Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/766cf275-048f-33d9-9634-896d33bfa47d.roa
File:                     766cf275-048f-33d9-9634-896d33bfa47d.roa (raw, json)
Hash identifier:          J85Dk1W/INCe544kLvytLR1MEmfubXw3aWGpRw2n5/I=
Subject key identifier:   C6:A9:56:9D:ED:59:F0:32:65:D2:E6:DE:CA:29:8C:84:DD:F9:82:69
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C491E4B8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/766cf275-048f-33d9-9634-896d33bfa47d.roa
Signing time:             Wed 19 Dec 2018 03:45:54 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:91:e4:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=31371a79-b4a7-493f-88f5-7278762bb165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e0:31:71:ea:eb:13:7b:73:06:8c:18:ce:61:
                    4f:12:f6:23:96:00:d2:58:62:49:7f:42:9e:bd:fe:
                    d7:d7:31:62:6b:c1:ef:6d:a0:27:86:4c:b1:eb:88:
                    d0:6e:78:9b:e8:f9:10:af:a0:81:f3:05:4f:89:f1:
                    fc:76:fe:0e:5f:53:17:59:bf:f6:43:7e:62:6d:78:
                    2a:cd:01:79:9a:d1:c5:26:94:2a:a4:5c:20:40:96:
                    8b:1e:0b:5e:c3:33:2f:b6:5b:83:94:f5:e2:43:21:
                    1b:e8:ca:e9:ad:1d:d6:ad:1c:26:f3:53:ba:59:64:
                    e0:ea:91:9a:d2:d9:48:ac:87:2e:ab:06:40:8c:87:
                    1c:50:71:9d:10:41:b2:63:2b:84:99:ed:cc:32:61:
                    79:4f:b7:89:6a:ad:74:52:ad:19:c5:68:03:8f:c7:
                    e3:d8:ce:48:fc:57:9d:8c:20:f8:28:2f:2f:e5:b8:
                    13:f9:f1:64:e8:14:73:77:b5:b9:13:70:a3:bb:29:
                    10:d6:7c:a2:81:83:02:b9:ec:38:55:09:cf:6d:5e:
                    5c:af:d6:3c:6e:f6:90:a3:2d:81:7e:e8:1c:7e:cf:
                    fd:e7:c5:ea:72:ea:64:32:00:d0:c9:5a:2a:3b:7a:
                    e5:13:9e:7c:3a:fd:32:75:24:5f:09:1d:53:d6:cf:
                    57:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A9:56:9D:ED:59:F0:32:65:D2:E6:DE:CA:29:8C:84:DD:F9:82:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/766cf275-048f-33d9-9634-896d33bfa47d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:5c:f3:a2:24:71:8f:24:e6:95:8e:15:57:8c:19:a0:39:66:
         89:61:30:2a:28:c4:6d:22:0d:4c:7a:9a:82:ee:2b:5d:f1:a3:
         b2:4e:bf:28:ec:ff:c7:b8:4f:5e:2b:d6:74:8e:29:6d:87:d7:
         e4:31:df:f0:08:93:0f:fb:aa:53:5f:1b:a1:0f:35:13:87:12:
         97:f3:4d:86:66:ae:f1:8b:ea:3f:94:12:e8:fc:dc:87:d9:b4:
         b0:a9:c9:d1:b0:6c:8f:b0:e3:14:fc:30:1e:63:99:0d:ea:ee:
         07:1f:56:45:24:18:4c:2b:33:95:b3:dd:a3:e1:12:7b:32:21:
         fe:1a:5e:5a:5f:9d:62:0c:2c:17:67:2a:58:74:cc:c6:69:42:
         74:b1:67:f8:4b:fc:18:e3:db:4a:6c:cc:07:a9:11:96:08:73:
         d0:03:de:a4:a7:5c:21:ba:10:97:fd:2a:51:9e:b2:f9:41:0c:
         bc:c8:c5:3b:50:ee:a1:4f:21:e4:18:3a:0f:f5:4d:01:f9:ba:
         b5:0a:14:c9:75:34:6b:5d:f7:1e:42:cc:be:41:7d:33:01:0e:
         18:f7:bd:3e:2a:9a:80:b5:ce:4b:a8:a1:08:a0:2e:63:eb:a1:
         8b:51:bf:34:3a:15:6e:e5:d9:d1:f1:ad:13:b8:9c:52:79:4b:
         0a:59:23:ec
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ8SR5LgwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEyMTkwNTAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDMx
MzcxYTc5LWI0YTctNDkzZi04OGY1LTcyNzg3NjJiYjE2NTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAJvgMXHq6xN7cwaMGM5hTxL2I5YA0lhiSX9Cnr3+
19cxYmvB722gJ4ZMseuI0G54m+j5EK+ggfMFT4nx/Hb+Dl9TF1m/9kN+Ym14Ks0B
eZrRxSaUKqRcIECWix4LXsMzL7Zbg5T14kMhG+jK6a0d1q0cJvNTullk4OqRmtLZ
SKyHLqsGQIyHHFBxnRBBsmMrhJntzDJheU+3iWqtdFKtGcVoA4/H49jOSPxXnYwg
+CgvL+W4E/nxZOgUc3e1uRNwo7spENZ8ooGDArnsOFUJz21eXK/WPG72kKMtgX7o
HH7P/efF6nLqZDIA0MlaKjt65ROefDr9MnUkXwkdU9bPV20CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTGqVad7VnwMmXS5t7KKYyE3fmCaTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjLzc2NmNmMjc1LTA0OGYtMzNk
OS05NjM0LTg5NmQzM2JmYTQ3ZC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADTa+jBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAVFzzoiRxjyTmlY4VV4wZoDlmiWEwKijEbSINTHqagu4rXfGjsk6/KOz/x7hP
XivWdI4pbYfX5DHf8AiTD/uqU18boQ81E4cSl/NNhmau8YvqP5QS6Pzch9m0sKnJ
0bBsj7DjFPwwHmOZDeruBx9WRSQYTCszlbPdo+ESezIh/hpeWl+dYgwsF2cqWHTM
xmlCdLFn+Ev8GOPbSmzMB6kRlghz0APepKdcIboQl/0qUZ6y+UEMvMjFO1DuoU8h
5Bg6D/VNAfm6tQoUyXU0a133HkLMvkF9MwEOGPe9PiqagLXOS6ihCKAuY+uhi1G/
NDoVbuXZ0fGtE7icUnlLClkj7A==
-----END CERTIFICATE-----