Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/58c35c0a-0a92-35cf-8143-6f5ddf96c2a6.roa
File:                     58c35c0a-0a92-35cf-8143-6f5ddf96c2a6.roa (raw, json)
Hash identifier:          JIjAL2y5hyYcZQ3v2YgK/YMXN7TdFznOM97bEWzLPOA=
Subject key identifier:   B1:9A:EE:98:B7:D6:88:15:3C:3F:87:B4:60:74:75:C9:49:7B:F4:34
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665CD4C78E
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/58c35c0a-0a92-35cf-8143-6f5ddf96c2a6.roa
Signing time:             Wed 10 Oct 2018 07:15:40 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.219.36.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:d4:c7:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=766c9543-ed43-4fb5-9282-b7b7019df9b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cc:0a:2d:b8:0c:59:90:5a:05:9b:31:64:05:
                    ee:4e:82:7e:a5:4f:80:f2:7e:ab:1a:83:e2:66:dc:
                    61:8c:71:de:e6:b9:88:23:d3:9e:fc:74:2d:9a:cb:
                    f5:24:fd:e0:e4:e9:ca:25:9e:d2:5a:81:ef:36:5d:
                    6e:3a:62:5e:43:b1:be:2b:ec:f8:18:5f:a9:b9:a7:
                    f5:a2:65:aa:f0:fc:6e:57:a5:e8:1b:d5:58:d4:cc:
                    8c:6e:98:38:76:e2:77:76:d6:89:0e:05:b2:02:55:
                    9b:f6:ae:0f:96:59:7f:f9:26:59:85:68:ba:92:b7:
                    59:24:fa:f4:82:44:15:98:72:bd:cb:4a:db:1e:17:
                    95:c9:8e:d2:b8:cd:21:8f:d3:97:d5:3d:84:12:01:
                    3d:5e:ce:12:86:52:d3:98:ad:ae:0f:2d:49:3e:d8:
                    1f:ba:48:15:62:ef:0b:c3:ef:03:a6:01:4b:32:e3:
                    ab:a8:b3:a7:d9:fe:4b:fe:e6:32:bb:0e:ec:98:39:
                    97:46:f7:0c:42:44:b2:3c:9a:1d:bb:c4:9b:b5:96:
                    50:17:40:3d:79:f7:61:f6:4a:a2:6e:b0:f6:46:b6:
                    13:19:64:93:c0:58:ee:14:35:d4:94:f6:a2:a0:78:
                    5b:ed:ad:0a:b2:3c:bc:58:dc:a3:01:be:bd:91:0f:
                    bf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9A:EE:98:B7:D6:88:15:3C:3F:87:B4:60:74:75:C9:49:7B:F4:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/58c35c0a-0a92-35cf-8143-6f5ddf96c2a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.219.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:8b:5c:78:c1:64:35:80:f7:86:9d:61:02:6d:43:a8:45:82:
         a5:73:06:ea:3d:e5:de:28:96:42:3d:5e:9d:b2:23:62:93:f7:
         2e:44:2b:e8:cb:88:d2:39:c3:66:c4:d3:9d:2b:65:b3:1d:41:
         3a:d8:98:67:92:ea:2e:de:a4:ca:2e:a2:b4:f4:23:7a:fe:6d:
         4c:5c:6d:32:19:5f:bf:20:05:59:9a:cd:7c:8d:76:bd:a2:57:
         90:cc:e1:ea:a3:7a:6e:3e:aa:b7:e3:67:b4:0b:ca:36:f3:fd:
         dd:b5:a4:74:95:6f:72:ee:f7:ad:f8:c9:95:d3:4c:63:e4:a2:
         91:1f:d8:85:82:ba:1b:b9:ee:c8:b8:de:ef:64:83:83:b3:fa:
         41:c5:97:d0:77:5d:ca:69:f5:41:a2:93:68:89:60:6f:9e:c5:
         01:c4:b1:54:c3:b2:7c:c0:0e:6b:77:3c:06:e2:b1:5e:3e:19:
         15:04:ce:a9:47:96:9e:ad:aa:01:ba:91:1b:9a:99:d5:2d:64:
         fd:cb:02:3d:12:0d:14:8d:91:ae:5c:a4:a5:ab:76:f9:e3:c2:
         df:5b:f7:7b:26:79:77:b7:fd:a6:13:02:2b:3e:67:23:5d:97:
         6d:ac:1c:27:79:35:7f:ec:83:c6:05:b0:b5:26:66:cd:07:7b:
         c9:07:d8:14
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZlzUx44wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMTAwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDc2
NmM5NTQzLWVkNDMtNGZiNS05MjgyLWI3YjcwMTlkZjliNDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANPMCi24DFmQWgWbMWQF7k6CfqVPgPJ+qxqD4mbc
YYxx3ua5iCPTnvx0LZrL9ST94OTpyiWe0lqB7zZdbjpiXkOxvivs+Bhfqbmn9aJl
qvD8blel6BvVWNTMjG6YOHbid3bWiQ4FsgJVm/auD5ZZf/kmWYVoupK3WST69IJE
FZhyvctK2x4XlcmO0rjNIY/Tl9U9hBIBPV7OEoZS05itrg8tST7YH7pIFWLvC8Pv
A6YBSzLjq6izp9n+S/7mMrsO7Jg5l0b3DEJEsjyaHbvEm7WWUBdAPXn3YfZKom6w
9ka2Exlkk8BY7hQ11JT2oqB4W+2tCrI8vFjcowG+vZEPvyUCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSxmu6Yt9aIFTw/h7RgdHXJSXv0NDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjLzU4YzM1YzBhLTBhOTItMzVj
Zi04MTQzLTZmNWRkZjk2YzJhNi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAjTbJDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAFItceMFkNYD3hp1hAm1DqEWCpXMG6j3l3iiWQj1enbIjYpP3LkQr6MuI0jnD
ZsTTnStlsx1BOtiYZ5LqLt6kyi6itPQjev5tTFxtMhlfvyAFWZrNfI12vaJXkMzh
6qN6bj6qt+NntAvKNvP93bWkdJVvcu73rfjJldNMY+SikR/YhYK6G7nuyLje72SD
g7P6QcWX0Hddymn1QaKTaIlgb57FAcSxVMOyfMAOa3c8BuKxXj4ZFQTOqUeWnq2q
AbqRG5qZ1S1k/csCPRINFI2Rrlykpat2+ePC31v3eyZ5d7f9phMCKz5nI12Xbawc
J3k1f+yDxgWwtSZmzQd7yQfYFA==
-----END CERTIFICATE-----