Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b2d168e6-cb93-3921-b413-8127aa849e4f.roa
File:                     b2d168e6-cb93-3921-b413-8127aa849e4f.roa (raw, json)
Hash identifier:          ilfEQWlfYIrBi3U3M0olIKT9uLYxS0e6qgUP5pibeRU=
Subject key identifier:   C0:3C:3B:54:E1:39:E8:5A:AA:5A:D6:B9:33:5F:4C:D8:F3:A3:C2:46
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C447BB5B
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b2d168e6-cb93-3921-b413-8127aa849e4f.roa
Signing time:             Wed 19 Dec 2018 02:24:54 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:47:bb:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=750b1534-21ff-4f01-aebf-a1ed8e443e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:32:52:29:f6:7d:76:f4:38:1a:c5:bf:85:
                    73:6e:45:41:84:7e:e2:90:90:30:b6:60:f2:f0:b5:
                    fe:0d:da:ca:5f:85:eb:81:ec:8d:95:90:77:ae:2a:
                    d6:1f:8f:07:fd:59:91:5a:f8:5f:0b:a1:2e:6b:54:
                    86:48:b2:f6:9c:69:02:db:3e:a1:3e:1b:47:05:a4:
                    17:60:88:27:c4:e5:68:08:c1:02:ef:e4:66:13:c0:
                    46:f4:44:b0:93:49:7f:aa:96:1c:c9:9f:6a:e2:ed:
                    22:e4:b1:17:03:fe:d8:48:39:18:4d:cd:12:63:31:
                    c5:d2:9b:e5:96:35:82:45:1a:f3:a1:08:03:4e:cc:
                    37:86:56:d0:c6:63:7c:e8:b2:44:e0:42:fb:ec:a0:
                    74:e9:e5:2f:e9:87:ea:9a:5c:e1:7e:0c:4b:c5:a1:
                    35:4b:e6:a1:53:5b:02:93:b4:ed:2d:37:0d:fd:ff:
                    73:92:c9:ee:ae:34:d6:7c:dd:ea:c0:48:cb:a6:e7:
                    00:87:df:d8:ca:e4:05:f2:78:63:36:ca:d8:43:c3:
                    09:2a:15:18:0b:33:87:b9:01:b3:17:52:9b:7b:6e:
                    11:9c:48:74:85:b2:27:7a:7d:16:af:d8:05:11:f1:
                    f2:59:1e:f1:2c:74:2a:5a:5b:4e:e7:e3:22:00:a4:
                    9c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3C:3B:54:E1:39:E8:5A:AA:5A:D6:B9:33:5F:4C:D8:F3:A3:C2:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b2d168e6-cb93-3921-b413-8127aa849e4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:d1:dc:7b:ac:66:aa:23:6c:a5:f3:73:63:aa:c2:a0:ed:e0:
         8a:15:cc:b3:01:08:87:b9:d9:5f:fd:98:68:89:a3:21:c3:4b:
         9d:90:4b:f9:33:49:57:ed:4b:9d:53:84:46:72:24:9a:73:d8:
         de:c0:7f:b8:d2:8c:5b:99:91:51:8c:43:9d:93:5a:41:3e:d1:
         af:8b:2d:ec:d3:08:74:9a:87:e8:9e:3c:60:c0:98:4d:f7:8f:
         a4:6f:f0:c7:86:80:3d:a1:00:05:9a:9a:6f:57:7e:8f:a8:57:
         88:31:e3:69:37:1b:8d:e5:d8:ea:44:0a:d3:00:ce:82:32:bb:
         d0:69:5e:81:85:55:34:d7:ed:08:8c:bc:51:eb:74:34:3b:ec:
         9c:0c:0c:5f:b7:46:8b:48:cb:3a:45:8e:21:ea:07:8a:3e:69:
         89:87:03:22:11:c4:ec:39:d6:52:cd:52:65:b2:ca:73:8b:5c:
         d3:19:c3:c8:72:03:0d:5b:85:86:b9:a3:f5:7c:f6:e2:69:3d:
         98:b5:e3:e6:6e:da:e0:d4:7c:61:f4:b0:41:dd:99:e4:2d:6b:
         f4:fd:22:e4:60:64:2b:5e:46:eb:b9:bd:58:02:fb:71:0c:88:
         fd:0e:e0:19:e6:5a:71:96:28:89:49:42:72:de:0c:41:ad:5f:
         1e:be:35:62
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ8RHu1swCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEyMTkwNTAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDc1
MGIxNTM0LTIxZmYtNGYwMS1hZWJmLWExZWQ4ZTQ0M2U1NjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALgFMlIp9n129Dgaxb+Fc25FQYR+4pCQMLZg8vC1
/g3ayl+F64HsjZWQd64q1h+PB/1ZkVr4XwuhLmtUhkiy9pxpAts+oT4bRwWkF2CI
J8TlaAjBAu/kZhPARvREsJNJf6qWHMmfauLtIuSxFwP+2Eg5GE3NEmMxxdKb5ZY1
gkUa86EIA07MN4ZW0MZjfOiyROBC++ygdOnlL+mH6ppc4X4MS8WhNUvmoVNbApO0
7S03Df3/c5LJ7q401nzd6sBIy6bnAIff2MrkBfJ4YzbK2EPDCSoVGAszh7kBsxdS
m3tuEZxIdIWyJ3p9Fq/YBRHx8lke8Sx0KlpbTufjIgCknF0CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTAPDtU4TnoWqpa1rkzX0zY86PCRjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2IyZDE2OGU2LWNiOTMtMzky
MS1iNDEzLTgxMjdhYTg0OWU0Zi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADTakDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAh9Hce6xmqiNspfNzY6rCoO3gihXMswEIh7nZX/2YaImjIcNLnZBL+TNJV+1L
nVOERnIkmnPY3sB/uNKMW5mRUYxDnZNaQT7Rr4st7NMIdJqH6J48YMCYTfePpG/w
x4aAPaEABZqab1d+j6hXiDHjaTcbjeXY6kQK0wDOgjK70GlegYVVNNftCIy8Uet0
NDvsnAwMX7dGi0jLOkWOIeoHij5piYcDIhHE7DnWUs1SZbLKc4tc0xnDyHIDDVuF
hrmj9Xz24mk9mLXj5m7a4NR8YfSwQd2Z5C1r9P0i5GBkK15G67m9WAL7cQyI/Q7g
GeZacZYoiUlCct4MQa1fHr41Yg==
-----END CERTIFICATE-----