Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b1aadb3f-9d50-3c70-a257-39c435aad551.roa
File:                     b1aadb3f-9d50-3c70-a257-39c435aad551.roa (raw, json)
Hash identifier:          IfJdy4Y1SJ0iZnpRmDy+QSUHaQ8Lj5+4Ts+S/BIRQ84=
Subject key identifier:   6B:B4:71:F7:AB:B0:38:A9:0C:BA:59:20:BB:DE:97:18:C0:87:02:A0
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665C2E650C
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b1aadb3f-9d50-3c70-a257-39c435aad551.roa
Signing time:             Wed 10 Oct 2018 04:13:56 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.244.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:2e:65:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=9172ad0c-cb31-46a1-9bce-7ad93936800f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:90:1b:7b:79:0f:76:f6:83:82:9e:44:a6:dd:
                    9d:75:70:c7:62:9b:36:48:8e:28:72:1a:a8:0b:01:
                    ba:51:e7:9d:ac:e1:d2:11:08:53:e6:0a:c2:93:6c:
                    56:18:16:ae:2a:61:0b:f0:2e:e9:49:fa:48:37:34:
                    a5:37:5a:07:cc:3a:7a:70:61:6a:fc:65:5a:96:4f:
                    fb:d2:68:5e:16:e6:f3:c6:cf:ce:08:b3:74:c5:b1:
                    cc:70:72:a8:b3:8a:e9:ec:73:87:78:8e:a6:5c:88:
                    c1:f1:0c:2a:b2:66:53:8b:ed:8a:a9:92:88:f2:6a:
                    d9:fc:63:65:2c:8e:a5:19:cc:fd:98:e1:69:db:21:
                    bb:a7:7a:9c:89:b0:98:bb:33:61:f9:2f:ca:66:b7:
                    bb:db:4a:d4:90:2f:84:a0:c4:6d:77:0a:d5:e3:e0:
                    00:74:c9:b6:bc:85:7d:12:e7:70:d8:33:38:01:1f:
                    62:35:5a:58:26:8d:15:10:a5:d5:d4:0f:2b:cb:3d:
                    db:f0:bf:26:04:26:da:44:5d:b6:23:b2:76:90:da:
                    06:2a:c3:59:22:8e:7d:28:0a:73:d3:14:a6:23:9d:
                    a9:c7:36:37:18:41:48:d6:56:68:fa:fa:ba:22:b8:
                    99:12:0d:f2:01:84:89:7e:27:8e:80:a8:82:ef:93:
                    c6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B4:71:F7:AB:B0:38:A9:0C:BA:59:20:BB:DE:97:18:C0:87:02:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b1aadb3f-9d50-3c70-a257-39c435aad551.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.244.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:32:69:c7:b2:7a:9d:06:9e:02:ef:54:53:2c:fa:47:e1:52:
         53:87:8d:9b:5d:99:2a:c7:2a:5e:ee:22:78:5f:6c:5e:14:af:
         6b:46:bf:cc:98:0a:cb:5e:4f:25:32:81:22:ff:45:98:cd:a4:
         33:d0:34:14:f1:40:fb:b5:1a:e2:a1:09:5a:d4:7d:75:2b:9c:
         fa:01:a9:22:ff:4c:8f:26:89:4a:e7:af:2c:91:15:26:b4:ea:
         91:03:e8:21:6a:62:4c:0d:4d:e5:fa:8f:80:a5:e9:0f:ee:73:
         d0:59:8b:6c:8c:e8:94:ee:11:eb:6a:09:f9:47:19:14:b5:4b:
         08:74:45:3a:c4:29:8e:08:83:0b:ab:29:81:1e:f0:20:60:c9:
         2a:9a:9a:c3:51:24:27:3d:14:0c:aa:bf:3b:11:e5:a9:06:47:
         da:0c:40:23:1a:e3:f1:74:f7:15:45:2b:b0:1c:6c:2b:5c:ec:
         52:ce:9e:93:1d:af:7f:e2:91:6b:4e:25:55:4a:86:c0:46:f3:
         eb:a0:6a:79:73:81:b3:60:36:ea:85:38:a0:c2:c7:be:77:c0:
         e5:c7:bf:61:2c:d0:d1:d1:42:26:0e:5b:83:ca:1a:91:73:0c:
         78:67:d0:20:4b:9e:93:6b:42:74:1f:ad:42:3e:95:6d:f1:4b:
         b2:48:d2:99
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZlwuZQwwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMTAwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDkx
NzJhZDBjLWNiMzEtNDZhMS05YmNlLTdhZDkzOTM2ODAwZjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALGQG3t5D3b2g4KeRKbdnXVwx2KbNkiOKHIaqAsB
ulHnnazh0hEIU+YKwpNsVhgWriphC/Au6Un6SDc0pTdaB8w6enBhavxlWpZP+9Jo
Xhbm88bPzgizdMWxzHByqLOK6exzh3iOplyIwfEMKrJmU4vtiqmSiPJq2fxjZSyO
pRnM/Zjhadshu6d6nImwmLszYfkvyma3u9tK1JAvhKDEbXcK1ePgAHTJtryFfRLn
cNgzOAEfYjVaWCaNFRCl1dQPK8s92/C/JgQm2kRdtiOydpDaBirDWSKOfSgKc9MU
piOdqcc2NxhBSNZWaPr6uiK4mRIN8gGEiX4njoCogu+TxpsCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBRrtHH3q7A4qQy6WSC73pcYwIcCoDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2IxYWFkYjNmLTlkNTAtM2M3
MC1hMjU3LTM5YzQzNWFhZDU1MS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBzb0gDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAWzJpx7J6nQaeAu9UUyz6R+FSU4eNm12ZKscqXu4ieF9sXhSva0a/zJgKy15P
JTKBIv9FmM2kM9A0FPFA+7Ua4qEJWtR9dSuc+gGpIv9MjyaJSuevLJEVJrTqkQPo
IWpiTA1N5fqPgKXpD+5z0FmLbIzolO4R62oJ+UcZFLVLCHRFOsQpjgiDC6spgR7w
IGDJKpqaw1EkJz0UDKq/OxHlqQZH2gxAIxrj8XT3FUUrsBxsK1zsUs6ekx2vf+KR
a04lVUqGwEbz66BqeXOBs2A26oU4oMLHvnfA5ce/YSzQ0dFCJg5bg8oakXMMeGfQ
IEuek2tCdB+tQj6VbfFLskjSmQ==
-----END CERTIFICATE-----