Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/53d253da-fe6e-3f46-a19f-13f9239ed35a.roa
File:                     53d253da-fe6e-3f46-a19f-13f9239ed35a.roa (raw, json)
Hash identifier:          NuW442IV46DGHZT5iCMNjB/L/9S527uQ7EGQbWXp7Ek=
Subject key identifier:   82:41:CD:43:E2:27:54:53:FF:0F:66:C1:59:84:B7:25:72:69:7E:BA
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665C2E7397
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/53d253da-fe6e-3f46-a19f-13f9239ed35a.roa
Signing time:             Wed 10 Oct 2018 04:14:00 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.245.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:2e:73:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=f17ca065-0397-430a-8dfa-f09e8f922726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1f:5c:50:f5:db:0b:84:0d:27:1f:f4:34:1d:
                    a8:24:31:11:c1:c6:62:9d:86:b3:6b:89:c9:b3:57:
                    6f:a6:a4:7c:6d:11:bd:9f:03:e9:39:66:40:fe:87:
                    1c:24:ec:0b:41:d7:4b:5a:63:0c:40:ae:bd:97:98:
                    3a:e8:12:6b:1d:79:62:33:f3:64:17:af:73:f5:91:
                    0a:4b:ea:59:10:a0:57:18:7e:47:c3:da:e8:51:a8:
                    a5:da:f8:df:32:fb:4e:06:3c:a6:fd:de:06:48:dc:
                    ec:a6:ab:76:6a:5a:80:0c:34:60:f2:26:8d:6a:a9:
                    0b:5b:eb:f4:a4:27:5e:f9:89:52:0f:c0:ce:91:99:
                    8a:04:1b:54:61:20:a0:bd:21:13:87:03:4a:f2:1a:
                    c4:85:c8:9f:df:85:f4:d1:db:9c:e7:e3:1d:09:bd:
                    31:00:43:40:a8:d6:63:51:38:00:16:4e:10:09:c3:
                    af:26:66:4d:46:f0:02:08:d7:af:13:f4:63:6a:fa:
                    9f:ed:fa:63:df:22:58:e3:ad:c1:74:ba:fe:89:ba:
                    62:7f:2f:54:7d:60:ff:d1:42:dc:ce:c5:a5:88:50:
                    59:2c:37:63:8b:75:6d:d8:e5:1b:f5:c0:33:a8:de:
                    21:93:be:a8:81:33:92:1f:03:76:af:ab:dc:69:54:
                    cf:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:41:CD:43:E2:27:54:53:FF:0F:66:C1:59:84:B7:25:72:69:7E:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/53d253da-fe6e-3f46-a19f-13f9239ed35a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.245.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:06:05:ab:af:0f:a7:7e:92:e2:0a:ac:43:a0:91:ac:89:76:
         a2:a5:e0:97:f6:a5:aa:ed:c5:6c:7d:31:35:82:40:47:6e:77:
         f2:61:c4:e7:a8:fb:cd:83:d7:10:3f:f2:3c:eb:f5:0a:e6:fe:
         00:ec:cd:4c:3a:09:fe:c6:2b:33:cc:ee:9c:3c:94:28:a9:63:
         8b:fc:be:b4:8d:8e:28:05:78:37:21:03:a3:9d:b7:95:3a:fd:
         fc:16:ee:b7:d2:4c:7f:c4:cc:c3:8e:1d:7e:e5:ee:87:2c:e3:
         ed:88:13:6a:ce:15:9d:25:0d:61:54:10:6a:ec:33:45:17:3a:
         41:9a:5f:0f:aa:70:e0:47:7f:c9:2c:6b:70:ce:87:46:2d:86:
         dc:64:5c:1a:20:14:4b:41:ea:04:f6:44:3f:4b:e3:f3:ed:29:
         a3:20:9e:56:6d:d5:4a:58:c8:6a:a2:76:f2:4c:30:a6:f2:23:
         83:6b:f2:ff:5d:de:78:7c:1f:a8:c2:aa:b5:cf:f7:21:65:b1:
         cd:8f:00:15:25:a9:02:af:19:0c:02:59:61:b3:82:b2:a6:76:
         27:4b:cc:a3:7c:0d:fe:c9:0f:07:5b:32:b3:74:ee:24:75:69:
         31:75:ce:f3:b7:3b:48:e8:77:8c:89:e0:f7:d3:82:f1:cd:5b:
         4e:68:23:d3
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZlwuc5cwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMTAwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJGYx
N2NhMDY1LTAzOTctNDMwYS04ZGZhLWYwOWU4ZjkyMjcyNjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMcfXFD12wuEDScf9DQdqCQxEcHGYp2Gs2uJybNX
b6akfG0RvZ8D6TlmQP6HHCTsC0HXS1pjDECuvZeYOugSax15YjPzZBevc/WRCkvq
WRCgVxh+R8Pa6FGopdr43zL7TgY8pv3eBkjc7KardmpagAw0YPImjWqpC1vr9KQn
XvmJUg/AzpGZigQbVGEgoL0hE4cDSvIaxIXIn9+F9NHbnOfjHQm9MQBDQKjWY1E4
ABZOEAnDryZmTUbwAgjXrxP0Y2r6n+36Y98iWOOtwXS6/om6Yn8vVH1g/9FC3M7F
pYhQWSw3Y4t1bdjlG/XAM6jeIZO+qIEzkh8Ddq+r3GlUz58CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSCQc1D4idUU/8PZsFZhLclcml+ujCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjLzUzZDI1M2RhLWZlNmUtM2Y0
Ni1hMTlmLTEzZjkyMzllZDM1YS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBzb1gDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAOwYFq68Pp36S4gqsQ6CRrIl2oqXgl/alqu3FbH0xNYJAR2538mHE56j7zYPX
ED/yPOv1Cub+AOzNTDoJ/sYrM8zunDyUKKlji/y+tI2OKAV4NyEDo523lTr9/Bbu
t9JMf8TMw44dfuXuhyzj7YgTas4VnSUNYVQQauwzRRc6QZpfD6pw4Ed/ySxrcM6H
Ri2G3GRcGiAUS0HqBPZEP0vj8+0poyCeVm3VSljIaqJ28kwwpvIjg2vy/13eeHwf
qMKqtc/3IWWxzY8AFSWpAq8ZDAJZYbOCsqZ2J0vMo3wN/skPB1sys3TuJHVpMXXO
87c7SOh3jIng99OC8c1bTmgj0w==
-----END CERTIFICATE-----