Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4e26dc1d-249d-3eac-a546-a6955d962388.roa
File:                     4e26dc1d-249d-3eac-a546-a6955d962388.roa (raw, json)
Hash identifier:          X5beml9uykXMd1BFSOgPtyTHI+lnG4nJgL18IRrbM5c=
Subject key identifier:   7A:40:3C:F6:12:49:95:87:48:A4:6B:F3:94:C5:C9:C5:BE:FC:DD:F9
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C44807F7
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4e26dc1d-249d-3eac-a546-a6955d962388.roa
Signing time:             Wed 19 Dec 2018 02:25:14 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:48:07:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=6f8c230d-13d2-489d-b626-efeebe0cd2ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:26:5f:2d:34:19:8d:0f:cb:dc:e7:ea:6b:18:
                    9b:13:70:67:1b:dd:eb:bb:88:53:83:92:67:e8:83:
                    e0:fe:ac:46:fb:49:b5:83:25:e7:80:61:1a:8b:4f:
                    44:43:0c:0c:4c:b1:10:c2:73:e1:0f:6b:eb:95:0d:
                    76:0a:80:9a:62:11:fc:6f:8a:b6:9c:8e:b8:83:0e:
                    cf:a8:f2:c3:cd:92:4f:39:d4:6a:04:fc:54:38:96:
                    83:7e:40:97:66:fa:e0:27:69:f3:82:c7:66:ca:bc:
                    6b:3f:c1:06:ef:a0:05:ff:61:51:e9:00:3b:e8:b1:
                    7e:28:6e:7d:73:3e:1c:97:2f:c9:7c:59:90:30:18:
                    c1:1e:cd:4e:1f:c7:29:e4:a4:6c:aa:75:1c:5a:e8:
                    27:27:4d:8d:3b:98:ee:38:85:09:54:71:63:f6:84:
                    1f:6d:fc:3b:49:e3:92:73:3c:fb:1f:e4:ce:04:e4:
                    45:33:4d:3c:f2:27:7c:4f:b4:66:bf:10:86:c2:70:
                    6d:ec:14:80:82:29:e5:c2:07:b0:11:a7:b8:65:84:
                    73:30:26:75:ef:9a:63:00:11:29:93:b7:4d:2f:27:
                    bf:fa:8f:04:fa:23:1d:81:66:36:3e:c9:61:6b:f7:
                    1a:eb:b3:a7:07:30:14:96:0e:75:e2:1d:c6:f4:f3:
                    df:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:40:3C:F6:12:49:95:87:48:A4:6B:F3:94:C5:C9:C5:BE:FC:DD:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4e26dc1d-249d-3eac-a546-a6955d962388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:37:47:a4:35:75:9e:14:f0:30:6f:f0:d8:eb:f2:08:cc:91:
         98:11:84:5d:eb:6d:a7:4f:74:26:74:2f:4a:e2:32:42:e2:45:
         33:f3:c6:16:e2:a1:9a:17:77:c6:b1:87:5c:cb:c3:a6:d5:f5:
         15:a0:28:5a:cb:e0:8c:89:b1:12:2f:aa:84:48:00:da:c4:26:
         9d:26:1e:89:ff:cd:3d:83:0c:96:4c:d6:ab:c6:79:e8:12:e2:
         c4:ff:32:6f:80:d6:c8:50:5c:35:fe:d6:4e:65:46:9f:09:11:
         f1:46:40:ce:eb:08:ed:2b:f5:fa:6f:7f:50:45:55:02:1b:29:
         e7:f6:fc:45:56:52:d2:b6:9a:96:83:e5:a1:cc:88:e5:96:f3:
         82:f3:c3:ea:b4:59:8f:0e:de:db:0c:1e:59:87:7c:f8:7c:e0:
         78:67:b5:ba:21:1c:8b:77:01:ec:85:9c:40:f8:c1:22:b1:3c:
         b8:f9:1c:f8:8c:63:1b:5d:9e:9c:de:d4:a3:e6:8f:82:ef:7e:
         fe:56:ff:41:e3:9b:6c:69:fd:c9:d1:6d:00:15:02:98:68:38:
         c2:f3:4b:f1:31:94:2f:ba:1e:c8:fa:aa:1b:1e:36:82:d0:d8:
         e7:bb:26:cf:d1:ce:e2:b5:ca:db:1f:09:d7:5a:cd:db:9c:46:
         78:bd:4e:e3
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ8RIB/cwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEyMTkwNTAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDZm
OGMyMzBkLTEzZDItNDg5ZC1iNjI2LWVmZWViZTBjZDJlYzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOsmXy00GY0Py9zn6msYmxNwZxvd67uIU4OSZ+iD
4P6sRvtJtYMl54BhGotPREMMDEyxEMJz4Q9r65UNdgqAmmIR/G+KtpyOuIMOz6jy
w82STznUagT8VDiWg35Al2b64Cdp84LHZsq8az/BBu+gBf9hUekAO+ixfihufXM+
HJcvyXxZkDAYwR7NTh/HKeSkbKp1HFroJydNjTuY7jiFCVRxY/aEH238O0njknM8
+x/kzgTkRTNNPPInfE+0Zr8QhsJwbewUgIIp5cIHsBGnuGWEczAmde+aYwARKZO3
TS8nv/qPBPojHYFmNj7JYWv3GuuzpwcwFJYOdeIdxvTz34sCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBR6QDz2EkmVh0ika/OUxcnFvvzd+TCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjLzRlMjZkYzFkLTI0OWQtM2Vh
Yy1hNTQ2LWE2OTU1ZDk2MjM4OC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADTamTBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAlTdHpDV1nhTwMG/w2OvyCMyRmBGEXettp090JnQvSuIyQuJFM/PGFuKhmhd3
xrGHXMvDptX1FaAoWsvgjImxEi+qhEgA2sQmnSYeif/NPYMMlkzWq8Z56BLixP8y
b4DWyFBcNf7WTmVGnwkR8UZAzusI7Sv1+m9/UEVVAhsp5/b8RVZS0raaloPlocyI
5ZbzgvPD6rRZjw7e2wweWYd8+HzgeGe1uiEci3cB7IWcQPjBIrE8uPkc+IxjG12e
nN7Uo+aPgu9+/lb/QeObbGn9ydFtABUCmGg4wvNL8TGUL7oeyPqqGx42gtDY57sm
z9HO4rXK2x8J11rN25xGeL1O4w==
-----END CERTIFICATE-----