Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aff57de6-f67a-3eb9-8eee-9970b087ef33.roa
File:                     aff57de6-f67a-3eb9-8eee-9970b087ef33.roa (raw, json)
Hash identifier:          fNBGPapawfupCYEmvaO2BFsR6WjlfL9J3rGeMb3dCvE=
Subject key identifier:   4D:96:31:C9:AF:0C:48:1D:0A:F2:C9:92:A1:74:96:15:F3:ED:FD:4A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1669445CC21
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aff57de6-f67a-3eb9-8eee-9970b087ef33.roa
Signing time:             Sun 21 Oct 2018 01:38:14 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.66.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:94:45:cc:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=fcaaf9af-51ff-437e-abea-feda18d04e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dc:f8:bf:27:ee:d0:39:4e:78:54:1f:f6:f3:
                    d9:d5:cd:be:3b:06:80:e8:1f:df:e0:b9:52:59:2b:
                    65:88:95:14:71:14:66:8c:04:ad:6b:ee:65:9b:01:
                    39:a6:b6:7e:b3:3b:2f:1a:7b:0d:e0:08:8c:4d:47:
                    5a:7f:bb:3d:f9:fe:9a:11:ee:93:4e:64:55:8b:69:
                    9f:16:13:67:1d:29:58:5e:3d:5d:7a:b0:ae:dc:6f:
                    5f:1c:ea:c1:1d:ac:1c:cf:af:9b:ba:65:64:65:bc:
                    93:85:1c:45:23:ce:d8:41:ac:4a:21:cf:6e:49:9a:
                    3d:02:f1:42:8e:14:db:5d:a5:1f:44:48:fd:4c:f1:
                    93:41:53:b9:82:49:88:cf:37:6a:be:da:e7:08:db:
                    e2:b5:8d:0d:f1:52:d0:a7:ab:eb:aa:32:ff:1d:fb:
                    05:94:02:f4:84:81:6d:8d:c3:96:18:d1:c0:4a:26:
                    9a:1e:2f:cb:2f:86:73:ff:c1:9f:ad:2d:40:02:a6:
                    bc:0d:2f:0b:4c:3f:1e:88:32:51:8f:ac:6b:7a:eb:
                    3f:c9:5d:ed:60:39:95:c1:39:6c:11:73:3a:9a:50:
                    3a:00:96:0d:31:c9:88:27:a5:8c:0c:64:80:8c:da:
                    73:7c:47:7b:f2:4b:7e:f5:cb:43:13:86:a3:d1:c9:
                    cc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:96:31:C9:AF:0C:48:1D:0A:F2:C9:92:A1:74:96:15:F3:ED:FD:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aff57de6-f67a-3eb9-8eee-9970b087ef33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.66.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:d8:67:1a:d0:ff:94:c5:ec:a9:4a:7c:63:aa:1c:78:bf:89:
         5f:f0:5f:a5:e9:74:c2:ba:d4:83:ba:e6:fc:f3:5c:6c:44:8c:
         14:75:f6:60:09:70:bb:30:dc:4c:4e:3e:86:42:6a:11:0b:50:
         73:b2:c9:f5:26:09:92:88:1a:5b:10:d9:a4:1d:0e:ad:73:81:
         b3:76:1e:cd:23:42:19:6b:7e:06:fd:e4:c6:e4:a7:26:7f:25:
         85:26:91:54:dd:d4:81:be:1b:a0:6c:78:ec:62:2b:f4:a2:0f:
         52:6d:40:99:d7:f9:89:6f:e4:0a:d1:97:5e:dd:98:0b:1a:22:
         7e:39:b9:33:6d:21:69:43:18:86:6b:36:b5:a2:7c:80:9b:9c:
         d0:f1:0e:7c:5c:0d:aa:14:2e:ea:41:23:10:77:4d:a5:f8:f3:
         c9:a4:10:8f:8a:5f:cd:ea:36:dd:cb:cf:29:66:96:dc:09:3e:
         45:2e:e3:af:79:22:16:ae:54:32:7c:53:e8:32:0b:8b:94:be:
         fc:71:0b:88:fb:97:8c:bb:4e:26:2c:c2:e4:b9:f9:e1:d7:22:
         a5:0e:de:b7:65:1c:38:5c:8d:e3:26:40:b2:fd:f3:42:fd:3f:
         05:96:ca:80:88:eb:d6:cd:65:0b:b1:01:51:c3:23:73:e2:59:
         e8:f7:de:13
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZpRFzCEwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMjEwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJGZj
YWFmOWFmLTUxZmYtNDM3ZS1hYmVhLWZlZGExOGQwNGU5ZDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALfc+L8n7tA5TnhUH/bz2dXNvjsGgOgf3+C5Ulkr
ZYiVFHEUZowErWvuZZsBOaa2frM7Lxp7DeAIjE1HWn+7Pfn+mhHuk05kVYtpnxYT
Zx0pWF49XXqwrtxvXxzqwR2sHM+vm7plZGW8k4UcRSPO2EGsSiHPbkmaPQLxQo4U
212lH0RI/Uzxk0FTuYJJiM83ar7a5wjb4rWNDfFS0Ker66oy/x37BZQC9ISBbY3D
lhjRwEommh4vyy+Gc//Bn60tQAKmvA0vC0w/HogyUY+sa3rrP8ld7WA5lcE5bBFz
OppQOgCWDTHJiCeljAxkgIzac3xHe/JLfvXLQxOGo9HJzAcCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBRNljHJrwxIHQryyZKhdJYV8+39SjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2FmZjU3ZGU2LWY2N2EtM2Vi
OS04ZWVlLTk5NzBiMDg3ZWYzMy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBzZCADBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAsthnGtD/lMXsqUp8Y6oceL+JX/Bfpel0wrrUg7rm/PNcbESMFHX2YAlwuzDc
TE4+hkJqEQtQc7LJ9SYJkogaWxDZpB0OrXOBs3YezSNCGWt+Bv3kxuSnJn8lhSaR
VN3Ugb4boGx47GIr9KIPUm1Amdf5iW/kCtGXXt2YCxoifjm5M20haUMYhms2taJ8
gJuc0PEOfFwNqhQu6kEjEHdNpfjzyaQQj4pfzeo23cvPKWaW3Ak+RS7jr3kiFq5U
MnxT6DILi5S+/HELiPuXjLtOJizC5Ln54dcipQ7et2UcOFyN4yZAsv3zQv0/BZbK
gIjr1s1lC7EBUcMjc+JZ6PfeEw==
-----END CERTIFICATE-----