Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2969812a-091e-33c5-8f8e-c0f2d7ade56b.roa
File:                     2969812a-091e-33c5-8f8e-c0f2d7ade56b.roa (raw, json)
Hash identifier:          /UOEwckLXXocvOwvpX6/K/PeEpDxeQ8LgTQHxG+NdlU=
Subject key identifier:   2D:18:56:2F:93:AA:8F:09:9C:07:D8:34:EE:3C:57:C0:B3:CC:5F:CB
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C49141DC
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2969812a-091e-33c5-8f8e-c0f2d7ade56b.roa
Signing time:             Wed 19 Dec 2018 03:45:13 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:91:41:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=d5859058-bcc1-4fe5-892b-a15d1c54ac9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:20:28:e0:c0:67:fb:65:b0:0b:77:5e:c8:4e:
                    5b:2b:16:79:43:d9:50:ce:8b:3f:7c:fb:04:75:2c:
                    f6:a1:98:d5:82:fe:48:a5:05:6a:c4:9c:7c:27:ae:
                    9f:63:7d:25:f9:c2:a6:33:9a:44:4e:ba:70:39:b2:
                    0d:31:04:36:16:4b:cc:4b:67:0c:7e:ef:d2:f1:e8:
                    df:3f:7b:30:33:11:18:cf:ea:2d:91:00:ca:7a:64:
                    c3:5e:3a:fe:f5:93:4f:d3:5d:d9:88:f6:43:53:ca:
                    e6:b7:80:6d:e8:74:fa:26:05:5c:25:e0:a7:d3:16:
                    44:94:d7:ba:c9:96:d7:63:d5:62:f1:b8:f8:a5:ed:
                    c0:4c:cd:63:7c:b2:f3:85:a6:10:92:0b:b8:a2:68:
                    22:6e:68:2e:d8:8e:0b:f7:18:69:95:79:2e:ba:47:
                    61:bb:f9:cc:39:01:4d:af:c1:5f:77:ba:81:81:f9:
                    f9:23:cf:30:1a:cc:c0:08:c3:1f:0f:2f:a4:aa:ee:
                    d8:ba:6b:0d:1b:f5:69:6e:91:27:81:45:30:b9:21:
                    7e:a8:3a:f1:f1:ca:ea:49:36:ad:32:97:55:88:c3:
                    96:cb:dd:88:59:1f:39:89:3a:95:10:72:0e:65:9c:
                    30:99:eb:19:0e:a2:99:22:6d:c7:b6:4b:8e:ff:dc:
                    30:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:18:56:2F:93:AA:8F:09:9C:07:D8:34:EE:3C:57:C0:B3:CC:5F:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2969812a-091e-33c5-8f8e-c0f2d7ade56b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ca:b7:6e:d8:76:82:81:46:0f:a9:41:b5:52:94:70:16:85:
         0a:0c:0a:8b:ea:03:93:91:18:7d:54:a4:2e:22:ce:01:51:3d:
         ae:b7:5a:35:cf:12:d7:52:dd:cd:6c:f6:2b:ec:18:a1:4a:d6:
         ca:91:b0:35:47:45:05:0d:55:2d:34:a6:10:d5:7f:b9:cc:ec:
         97:08:9b:bb:ed:f3:de:fb:58:b6:ba:20:d7:ec:86:69:f2:c8:
         87:33:fd:cf:8b:0b:7f:4f:25:fa:8f:97:da:78:5b:c4:03:a8:
         7e:0d:95:45:53:33:29:bb:18:e4:42:50:b7:52:a2:51:83:4b:
         3c:b4:70:ae:1c:34:7e:ce:3f:89:eb:23:a2:87:48:d7:59:05:
         27:d7:4e:94:29:ba:0f:13:93:9f:4c:6d:fe:3c:e9:6a:16:b5:
         8b:28:d6:55:e1:84:2c:b6:41:f3:30:b1:5f:8d:6a:2b:73:51:
         2d:ef:85:a4:25:d0:c9:e2:d4:91:a1:90:ff:11:fc:f7:7a:f6:
         40:f4:c0:09:24:8f:3b:34:13:9b:05:b7:24:e0:bf:c2:6c:ed:
         5d:a3:44:0b:e3:13:e8:c3:66:87:d1:ed:cb:4f:3e:a4:55:cc:
         32:b2:a1:54:15:2a:d8:1a:bc:f0:72:58:74:39:41:d4:f3:aa:
         dc:ca:46:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----