Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b1c61981-c967-309f-9cd3-8b3cfeff7841.roa
File:                     b1c61981-c967-309f-9cd3-8b3cfeff7841.roa (raw, json)
Hash identifier:          BetR7Kg42B/hbXdRwY7cIZSw4WGyGl0D3jw4MSizqAk=
Subject key identifier:   5E:AE:81:0C:93:B3:24:B1:F7:2D:D6:70:45:74:0C:1E:13:5D:4B:E4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B2F132
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b1c61981-c967-309f-9cd3-8b3cfeff7841.roa
Signing time:             Sun 21 Oct 2018 08:17:04 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.94.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b2:f1:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=9be59101-96c4-424e-bbc9-5adf69bb75b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:96:72:1d:c3:13:5f:0c:17:c1:e8:b4:76:ca:
                    37:7c:48:91:a9:1b:2c:ff:b4:ee:f0:cb:a1:ea:fb:
                    6e:f8:50:9e:e2:09:72:df:fd:ac:ca:6b:40:e4:1c:
                    71:94:e0:cd:17:c9:3e:2f:09:7a:94:73:b7:ab:a1:
                    53:09:f8:3c:c0:69:76:1e:58:1a:bd:f4:54:a9:eb:
                    8b:81:66:5e:b7:90:2a:55:2c:02:1c:78:d9:9a:eb:
                    5f:94:d9:11:1d:52:81:53:a8:c4:70:6c:f8:bc:02:
                    bc:d3:93:ad:d6:c3:48:db:15:02:4d:1b:a9:00:eb:
                    9d:72:0f:24:fc:f4:32:d0:de:94:da:9e:1f:57:e2:
                    99:a9:06:57:cc:d6:2c:3a:c7:93:af:5a:3a:66:2f:
                    82:bc:64:aa:f6:7b:6b:c2:1d:40:f2:83:61:ea:98:
                    d2:83:b4:57:22:ae:a3:f8:2e:5e:94:36:7e:39:46:
                    c3:64:39:41:a8:9c:f7:36:74:0a:99:a9:b4:38:09:
                    4c:c4:bd:59:8e:0f:27:af:35:02:8d:be:a0:4b:c8:
                    6e:cc:49:9e:a1:8f:74:9e:a5:f8:2e:81:a0:f7:ac:
                    7b:d7:16:4f:a9:52:9d:b2:75:77:ff:86:6b:64:31:
                    27:d3:a0:6e:36:10:4f:c5:eb:d3:9b:35:b5:ec:2c:
                    0e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AE:81:0C:93:B3:24:B1:F7:2D:D6:70:45:74:0C:1E:13:5D:4B:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b1c61981-c967-309f-9cd3-8b3cfeff7841.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.94.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:bb:0b:5d:7f:52:82:5e:71:1a:48:34:be:5f:a6:23:cd:53:
         5b:50:e6:b9:52:6a:3b:78:8e:1f:fd:36:26:8c:76:be:4a:ee:
         7a:03:f7:44:13:cf:f8:b0:fe:62:42:8b:95:47:8b:f4:2e:75:
         12:f5:fe:1f:be:c5:3a:a4:c7:8c:89:b7:cc:67:e7:db:ca:11:
         49:45:2c:8f:3e:03:4b:31:22:9f:64:84:db:72:1b:01:4f:97:
         3c:4f:fd:2c:8b:b4:13:e4:66:30:05:f4:2b:51:3a:44:a8:d7:
         bd:a9:dc:61:0e:20:2f:b8:1e:fe:ea:ca:1f:2c:52:7d:8b:28:
         4c:00:d7:9e:9b:c2:a0:c9:3b:6c:d7:a5:5a:e7:31:df:a5:9b:
         93:7f:52:05:94:cb:ea:16:92:41:f4:53:05:3b:3d:1c:65:62:
         48:40:0a:66:7f:dd:6b:87:c7:c8:4c:dd:13:fb:8e:ec:7d:60:
         5f:c6:24:2f:d9:b5:3c:d3:49:30:75:dd:54:8b:cb:4f:04:f2:
         42:ba:5b:a0:88:b8:a4:86:c2:41:7f:5e:cf:ff:13:90:dc:74:
         10:1e:cd:7b:8c:3c:18:9b:04:5b:4b:67:18:95:48:18:50:7d:
         3a:35:a3:91:d3:dc:2d:92:c2:c4:73:05:02:fb:cf:56:dd:a9:
         21:89:2c:72
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZpWy8TIwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMjEwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDli
ZTU5MTAxLTk2YzQtNDI0ZS1iYmM5LTVhZGY2OWJiNzViMzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAL6Wch3DE18MF8HotHbKN3xIkakbLP+07vDLoer7
bvhQnuIJct/9rMprQOQccZTgzRfJPi8JepRzt6uhUwn4PMBpdh5YGr30VKnri4Fm
XreQKlUsAhx42ZrrX5TZER1SgVOoxHBs+LwCvNOTrdbDSNsVAk0bqQDrnXIPJPz0
MtDelNqeH1fimakGV8zWLDrHk69aOmYvgrxkqvZ7a8IdQPKDYeqY0oO0VyKuo/gu
XpQ2fjlGw2Q5Qaic9zZ0CpmptDgJTMS9WY4PJ681Ao2+oEvIbsxJnqGPdJ6l+C6B
oPese9cWT6lSnbJ1d/+Ga2QxJ9OgbjYQT8Xr05s1tewsDnsCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBReroEMk7Mksfct1nBFdAweE11L5DCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2IxYzYxOTgxLWM5NjctMzA5
Zi05Y2QzLThiM2NmZWZmNzg0MS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADReCDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAg7sLXX9Sgl5xGkg0vl+mI81TW1DmuVJqO3iOH/02Jox2vkruegP3RBPP+LD+
YkKLlUeL9C51EvX+H77FOqTHjIm3zGfn28oRSUUsjz4DSzEin2SE23IbAU+XPE/9
LIu0E+RmMAX0K1E6RKjXvancYQ4gL7ge/urKHyxSfYsoTADXnpvCoMk7bNelWucx
36Wbk39SBZTL6haSQfRTBTs9HGViSEAKZn/da4fHyEzdE/uO7H1gX8YkL9m1PNNJ
MHXdVIvLTwTyQrpboIi4pIbCQX9ez/8TkNx0EB7Ne4w8GJsEW0tnGJVIGFB9OjWj
kdPcLZLCxHMFAvvPVt2pIYkscg==
-----END CERTIFICATE-----