b6:46:da:90:cb:64:8c:c8:97:db:
                    ad:cd:04:b6:11:9b:1f:90:28:c1:e0:df:89:8f:ea:
                    97:01:a4:18:06:aa:5f:04:f5:0a:38:af:56:50:cd:
                    88:de:f4:d0:fc:53:1b:61:63:e8:59:99:8a:a7:b8:
                    30:33:8a:81:b6:24:99:f6:99:39:2a:b9:fd:52:9b:
                    52:28:58:d5:f1:f4:97:87:ae:93:ba:53:47:cd:d9:
                    79:0e:9a:03:87:e7:e0:05:e7:9b:a8:d9:26:15:9e:
                    cf:c8:3c:8b:ab:f7:f6:fe:b2:70:c9:d8:e1:be:7a:
                    38:bf:b2:a3:92:cd:14:5c:6d:5a:c4:cc:27:02:1f:
                    c4:ab:d0:e4:27:87:78:88:e5:73:58:a0:25:cc:d4:
                    97:ed:a9:52:27:b9:5c:15:f0:72:bd:f2:b4:c5:77:
                    9e:2d:56:67:f3:5d:e8:9e:8d:de:18:9e:e0:a2:9b:
                    63:56:0b:0a:fe:df:0b:a1:27:72:de:05:d6:ee:2e:
                    f3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E5:90:5A:1E:E8:8C:4D:5C:B5:48:46:9F:00:7A:C1:97:35:2A:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1679470d-f8bf-34f5-a08a-9d69c0635a2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.95.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:c1:86:c4:5b:2c:57:87:25:3d:79:35:69:ac:fb:64:7d:d9:
         61:00:54:2f:d4:8f:9d:a9:2d:87:e4:1c:45:ee:b3:06:21:57:
         d1:f6:a2:6d:e4:8c:f6:4e:01:25:9c:93:f3:06:ca:64:d9:07:
         fd:87:b7:3a:29:41:6c:62:1d:58:81:5f:e8:2b:5f:32:6b:5d:
         b4:99:2b:54:30:50:47:17:f4:b8:e4:5a:96:bd:7b:63:45:17:
         ce:85:95:26:a7:6d:87:0a:e3:a5:a8:af:58:ae:01:51:16:81:
         55:7c:a8:b7:9d:51:84:df:17:8e:48:20:52:d6:bf:61:54:3d:
         e0:31:7d:80:23:3a:49:9c:0f:c4:4c:57:61:28:e4:69:66:bf:
         42:93:d0:1a:24:e8:16:64:20:03:ba:6e:0f:5c:08:c5:57:54:
         fe:e7:0e:66:f0:b3:2a:5c:d0:50:9b:b6:62:cb:ba:61:77:1e:
         da:d5:c8:c4:18:7e:10:ac:f8:c6:99:49:f9:f8:18:8b:91:b7:
         72:8e:10:1b:d8:7e:52:03:0b:7d:0e:ba:c9:59:f5:d8:0f:48:
         95:38:6f:6b:2a:f3:58:37:91:54:cd:03:ae:6e:cf:02:29:18:
         b2:2c:b9:ee:22:8d:dd:e2:65:75:9c:77:c1:1f:c5:a8:b7:ae:
         48:4f:de:ac
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZlzUewIwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMTAwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJGI0
NGYxYzBmLTM2NGItNDA3ZC05NzE5LWIzYjc1YThhNmMzYjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALZ9Pn8rZ6Xg+Axln8iPb7UTZrZOqODTdJd8b9vw
jFb5VOFCmQ44jgcPL76b1Fq10NUHwTtv8OLwtefGEBIc+J22RtqQy2SMyJfbrc0E
thGbH5AoweDfiY/qlwGkGAaqXwT1CjivVlDNiN700PxTG2Fj6FmZiqe4MDOKgbYk
mfaZOSq5/VKbUihY1fH0l4euk7pTR83ZeQ6aA4fn4AXnm6jZJhWez8g8i6v39v6y
cMnY4b56OL+yo5LNFFxtWsTMJwIfxKvQ5CeHeIjlc1igJczUl+2pUie5XBXwcr3y
tMV3ni1WZ/Nd6J6N3hie4KKbY1YLCv7fC6Enct4F1u4u88cCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTK5ZBaHuiMTVy1SEafAHrBlzUq1DCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjLzE2Nzk0NzBkLWY4YmYtMzRm
NS1hMDhhLTlkNjljMDYzNWEyZC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADRf8jBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAs8GGxFssV4clPXk1aaz7ZH3ZYQBUL9SPnakth+QcRe6zBiFX0faibeSM9k4B
JZyT8wbKZNkH/Ye3OilBbGIdWIFf6CtfMmtdtJkrVDBQRxf0uORalr17Y0UXzoWV
JqdthwrjpaivWK4BURaBVXyot51RhN8XjkggUta/YVQ94DF9gCM6SZwPxExXYSjk
aWa/QpPQGiToFmQgA7puD1wIxVdU/ucOZvCzKlzQUJu2Ysu6YXce2tXIxBh+EKz4
xplJ+fgYi5G3co4QG9h+UgMLfQ66yVn12A9IlThvayrzWDeRVM0Drm7PAikYsiy5
7iKN3eJldZx3wR/FqLeuSE/erA==
-----END CERTIFICATE-----