Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7da2d846-a602-3d98-838d-043260f19122.roa
File:                     7da2d846-a602-3d98-838d-043260f19122.roa (raw, json)
Hash identifier:          +qQZhxlYf42U+7BqyhgTMjPJYBCcFqpQc19cOjG9eJc=
Subject key identifier:   9B:26:6E:8F:C7:62:89:3D:E5:20:74:D6:31:53:19:6E:38:97:44:42
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C492B998
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7da2d846-a602-3d98-838d-043260f19122.roa
Signing time:             Wed 19 Dec 2018 03:46:49 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.219.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:92:b9:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=a038e9b0-4de9-4d65-a7ad-f4c558819708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7f:0b:a6:24:86:49:e4:78:cf:4a:29:91:1e:
                    d1:68:78:b2:64:48:28:60:d4:77:b2:d6:23:59:2d:
                    eb:8a:8d:9d:22:8c:7c:7f:ad:1c:8e:24:6a:a3:32:
                    58:2c:f0:84:73:c8:0c:83:dc:c9:5b:8b:90:ed:6b:
                    11:66:c2:04:bc:09:ff:6a:ad:a4:d0:c1:f2:fe:7a:
                    b3:34:61:7d:5c:01:4c:40:00:58:4a:05:87:14:8a:
                    58:17:ab:54:29:4e:5d:02:48:5b:78:77:27:14:e8:
                    c0:d7:c2:54:58:22:41:6d:ef:47:e6:09:38:86:f3:
                    1f:96:10:5e:81:54:10:75:cd:e0:e0:33:66:d8:9f:
                    f5:17:c8:30:f0:1b:08:fd:30:49:ed:22:bd:e5:ac:
                    50:72:d5:81:b3:04:3e:48:fb:24:95:e3:0b:54:38:
                    c1:78:45:0b:f1:d5:03:95:aa:0b:9e:04:46:d9:ca:
                    63:aa:18:97:bf:7e:b9:89:b3:e0:3b:1a:df:77:6c:
                    3f:f5:ca:37:7f:6f:84:25:fd:59:81:9f:da:78:ca:
                    ee:78:03:81:71:b8:5b:2c:6f:1a:9a:7e:ff:68:65:
                    da:4e:23:4c:8f:fb:54:5b:df:11:8d:3d:0f:42:3b:
                    9b:4e:0a:94:f1:4a:c7:29:32:ef:3b:b4:bc:e7:e8:
                    2f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:26:6E:8F:C7:62:89:3D:E5:20:74:D6:31:53:19:6E:38:97:44:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7da2d846-a602-3d98-838d-043260f19122.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.219.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:7f:81:9c:68:63:df:20:9b:47:fc:15:9a:fa:02:54:0a:63:
         47:dc:9f:58:ed:e4:83:35:8c:f3:4d:8c:f2:78:60:c8:a4:cb:
         ce:ec:0a:d5:48:6a:34:44:1e:91:59:f8:2c:94:43:92:53:18:
         1b:35:f2:bf:7f:8d:56:8d:5b:5b:65:18:40:9c:a3:0e:44:4a:
         76:27:5c:13:6a:ce:2e:13:35:5f:4a:27:f8:f8:ef:8a:61:70:
         19:ed:0d:2a:cb:b0:97:50:8a:75:32:a0:df:69:d7:9f:03:e8:
         91:c0:3a:6d:39:ea:dc:a0:4a:6a:aa:ff:57:4b:57:03:6a:b3:
         04:6f:1f:6c:34:d4:61:dd:3e:23:ef:4a:2c:42:15:6c:24:1c:
         7a:c2:44:d7:a3:9b:11:9a:2d:af:99:8a:61:03:ac:17:6e:88:
         80:54:64:53:b5:fd:a5:ce:aa:a2:12:91:12:6b:7c:78:e1:5d:
         01:4e:a0:c2:6a:a7:b3:c0:fa:3d:b9:d4:91:59:3a:45:25:04:
         79:52:c3:16:a0:04:cc:52:dc:ea:61:9a:75:39:3c:a2:d9:3c:
         e1:e7:8c:6b:8b:74:71:5f:04:69:87:c1:02:71:3a:d2:96:68:
         b9:0f:da:45:c2:2e:0e:d2:48:83:d8:88:76:09:26:5c:6a:f4:
         56:3f:b5:bc
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ8SSuZgwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEyMTkwNTAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJGEw
MzhlOWIwLTRkZTktNGQ2NS1hN2FkLWY0YzU1ODgxOTcwODCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOd/C6YkhknkeM9KKZEe0Wh4smRIKGDUd7LWI1kt
64qNnSKMfH+tHI4kaqMyWCzwhHPIDIPcyVuLkO1rEWbCBLwJ/2qtpNDB8v56szRh
fVwBTEAAWEoFhxSKWBerVClOXQJIW3h3JxTowNfCVFgiQW3vR+YJOIbzH5YQXoFU
EHXN4OAzZtif9RfIMPAbCP0wSe0iveWsUHLVgbMEPkj7JJXjC1Q4wXhFC/HVA5Wq
C54ERtnKY6oYl79+uYmz4Dsa33dsP/XKN39vhCX9WYGf2njK7ngDgXG4WyxvGpp+
/2hl2k4jTI/7VFvfEY09D0I7m04KlPFKxyky7zu0vOfoL4cCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSbJm6Px2KJPeUgdNYxUxluOJdEQjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjLzdkYTJkODQ2LWE2MDItM2Q5
OC04MzhkLTA0MzI2MGYxOTEyMi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADTbGTBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAa3+BnGhj3yCbR/wVmvoCVApjR9yfWO3kgzWM802M8nhgyKTLzuwK1UhqNEQe
kVn4LJRDklMYGzXyv3+NVo1bW2UYQJyjDkRKdidcE2rOLhM1X0on+PjvimFwGe0N
Ksuwl1CKdTKg32nXnwPokcA6bTnq3KBKaqr/V0tXA2qzBG8fbDTUYd0+I+9KLEIV
bCQcesJE16ObEZotr5mKYQOsF26IgFRkU7X9pc6qohKREmt8eOFdAU6gwmqns8D6
PbnUkVk6RSUEeVLDFqAEzFLc6mGadTk8otk84eeMa4t0cV8EaYfBAnE60pZouQ/a
RcIuDtJIg9iIdgkmXGr0Vj+1vA==
-----END CERTIFICATE-----