Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/82ba7fe6-5a0d-30df-952e-e6b82158423f.roa
File:                     82ba7fe6-5a0d-30df-952e-e6b82158423f.roa (raw, json)
Hash identifier:          gTZZzzCZzciTXtJAzsEP4wXjHaaqGnw5+uRXQQPQO+o=
Subject key identifier:   C3:BF:4E:FB:5E:FC:5E:FB:42:0A:FA:62:23:37:22:90:7A:8E:DC:65
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16693C75A20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/82ba7fe6-5a0d-30df-952e-e6b82158423f.roa
Signing time:             Sat 20 Oct 2018 23:20:07 +0000
ROA not before:           Sat 20 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.95.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:93:c7:5a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 20 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=4e34c375-39ed-4459-8d19-cd08a4a501df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c1:5c:9b:53:4f:f4:3b:73:ad:ea:b7:53:b0:
                    f9:2f:69:ae:a1:c1:64:8d:64:93:74:e7:b3:97:5e:
                    bf:8b:41:49:23:91:11:ed:df:21:e6:21:76:17:b0:
                    5c:07:11:a8:33:24:0d:02:d0:18:ee:00:d4:c5:8a:
                    b7:da:03:c8:3c:32:82:0d:e5:e1:13:5d:6c:58:e6:
                    7a:de:7a:4b:81:b5:f2:10:ee:2d:71:6c:8b:be:7e:
                    fe:d7:26:01:62:5f:81:60:85:f1:03:76:61:b7:57:
                    b4:78:ca:ae:90:85:6c:82:70:27:b2:3f:3b:0a:2e:
                    6e:6a:08:e0:0d:9a:bc:e2:99:a4:8b:d6:6d:9c:9e:
                    7d:8c:0b:20:d1:a2:c3:65:3b:99:50:8c:60:32:41:
                    94:64:46:14:7b:19:5e:a1:5c:b6:8a:09:e3:e2:f0:
                    5b:1a:ab:a8:23:fd:26:4b:d1:72:6b:f8:50:99:5b:
                    e4:52:fd:22:06:f1:6d:4a:63:86:94:90:31:67:bd:
                    32:ba:54:28:a5:1f:4a:ef:36:d8:09:68:d5:e8:6f:
                    1c:e1:30:ce:73:51:58:de:63:90:c1:f2:02:09:19:
                    08:02:65:81:53:3b:04:20:ec:e9:24:77:c1:7e:c7:
                    95:98:57:4b:cb:0e:03:b1:6f:c8:3d:39:72:cc:29:
                    86:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BF:4E:FB:5E:FC:5E:FB:42:0A:FA:62:23:37:22:90:7A:8E:DC:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/82ba7fe6-5a0d-30df-952e-e6b82158423f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.95.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ed:be:70:fd:10:2a:78:41:f5:ed:c3:2f:cd:95:99:27:a4:
         06:4f:51:e2:82:bf:bc:e7:7e:57:b2:16:66:83:01:f6:52:53:
         88:5b:f2:26:a8:3c:04:9d:1f:86:16:ea:d9:d5:67:73:2e:ab:
         d6:8e:6b:77:44:32:b9:3c:fb:66:5a:44:c4:cd:5e:b1:f9:a2:
         12:c4:5f:9b:4e:19:78:f5:13:ed:3e:7c:55:25:5b:59:a6:d8:
         df:53:3c:08:7a:7f:a4:a5:e0:cd:a2:a2:c8:a2:14:ec:d2:31:
         75:9f:02:17:8c:ab:e6:41:12:ca:9c:a3:21:d4:9d:21:b0:74:
         c7:84:5c:89:3f:70:1e:83:26:cf:33:f2:1d:65:b3:73:ed:da:
         f7:c5:65:17:88:2a:52:e7:64:63:dc:c4:a1:f4:a6:c2:cd:38:
         e7:e4:37:9b:41:e3:88:23:ce:aa:8d:3d:7c:ed:f0:f8:62:07:
         ee:fe:28:bf:a2:23:87:33:71:85:ad:4f:b3:53:1d:47:63:82:
         90:ce:0b:a7:73:e1:8b:d4:67:8a:ca:6a:e7:f8:e2:97:ac:7d:
         3d:72:db:81:0c:59:4a:40:ca:da:46:29:47:ed:b8:88:32:9e:
         3a:da:2d:c2:07:94:b6:3f:37:89:37:ea:e6:e9:6c:9a:2f:81:
         5f:b6:a1:e9
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZpPHWiAwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMjAwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDRl
MzRjMzc1LTM5ZWQtNDQ1OS04ZDE5LWNkMDhhNGE1MDFkZjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALjBXJtTT/Q7c63qt1Ow+S9prqHBZI1kk3Tns5de
v4tBSSOREe3fIeYhdhewXAcRqDMkDQLQGO4A1MWKt9oDyDwygg3l4RNdbFjmet56
S4G18hDuLXFsi75+/tcmAWJfgWCF8QN2YbdXtHjKrpCFbIJwJ7I/OwoubmoI4A2a
vOKZpIvWbZyefYwLINGiw2U7mVCMYDJBlGRGFHsZXqFctooJ4+LwWxqrqCP9JkvR
cmv4UJlb5FL9IgbxbUpjhpSQMWe9MrpUKKUfSu822Alo1ehvHOEwznNRWN5jkMHy
AgkZCAJlgVM7BCDs6SR3wX7HlZhXS8sOA7FvyD05cswphlcCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTDv077Xvxe+0IK+mIjNyKQeo7cZTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjLzgyYmE3ZmU2LTVhMGQtMzBk
Zi05NTJlLWU2YjgyMTU4NDIzZi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADRf+jBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEANe2+cP0QKnhB9e3DL82VmSekBk9R4oK/vOd+V7IWZoMB9lJTiFvyJqg8BJ0f
hhbq2dVncy6r1o5rd0QyuTz7ZlpExM1esfmiEsRfm04ZePUT7T58VSVbWabY31M8
CHp/pKXgzaKiyKIU7NIxdZ8CF4yr5kESypyjIdSdIbB0x4RciT9wHoMmzzPyHWWz
c+3a98VlF4gqUudkY9zEofSmws045+Q3m0HjiCPOqo09fO3w+GIH7v4ov6IjhzNx
ha1Ps1MdR2OCkM4Lp3Phi9Rnispq5/jil6x9PXLbgQxZSkDK2kYpR+24iDKeOtot
wgeUtj83iTfq5ulsmi+BX7ah6Q==
-----END CERTIFICATE-----