Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/afb3921d-628f-355c-ba83-132e745b79f8.roa
File:                     afb3921d-628f-355c-ba83-132e745b79f8.roa (raw, json)
Hash identifier:          mOlEuoGHX3tLKulq47Ae+qsALL63h24dOq6W7yVJ5C0=
Subject key identifier:   EB:E2:FD:6F:81:67:D9:A0:CB:6F:13:29:2E:C9:42:78:08:A0:21:7E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C447C2BA
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/afb3921d-628f-355c-ba83-132e745b79f8.roa
Signing time:             Wed 19 Dec 2018 02:24:56 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:47:c2:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=15ed4445-e031-49b8-8b14-40cdf95d775d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:50:e9:77:73:42:15:24:83:26:9a:78:9e:11:
                    b5:25:ec:e2:45:10:4b:d1:0b:50:af:77:15:d5:de:
                    fb:6c:69:81:4b:95:14:8e:83:58:6e:be:3a:4f:e2:
                    19:00:ca:74:8e:92:bd:57:9b:f7:45:eb:b3:ed:9c:
                    57:b9:d8:33:fb:ef:28:44:74:e6:b1:eb:98:49:f9:
                    a6:54:6f:a4:52:71:50:bc:d0:8f:96:e9:8e:5a:a4:
                    36:d8:f9:00:08:c9:00:ad:37:81:cc:a4:28:fe:17:
                    d1:26:74:3a:3f:a1:85:9d:68:a6:e8:22:3d:64:c1:
                    3e:b8:7f:ad:2f:78:a7:53:d1:b1:3a:50:26:dc:52:
                    ac:f0:bc:c7:7a:de:8c:1d:11:e0:20:94:c3:55:1d:
                    61:1a:b0:a8:20:23:57:18:80:9e:15:95:ab:cb:a1:
                    b5:af:ed:c0:b8:c9:b8:a4:09:ca:c5:d6:1e:4e:fe:
                    1d:48:52:0f:80:8e:ef:18:98:a2:4e:32:d1:37:ce:
                    24:5e:e7:4d:7b:8c:c8:96:7a:49:02:14:10:c8:b1:
                    05:e5:1c:37:4f:2d:d1:3e:e2:dc:0b:38:11:36:00:
                    5c:b3:ab:46:9c:5e:6a:dc:9f:16:e8:df:cc:c9:f1:
                    e4:09:48:eb:c4:29:e7:da:48:65:fc:19:38:38:29:
                    53:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E2:FD:6F:81:67:D9:A0:CB:6F:13:29:2E:C9:42:78:08:A0:21:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/afb3921d-628f-355c-ba83-132e745b79f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:dd:27:4e:8e:93:c2:51:e6:70:28:60:f0:1f:27:08:e7:4e:
         d2:c7:7c:b9:db:60:65:c6:cd:71:a5:47:c9:e4:58:d4:dc:21:
         6b:bc:2f:95:c4:99:5c:26:80:39:53:74:69:7e:b8:d6:13:95:
         f2:af:ae:1d:d3:78:45:72:7d:b6:15:2c:da:a9:ef:ea:78:e8:
         6a:ab:59:8f:de:fa:47:4f:fa:58:6b:d0:ef:c8:cd:bc:c2:3e:
         29:86:f4:63:2b:64:65:83:4a:09:c9:d9:34:fd:4b:1b:fd:cb:
         b2:41:5b:a4:cc:28:b3:98:8d:cc:66:81:ea:13:81:2b:ac:8f:
         0a:3d:b7:6e:38:64:e1:74:4b:e2:28:f3:c7:2e:31:19:02:2c:
         f3:4e:63:2a:93:c1:9f:82:99:bb:7d:90:16:fc:86:5b:35:c5:
         8d:ab:03:c4:1e:97:6b:36:5b:bf:c9:7c:c3:82:f5:d9:7e:7c:
         c2:6a:37:49:57:07:91:88:40:3f:84:2e:49:79:87:88:c2:06:
         9a:1d:96:88:71:61:32:d1:bf:92:61:1d:2c:82:26:ab:b3:21:
         90:0e:11:3e:e4:f2:9d:70:be:35:fe:f2:63:fa:62:fe:43:5f:
         43:13:85:1e:71:3f:bb:24:eb:f1:a4:75:39:89:8b:2a:d8:9c:
         d2:89:33:7a
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ8RHwrowCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEyMTkwNTAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDE1
ZWQ0NDQ1LWUwMzEtNDliOC04YjE0LTQwY2RmOTVkNzc1ZDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKlQ6XdzQhUkgyaaeJ4RtSXs4kUQS9ELUK93FdXe
+2xpgUuVFI6DWG6+Ok/iGQDKdI6SvVeb90Xrs+2cV7nYM/vvKER05rHrmEn5plRv
pFJxULzQj5bpjlqkNtj5AAjJAK03gcykKP4X0SZ0Oj+hhZ1opugiPWTBPrh/rS94
p1PRsTpQJtxSrPC8x3rejB0R4CCUw1UdYRqwqCAjVxiAnhWVq8uhta/twLjJuKQJ
ysXWHk7+HUhSD4CO7xiYok4y0TfOJF7nTXuMyJZ6SQIUEMixBeUcN08t0T7i3As4
ETYAXLOrRpxeatyfFujfzMnx5AlI68Qp59pIZfwZODgpU70CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTr4v1vgWfZoMtvEykuyUJ4CKAhfjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2FmYjM5MjFkLTYyOGYtMzU1
Yy1iYTgzLTEzMmU3NDViNzlmOC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADTakTBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAWN0nTo6TwlHmcChg8B8nCOdO0sd8udtgZcbNcaVHyeRY1Nwha7wvlcSZXCaA
OVN0aX641hOV8q+uHdN4RXJ9thUs2qnv6njoaqtZj976R0/6WGvQ78jNvMI+KYb0
YytkZYNKCcnZNP1LG/3LskFbpMwos5iNzGaB6hOBK6yPCj23bjhk4XRL4ijzxy4x
GQIs805jKpPBn4KZu32QFvyGWzXFjasDxB6XazZbv8l8w4L12X58wmo3SVcHkYhA
P4QuSXmHiMIGmh2WiHFhMtG/kmEdLIImq7MhkA4RPuTynXC+Nf7yY/pi/kNfQxOF
HnE/uyTr8aR1OYmLKtic0okzeg==
-----END CERTIFICATE-----