Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/88160384-bfc8-32d8-a1c7-140c0b97789f.roa
File:                     88160384-bfc8-32d8-a1c7-140c0b97789f.roa (raw, json)
Hash identifier:          Q2P+rh6wT2ccELbqcygoujFCQiYkZlMDaOxv2jXvGf0=
Subject key identifier:   9A:78:74:F8:4D:E2:B2:48:12:32:FC:58:AD:83:4D:23:59:B4:EB:10
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C4920F5F
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/88160384-bfc8-32d8-a1c7-140c0b97789f.roa
Signing time:             Wed 19 Dec 2018 03:46:05 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.219.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:92:0f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=691d7c03-af08-466a-a503-2bbe8a6e91f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:20:72:58:63:93:77:d9:20:f1:0d:c6:91:
                    92:45:e0:22:79:8d:6f:14:a8:71:4f:98:02:e6:fe:
                    ec:9e:87:a8:ce:25:7e:90:44:7a:4e:3d:ac:e7:b8:
                    8b:79:cb:e3:7c:ff:ac:32:9a:7c:16:3c:aa:60:c0:
                    d0:f7:11:de:fe:5c:07:ae:aa:b3:d7:85:e1:49:1b:
                    63:46:8e:7b:1f:5b:47:57:27:1c:b1:0f:19:6c:27:
                    32:8c:53:31:68:8f:80:95:ab:81:fa:2d:63:c6:eb:
                    63:40:1d:ff:bc:56:a0:8d:82:58:0f:25:8c:66:9c:
                    af:07:7e:85:0b:e4:78:17:5e:d9:cf:a5:f4:e5:2c:
                    78:1f:22:33:04:38:5e:81:c6:05:cc:52:d0:f1:85:
                    3a:ca:a6:79:1d:02:e4:a0:86:ae:9d:98:69:8f:c5:
                    5d:a2:7e:c9:fb:c6:dc:78:75:47:67:ad:32:fb:a1:
                    10:a9:b3:4a:62:0c:15:d6:56:91:70:4d:2c:f8:fc:
                    74:d3:3c:fd:0b:f5:ab:bf:36:d2:93:6a:0f:79:67:
                    f9:cf:15:9e:9c:7e:84:25:ea:1b:f4:e7:3a:68:0e:
                    73:af:64:f6:f7:6b:8a:37:ad:2f:ad:dc:f9:c7:ba:
                    58:01:66:e4:f0:51:43:e3:43:cb:90:0a:79:46:fe:
                    06:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:78:74:F8:4D:E2:B2:48:12:32:FC:58:AD:83:4D:23:59:B4:EB:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/88160384-bfc8-32d8-a1c7-140c0b97789f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.219.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:cc:df:19:6f:48:c7:7a:f6:59:9e:3d:61:38:a0:c1:1b:3c:
         a1:64:d2:1e:6c:57:cd:ff:95:25:ae:7c:c3:fc:49:c4:4c:ed:
         b9:07:01:44:c3:f0:6f:32:10:12:6d:25:4c:35:40:91:af:a9:
         1c:25:2d:64:36:17:71:30:db:0e:3c:3d:18:89:32:21:30:76:
         af:d4:9c:a2:a9:bb:12:86:8b:1f:61:3a:13:22:fb:d5:20:4b:
         be:59:c9:de:68:02:61:96:dc:de:cc:04:43:72:47:30:2c:d4:
         03:48:aa:5e:49:1d:57:42:0d:2f:ed:03:e2:19:13:57:1f:ef:
         70:a1:02:5f:c8:04:ae:d7:5c:7e:88:1f:86:b2:2b:ab:37:16:
         8b:47:26:d0:0e:bb:3c:2a:3b:ae:72:18:93:88:2a:3f:89:4f:
         dc:97:9f:f0:d4:66:1c:71:52:4a:47:27:10:04:15:e9:b5:09:
         b5:21:35:6f:cb:bd:bd:36:68:ac:03:49:15:f4:93:10:b1:c0:
         6c:52:3a:0a:43:04:96:00:1a:61:af:29:25:5a:9e:c5:c3:a8:
         08:82:e5:26:44:14:c9:33:d4:6b:ec:d0:ac:99:68:47:2e:30:
         70:0d:7e:44:0e:7b:5d:8a:1d:a8:c4:51:ab:90:cf:98:ec:bd:
         46:0b:5f:64
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ8SSD18wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEyMTkwNTAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDY5
MWQ3YzAzLWFmMDgtNDY2YS1hNTAzLTJiYmU4YTZlOTFmMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALpIIHJYY5N32SDxDcaRkkXgInmNbxSocU+YAub+
7J6HqM4lfpBEek49rOe4i3nL43z/rDKafBY8qmDA0PcR3v5cB66qs9eF4UkbY0aO
ex9bR1cnHLEPGWwnMoxTMWiPgJWrgfotY8brY0Ad/7xWoI2CWA8ljGacrwd+hQvk
eBde2c+l9OUseB8iMwQ4XoHGBcxS0PGFOsqmeR0C5KCGrp2YaY/FXaJ+yfvG3Hh1
R2etMvuhEKmzSmIMFdZWkXBNLPj8dNM8/Qv1q7820pNqD3ln+c8Vnpx+hCXqG/Tn
OmgOc69k9vdrijetL63c+ce6WAFm5PBRQ+NDy5AKeUb+BvUCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSaeHT4TeKySBIy/Fitg00jWbTrEDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjLzg4MTYwMzg0LWJmYzgtMzJk
OC1hMWM3LTE0MGMwYjk3Nzg5Zi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADTbAzBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEApszfGW9Ix3r2WZ49YTigwRs8oWTSHmxXzf+VJa58w/xJxEztuQcBRMPwbzIQ
Em0lTDVAka+pHCUtZDYXcTDbDjw9GIkyITB2r9Scoqm7EoaLH2E6EyL71SBLvlnJ
3mgCYZbc3swEQ3JHMCzUA0iqXkkdV0INL+0D4hkTVx/vcKECX8gErtdcfogfhrIr
qzcWi0cm0A67PCo7rnIYk4gqP4lP3Jef8NRmHHFSSkcnEAQV6bUJtSE1b8u9vTZo
rANJFfSTELHAbFI6CkMElgAaYa8pJVqexcOoCILlJkQUyTPUa+zQrJloRy4wcA1+
RA57XYodqMRRq5DPmOy9RgtfZA==
-----END CERTIFICATE-----