Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8587a62e-7d89-3c71-8820-0162063a316c.roa
File:                     8587a62e-7d89-3c71-8820-0162063a316c.roa (raw, json)
Hash identifier:          VOMkrAxtISMg4OhAXbnmBxYI131GeaUGVQazrdxqq2E=
Subject key identifier:   B8:0D:B8:67:18:ED:5D:B4:1D:28:5E:2C:1F:6A:A8:85:63:EE:E6:6B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C4A7BB80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8587a62e-7d89-3c71-8820-0162063a316c.roa
Signing time:             Wed 19 Dec 2018 04:09:46 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.231.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:a7:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=cd8feb77-eedb-43b4-a4d7-560a2e37ff97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1b:ee:40:c0:5f:e1:1d:08:ed:1b:30:22:77:
                    b9:51:0e:c3:4f:88:7d:ef:a1:88:12:21:56:a3:ba:
                    6c:b5:53:c7:b8:48:be:ef:0f:f4:a8:ff:8d:f7:8b:
                    76:0e:bf:a3:dd:36:ac:bd:e0:11:b2:a0:c2:0a:4c:
                    70:05:7a:ba:02:bd:2d:b1:df:7f:6d:84:70:e0:96:
                    87:73:b5:7d:4e:b7:82:00:54:3f:56:ba:4c:bf:3e:
                    c9:48:86:5f:c0:ba:33:1e:44:4a:3f:ae:06:7a:2a:
                    62:c9:58:5c:60:d8:d3:99:7c:95:48:3f:4a:0f:c7:
                    cf:b3:77:ad:c9:54:bd:de:58:dd:c2:25:0d:be:57:
                    8d:c5:da:99:24:4b:2a:9a:b4:cd:05:5b:1c:c1:f9:
                    ba:5d:a8:18:c3:27:b9:54:4b:3d:e7:b3:ba:70:64:
                    0c:48:e9:b4:7c:ea:9d:e3:20:44:d3:46:60:81:6d:
                    15:16:dd:db:b0:20:48:67:f8:96:3d:91:6e:5e:37:
                    4d:c6:d6:89:7e:a6:9e:f4:61:00:5a:f1:eb:06:65:
                    8c:7c:9f:5f:f6:1a:a5:58:dd:16:a4:c2:1a:9a:fa:
                    3f:c8:2e:6b:b2:d9:c9:f7:d3:66:77:db:8b:e9:97:
                    0d:3a:50:c3:26:69:f6:52:cb:ad:f3:9a:1b:b5:ff:
                    0c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0D:B8:67:18:ED:5D:B4:1D:28:5E:2C:1F:6A:A8:85:63:EE:E6:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8587a62e-7d89-3c71-8820-0162063a316c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.231.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:29:b9:1e:ce:7f:64:2b:e2:d5:81:97:7c:2a:ff:a6:39:2d:
         a0:34:0e:f3:f0:d1:b0:76:8e:9c:8a:71:4e:65:8d:0b:a0:d6:
         3c:4a:6c:b9:70:61:7e:a1:e4:f9:96:fd:25:5a:08:eb:43:56:
         f7:29:42:87:99:9d:7b:22:fe:86:d6:09:e6:62:23:a6:53:32:
         9f:63:35:bd:c8:92:84:7d:63:9c:05:45:d1:c9:43:39:a9:84:
         e0:9f:56:74:80:93:9d:e7:95:47:55:27:7a:bf:cc:39:ce:9e:
         a0:b6:87:6a:e3:69:3a:e5:35:de:fb:d7:dc:7f:84:c1:63:65:
         df:de:72:a5:d1:d8:3c:3c:64:cf:91:39:56:32:3b:bb:ff:66:
         48:ee:56:68:08:00:3a:e8:64:20:44:a6:66:09:1c:e1:ac:f0:
         86:b0:75:e2:5f:14:20:07:40:7a:60:5e:6e:c4:23:11:ab:3b:
         43:92:e2:78:e3:c6:ae:aa:90:17:2e:7b:fa:6d:ec:91:7e:3d:
         15:b8:59:19:ee:a5:36:33:99:cc:eb:ef:26:fa:8d:48:40:79:
         d5:87:04:c7:72:33:b9:de:6b:48:0e:74:ea:c0:5f:96:d9:36:
         0a:de:6b:76:fc:21:3f:f2:b2:46:f6:54:9c:40:13:36:4a:96:
         44:eb:c1:75
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ8Snu4AwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEyMTkwNTAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJGNk
OGZlYjc3LWVlZGItNDNiNC1hNGQ3LTU2MGEyZTM3ZmY5NzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANgb7kDAX+EdCO0bMCJ3uVEOw0+Ife+hiBIhVqO6
bLVTx7hIvu8P9Kj/jfeLdg6/o902rL3gEbKgwgpMcAV6ugK9LbHff22EcOCWh3O1
fU63ggBUP1a6TL8+yUiGX8C6Mx5ESj+uBnoqYslYXGDY05l8lUg/Sg/Hz7N3rclU
vd5Y3cIlDb5XjcXamSRLKpq0zQVbHMH5ul2oGMMnuVRLPeezunBkDEjptHzqneMg
RNNGYIFtFRbd27AgSGf4lj2Rbl43TcbWiX6mnvRhAFrx6wZljHyfX/YapVjdFqTC
Gpr6P8gua7LZyffTZnfbi+mXDTpQwyZp9lLLrfOaG7X/DIcCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBS4DbhnGO1dtB0oXiwfaqiFY+7mazCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjLzg1ODdhNjJlLTdkODktM2M3
MS04ODIwLTAxNjIwNjNhMzE2Yy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADbnszBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAJSm5Hs5/ZCvi1YGXfCr/pjktoDQO8/DRsHaOnIpxTmWNC6DWPEpsuXBhfqHk
+Zb9JVoI60NW9ylCh5mdeyL+htYJ5mIjplMyn2M1vciShH1jnAVF0clDOamE4J9W
dICTneeVR1Uner/MOc6eoLaHauNpOuU13vvX3H+EwWNl395ypdHYPDxkz5E5VjI7
u/9mSO5WaAgAOuhkIESmZgkc4azwhrB14l8UIAdAemBebsQjEas7Q5LieOPGrqqQ
Fy57+m3skX49FbhZGe6lNjOZzOvvJvqNSEB51YcEx3Izud5rSA506sBfltk2Ct5r
dvwhP/KyRvZUnEATNkqWROvBdQ==
-----END CERTIFICATE-----