Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aed151f6-bfe1-3443-a857-69278a1ee6e0.roa
File:                     aed151f6-bfe1-3443-a857-69278a1ee6e0.roa (raw, json)
Hash identifier:          HSX4DR9OTHMsU0BzWxX0Hrl3b9pGJ9awMewXTYl/NiQ=
Subject key identifier:   AC:46:50:89:AB:E1:44:D5:D4:42:5A:2B:CC:A8:23:8D:40:5E:98:49
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B33EA6
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aed151f6-bfe1-3443-a857-69278a1ee6e0.roa
Signing time:             Sun 21 Oct 2018 08:17:24 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.95.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b3:3e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=1be010f0-eb19-4e51-b636-ccda95574055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:75:55:da:d6:e5:18:ba:7d:c1:9d:d1:0f:35:
                    5d:6f:d5:7d:f5:fd:d5:71:89:e9:e7:f6:e9:72:6a:
                    64:b1:da:de:fd:52:15:0d:f3:1e:f4:e0:83:b8:0f:
                    08:23:5f:6d:ee:13:2b:ff:69:85:84:29:88:65:f9:
                    ab:d3:67:15:75:a8:a5:a8:9f:c3:a9:4b:7e:27:14:
                    bd:1a:cc:96:8a:9e:19:9d:5a:36:4c:9e:65:ae:9c:
                    79:44:3b:0c:b3:74:10:df:e7:cc:1d:0d:17:98:d9:
                    11:3d:86:53:ab:99:50:22:b6:04:ad:9d:fe:c7:c0:
                    8d:13:91:d4:58:26:33:97:8c:16:13:b1:e0:0b:f6:
                    9f:35:e8:44:07:5b:85:9c:87:99:0e:b3:ac:fc:76:
                    21:3e:2c:dd:13:8e:f7:dc:78:68:65:c9:6a:18:5c:
                    70:92:2c:60:ef:cd:e1:eb:61:e3:c8:23:2d:c6:61:
                    de:d6:c6:bd:e2:d4:bc:6c:11:c2:2a:4f:1e:fc:31:
                    52:a2:67:7f:f0:c9:74:8f:c2:2c:7f:9f:b5:b6:e5:
                    d2:9f:be:3c:6d:01:43:3d:07:ae:c9:bf:c0:9d:b4:
                    45:2d:fc:c1:8c:ce:12:ab:fb:bb:07:8c:01:0a:3b:
                    8a:0c:32:be:16:ba:e4:c6:35:61:f4:82:43:16:34:
                    0e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:46:50:89:AB:E1:44:D5:D4:42:5A:2B:CC:A8:23:8D:40:5E:98:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aed151f6-bfe1-3443-a857-69278a1ee6e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.95.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:9f:5b:c7:43:40:68:5e:a3:cf:a7:55:8e:95:90:1d:fa:be:
         64:10:ba:01:8a:c5:8d:f8:03:bd:0a:1d:89:bb:87:36:2f:e2:
         b6:0d:bc:eb:58:c0:a6:6c:4e:2d:e3:32:1d:32:77:52:19:40:
         10:b3:7a:18:f5:92:d2:03:7a:d8:a2:11:05:6c:0b:37:19:f7:
         d7:2c:f9:a5:c6:1f:6d:14:00:9f:b0:55:40:0e:32:3c:e3:89:
         76:8b:f0:c2:d3:7b:71:34:35:f0:af:c0:2b:ba:a6:7d:0d:3e:
         0c:52:f0:2a:00:80:ff:b8:aa:5c:79:31:47:94:80:80:3e:47:
         d2:8f:2b:c4:59:99:41:6a:38:0f:6c:4b:c0:8d:f6:79:ea:95:
         53:6c:40:c9:17:37:41:cc:c1:6c:69:ac:c9:bc:86:e1:30:48:
         2a:4e:32:e5:82:f6:db:14:db:ca:da:86:ed:c7:35:3a:d5:7b:
         c9:a6:13:f1:0c:f8:26:4c:03:7d:9a:4b:ae:3e:aa:95:14:68:
         ac:de:14:0b:dc:af:a9:ad:80:dd:97:67:08:0c:31:47:b1:9c:
         fb:23:18:58:bd:68:80:ee:36:5c:04:f7:06:df:a2:fd:2c:e9:
         70:07:8f:a4:18:2f:25:6c:1d:73:cc:96:3f:8a:ca:50:2c:a2:
         6d:89:b3:6b
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZpWzPqYwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMjEwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDFi
ZTAxMGYwLWViMTktNGU1MS1iNjM2LWNjZGE5NTU3NDA1NTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMN1VdrW5Ri6fcGd0Q81XW/VffX91XGJ6ef26XJq
ZLHa3v1SFQ3zHvTgg7gPCCNfbe4TK/9phYQpiGX5q9NnFXWopaifw6lLficUvRrM
loqeGZ1aNkyeZa6ceUQ7DLN0EN/nzB0NF5jZET2GU6uZUCK2BK2d/sfAjROR1Fgm
M5eMFhOx4Av2nzXoRAdbhZyHmQ6zrPx2IT4s3ROO99x4aGXJahhccJIsYO/N4eth
48gjLcZh3tbGveLUvGwRwipPHvwxUqJnf/DJdI/CLH+ftbbl0p++PG0BQz0Hrsm/
wJ20RS38wYzOEqv7uweMAQo7igwyvha65MY1YfSCQxY0DmkCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSsRlCJq+FE1dRCWivMqCONQF6YSTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2FlZDE1MWY2LWJmZTEtMzQ0
My1hODU3LTY5Mjc4YTFlZTZlMC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADRf8zBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAqZ9bx0NAaF6jz6dVjpWQHfq+ZBC6AYrFjfgDvQodibuHNi/itg2861jApmxO
LeMyHTJ3UhlAELN6GPWS0gN62KIRBWwLNxn31yz5pcYfbRQAn7BVQA4yPOOJdovw
wtN7cTQ18K/AK7qmfQ0+DFLwKgCA/7iqXHkxR5SAgD5H0o8rxFmZQWo4D2xLwI32
eeqVU2xAyRc3QczBbGmsybyG4TBIKk4y5YL22xTbytqG7cc1OtV7yaYT8Qz4JkwD
fZpLrj6qlRRorN4UC9yvqa2A3ZdnCAwxR7Gc+yMYWL1ogO42XAT3Bt+i/SzpcAeP
pBgvJWwdc8yWP4rKUCyibYmzaw==
-----END CERTIFICATE-----