Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6089abf7-4a5b-3ad3-af8f-e34dcd5ce8af.roa
File:                     6089abf7-4a5b-3ad3-af8f-e34dcd5ce8af.roa (raw, json)
Hash identifier:          AnXroZE/eOIr3wIzJMUAu/RzKdKWMCIvy5DHB5X17vk=
Subject key identifier:   F9:54:49:A8:8C:44:AE:30:EF:58:93:99:84:4F:B0:6D:35:A3:47:5D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C4476E88
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6089abf7-4a5b-3ad3-af8f-e34dcd5ce8af.roa
Signing time:             Wed 19 Dec 2018 02:24:34 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:47:6e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=16c88f3a-5d0d-414c-ab69-a9d4a56cca3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:de:b0:cc:c4:34:24:8d:00:02:0b:ce:da:b0:
                    5d:90:d1:ac:6b:29:04:c6:0c:15:de:1b:53:58:0d:
                    77:b5:a1:35:4c:81:a1:b1:6c:c2:b3:40:aa:21:10:
                    bb:1a:b4:1d:77:3a:e6:3c:80:3f:aa:43:b4:68:90:
                    48:59:98:91:59:b0:34:e5:5e:82:39:1b:fb:9e:8c:
                    15:2a:a5:ed:d1:22:ad:f6:2a:4d:0c:cd:b6:f3:35:
                    09:50:4f:9f:af:31:6c:e7:cf:a9:b2:a1:d9:91:ab:
                    be:28:fc:6f:b7:96:88:90:ec:8d:f0:cc:a1:ed:3c:
                    b6:1d:ea:7e:e2:06:df:97:44:b2:da:de:75:ec:ad:
                    6d:d9:24:61:47:62:6f:b0:63:ba:12:4d:0a:e3:30:
                    96:d3:c9:ab:13:42:e7:5f:e0:35:5b:84:ba:b3:40:
                    d9:0c:10:90:9a:ac:df:7d:cf:02:12:03:a2:71:c3:
                    1d:c7:2f:2b:5c:50:a4:da:73:b5:da:d4:25:58:a9:
                    25:cc:f9:06:43:7c:22:be:71:a7:09:e2:42:60:ff:
                    3a:b6:13:b0:12:c8:7a:83:e0:c4:35:ec:53:43:fc:
                    b9:be:96:7b:7e:ec:2c:95:cd:f6:37:2b:d0:fd:ca:
                    5b:5c:f2:07:46:4c:1b:61:d3:a3:08:db:f6:98:f8:
                    6d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:54:49:A8:8C:44:AE:30:EF:58:93:99:84:4F:B0:6D:35:A3:47:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6089abf7-4a5b-3ad3-af8f-e34dcd5ce8af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:03:3e:dc:7a:c2:b5:10:ec:35:d2:f5:0d:f4:da:8c:53:2d:
         24:35:64:0e:b9:fc:35:14:4c:4f:3d:5b:a7:ab:53:fa:c9:fa:
         86:2c:27:e3:83:3f:9c:28:9a:16:48:31:5a:e9:26:b3:46:47:
         87:95:5f:df:21:fe:6d:3c:f3:a7:de:60:3c:51:08:13:c0:32:
         6b:97:0e:0b:61:8a:5f:67:51:97:36:87:fb:3c:3a:fd:2a:c7:
         ef:18:1c:dd:27:33:ed:57:c9:c8:2e:19:37:d7:79:75:af:3d:
         b7:e9:29:fe:5b:11:f7:d8:05:39:3a:80:9d:91:ed:20:7a:31:
         0c:d0:aa:27:89:a1:cd:67:14:51:20:73:5f:18:55:df:17:62:
         25:56:09:61:94:e5:e9:83:70:2b:6c:f6:8a:14:20:51:d6:87:
         cf:b4:66:5d:2d:e1:f1:1b:92:fc:7a:e8:1c:18:7d:a6:77:bc:
         c2:ac:71:e1:31:cc:c8:d3:02:92:63:13:1c:cd:bd:8a:b1:ed:
         74:bb:12:5c:e6:89:7c:e2:89:6e:3a:f3:c4:36:95:01:2b:cd:
         58:58:1e:37:48:73:1b:b3:bd:28:84:c5:43:1e:4c:82:12:82:
         75:81:1e:5e:fa:27:07:f4:d7:9f:ae:91:65:5b:93:23:16:d4:
         29:97:09:5e
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ8RHbogwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEyMTkwNTAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDE2
Yzg4ZjNhLTVkMGQtNDE0Yy1hYjY5LWE5ZDRhNTZjY2EzZTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAO3esMzENCSNAAILztqwXZDRrGspBMYMFd4bU1gN
d7WhNUyBobFswrNAqiEQuxq0HXc65jyAP6pDtGiQSFmYkVmwNOVegjkb+56MFSql
7dEirfYqTQzNtvM1CVBPn68xbOfPqbKh2ZGrvij8b7eWiJDsjfDMoe08th3qfuIG
35dEstredeytbdkkYUdib7BjuhJNCuMwltPJqxNC51/gNVuEurNA2QwQkJqs333P
AhIDonHDHccvK1xQpNpztdrUJVipJcz5BkN8Ir5xpwniQmD/OrYTsBLIeoPgxDXs
U0P8ub6We37sLJXN9jcr0P3KW1zyB0ZMG2HTowjb9pj4bRsCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBT5VEmojESuMO9Yk5mET7BtNaNHXTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjLzYwODlhYmY3LTRhNWItM2Fk
My1hZjhmLWUzNGRjZDVjZThhZi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADTahzBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAQAM+3HrCtRDsNdL1DfTajFMtJDVkDrn8NRRMTz1bp6tT+sn6hiwn44M/nCia
FkgxWukms0ZHh5Vf3yH+bTzzp95gPFEIE8Aya5cOC2GKX2dRlzaH+zw6/SrH7xgc
3Scz7VfJyC4ZN9d5da89t+kp/lsR99gFOTqAnZHtIHoxDNCqJ4mhzWcUUSBzXxhV
3xdiJVYJYZTl6YNwK2z2ihQgUdaHz7RmXS3h8RuS/HroHBh9pne8wqxx4THMyNMC
kmMTHM29irHtdLsSXOaJfOKJbjrzxDaVASvNWFgeN0hzG7O9KITFQx5MghKCdYEe
XvonB/TXn66RZVuTIxbUKZcJXg==
-----END CERTIFICATE-----