Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf22d9fa-9a8b-3a4e-9c2f-58f08adeb6b8.roa
File:                     cf22d9fa-9a8b-3a4e-9c2f-58f08adeb6b8.roa (raw, json)
Hash identifier:          dkAHWkv0Ceb5DWdbh9Cl+CGHEJj+VID9qhBQAa8O8Bs=
Subject key identifier:   87:0D:53:12:1A:5A:93:8F:F5:9D:F6:4E:37:0C:9C:71:1C:A6:F7:2A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695520CD9
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf22d9fa-9a8b-3a4e-9c2f-58f08adeb6b8.roa
Signing time:             Sun 21 Oct 2018 06:31:14 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.46.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:52:0c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=7b450be8-ae81-480a-963d-c7e1cc2382ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:65:b1:d5:68:5b:48:4f:fa:bb:47:57:5c:
                    24:e9:d0:13:56:9b:91:98:1e:14:52:64:ea:b1:a4:
                    cf:cb:3f:af:f3:3f:70:d8:d7:97:83:2a:9b:d8:c4:
                    6d:88:04:b1:aa:b2:89:51:a6:2c:88:15:91:8f:da:
                    5c:07:ed:5a:b5:71:27:ba:91:ef:57:83:7c:20:23:
                    d0:8c:94:d3:70:31:43:cb:38:04:6e:ca:00:94:e8:
                    61:36:d4:3b:e4:50:d2:14:5d:10:45:97:b4:15:bd:
                    fb:ab:33:e7:b5:c3:84:35:64:31:3b:9c:29:36:d0:
                    c5:fc:6e:2a:58:64:29:c1:97:c6:6e:40:39:0d:bf:
                    08:ed:7f:db:f2:9a:43:ba:c3:d3:e8:bd:39:24:a2:
                    b6:70:a0:d6:f9:e8:80:d7:aa:5b:b4:5e:75:73:3e:
                    a5:8d:63:68:8f:29:cd:a9:d2:2b:b4:d5:6f:24:cd:
                    51:60:03:e9:5c:9f:8d:b5:dc:5d:2d:08:48:91:17:
                    49:3a:83:7c:84:f4:0d:51:5a:32:85:0c:14:81:17:
                    bd:a9:38:cb:6b:a9:ce:e3:2f:cc:19:f3:bb:62:1b:
                    a0:58:16:d2:98:62:39:cd:c8:9a:84:96:d8:35:aa:
                    2e:41:c4:04:44:69:72:e3:72:41:55:a4:64:89:a9:
                    99:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0D:53:12:1A:5A:93:8F:F5:9D:F6:4E:37:0C:9C:71:1C:A6:F7:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf22d9fa-9a8b-3a4e-9c2f-58f08adeb6b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.46.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:f4:d9:c8:93:ce:74:4b:e9:b2:72:89:52:8f:e6:7c:f2:10:
         d8:6b:1f:5d:7d:74:46:ed:6b:3a:24:5a:ad:7d:59:ba:cf:0d:
         87:ab:af:00:85:81:e6:5f:82:8b:1d:5e:1f:5d:07:8e:cd:d3:
         eb:18:3a:be:a2:45:20:25:b2:f5:57:6e:aa:59:ab:a3:7d:bd:
         80:7f:24:53:1f:e2:fb:bb:18:99:d1:77:79:3c:87:72:51:1e:
         27:3d:74:cc:97:82:83:d4:a7:34:25:a6:ba:b2:6d:75:ba:90:
         78:83:1d:7c:10:ac:81:8a:b5:bc:95:bf:fa:86:63:3b:4a:40:
         b1:c8:15:25:83:be:ee:a3:8a:01:b7:be:c6:a7:ff:e1:ab:47:
         fa:d5:dc:b5:fc:94:bc:d8:e4:ce:b2:ee:f7:aa:1f:57:ee:3f:
         c6:fb:c9:ba:32:ba:1f:36:1b:5a:fc:88:ec:a0:4e:98:de:99:
         cc:eb:d9:95:3a:5e:e3:ca:ba:08:5c:d8:15:9f:7a:30:ff:25:
         e9:9b:ca:33:24:98:00:98:61:95:91:e9:7d:cd:03:09:ad:f3:
         6c:61:17:aa:ba:7f:c2:b0:b8:23:94:8d:0a:e1:05:92:f8:82:
         62:9b:57:16:1f:af:4a:ee:4a:27:d5:d6:c0:26:8b:7b:be:87:
         93:58:86:0a
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZpVSDNkwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMjEwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDdi
NDUwYmU4LWFlODEtNDgwYS05NjNkLWM3ZTFjYzIzODJhYzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMFQZbHVaFtIT/q7R1dcJOnQE1abkZgeFFJk6rGk
z8s/r/M/cNjXl4Mqm9jEbYgEsaqyiVGmLIgVkY/aXAftWrVxJ7qR71eDfCAj0IyU
03AxQ8s4BG7KAJToYTbUO+RQ0hRdEEWXtBW9+6sz57XDhDVkMTucKTbQxfxuKlhk
KcGXxm5AOQ2/CO1/2/KaQ7rD0+i9OSSitnCg1vnogNeqW7RedXM+pY1jaI8pzanS
K7TVbyTNUWAD6VyfjbXcXS0ISJEXSTqDfIT0DVFaMoUMFIEXvak4y2upzuMvzBnz
u2IboFgW0phiOc3ImoSW2DWqLkHEBERpcuNyQVWkZImpmaMCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSHDVMSGlqTj/Wd9k43DJxxHKb3KjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2NmMjJkOWZhLTlhOGItM2E0
ZS05YzJmLTU4ZjA4YWRlYjZiOC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAjQueDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAsPTZyJPOdEvpsnKJUo/mfPIQ2GsfXX10Ru1rOiRarX1Zus8Nh6uvAIWB5l+C
ix1eH10Hjs3T6xg6vqJFICWy9Vduqlmro329gH8kUx/i+7sYmdF3eTyHclEeJz10
zJeCg9SnNCWmurJtdbqQeIMdfBCsgYq1vJW/+oZjO0pAscgVJYO+7qOKAbe+xqf/
4atH+tXctfyUvNjkzrLu96ofV+4/xvvJujK6HzYbWvyI7KBOmN6ZzOvZlTpe48q6
CFzYFZ96MP8l6ZvKMySYAJhhlZHpfc0DCa3zbGEXqrp/wrC4I5SNCuEFkviCYptX
Fh+vSu5KJ9XWwCaLe76Hk1iGCg==
-----END CERTIFICATE-----