Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e35ae792-2fd5-394d-9cb9-3388e869f395.roa
File:                     e35ae792-2fd5-394d-9cb9-3388e869f395.roa (raw, json)
Hash identifier:          ja6O0KgmoDLtCFfVWUUyOhpCYrqmt9YR9gwnqmulDEE=
Subject key identifier:   D3:FB:DF:EA:EC:AD:E6:35:89:4B:56:4B:6B:E0:CE:49:6D:75:E6:C4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665C075604
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e35ae792-2fd5-394d-9cb9-3388e869f395.roa
Signing time:             Wed 10 Oct 2018 03:31:16 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.46.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:07:56:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=a80ca7e1-86dc-4637-939d-069b0aa37809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:83:82:fb:dc:fa:6a:39:e4:97:65:31:69:14:
                    02:e1:c4:41:68:7b:18:66:51:22:5b:7c:e0:bd:2e:
                    d0:5f:21:51:d3:f2:65:1c:f6:2b:d3:00:d3:3d:ef:
                    f3:54:71:ca:4b:d8:1b:e0:c0:97:7b:06:1e:8d:71:
                    3e:76:ae:3d:24:68:95:a7:81:64:e9:2f:e6:fa:cb:
                    2a:8e:60:e7:8c:ef:0c:86:29:33:10:a9:70:2c:21:
                    69:72:0e:6a:34:d1:32:9e:c0:68:38:b3:0b:77:e6:
                    f1:89:bc:7e:3a:a8:b0:93:2a:00:f0:fd:61:c8:d9:
                    4e:29:43:1e:4c:b1:78:79:cf:71:32:18:51:91:2c:
                    43:4a:af:97:30:43:b5:76:62:00:b6:a3:a1:0f:cf:
                    3e:fb:0e:28:8c:ed:fd:6c:4d:83:36:66:f0:f1:71:
                    f5:2f:61:da:ae:50:1d:97:e5:5a:14:5f:ac:9d:0f:
                    30:9c:5a:b2:e6:d7:e5:23:f4:1f:05:16:49:74:18:
                    b4:8a:a7:bf:36:ae:32:82:9b:10:4f:7b:3c:73:d9:
                    97:26:11:a8:6b:a4:21:fb:12:ef:cb:b6:33:8f:91:
                    d8:66:bc:61:b5:a4:4e:f2:8d:88:f8:5b:e6:9d:cf:
                    73:a4:31:0e:2f:9a:d8:87:aa:f2:8d:01:4d:47:6e:
                    de:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FB:DF:EA:EC:AD:E6:35:89:4B:56:4B:6B:E0:CE:49:6D:75:E6:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e35ae792-2fd5-394d-9cb9-3388e869f395.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.46.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:23:d8:7e:a5:18:6c:5b:2a:76:74:e1:36:44:0c:58:10:0c:
         55:6a:ad:25:35:79:a0:6e:3b:b2:6b:fb:33:66:9a:26:b8:7f:
         34:59:a1:e5:26:c2:e1:7f:94:ad:4d:51:a4:27:f1:52:6d:c5:
         9b:70:db:a3:9c:c6:50:b8:af:d1:b1:a4:99:6d:58:96:46:f5:
         d4:01:9c:dc:14:be:4d:5d:bf:3b:91:b5:b7:a0:8f:8c:a3:a5:
         3b:22:2f:23:37:00:84:e7:74:8b:a1:59:be:9a:f9:d5:4e:f2:
         49:0f:0f:b5:af:0b:0e:e3:2d:f0:9d:98:c5:9b:4e:ba:3b:28:
         81:26:da:16:65:85:0a:6e:8a:a4:ed:ee:39:d2:c1:00:12:ef:
         89:a2:58:4d:1a:0f:da:80:f1:87:0c:48:9e:c7:21:d1:74:c9:
         6f:3b:b1:55:53:04:5e:b3:f4:92:60:69:2d:6b:82:8a:b8:82:
         fc:e0:3d:7e:5d:10:a3:a9:d6:d3:0c:cf:bd:94:66:09:5a:6c:
         22:e0:be:09:24:63:2d:f6:51:2b:e1:0c:4c:60:59:26:a1:0c:
         2c:b7:2d:f2:56:08:f7:22:3e:41:3c:e8:bd:a7:57:8c:23:07:
         89:dd:b7:dd:ff:4c:bd:e0:21:6c:fc:3a:ee:d9:06:08:f4:ed:
         58:58:ef:52
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZlwHVgQwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMTAwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJGE4
MGNhN2UxLTg2ZGMtNDYzNy05MzlkLTA2OWIwYWEzNzgwOTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALaDgvvc+mo55JdlMWkUAuHEQWh7GGZRIlt84L0u
0F8hUdPyZRz2K9MA0z3v81RxykvYG+DAl3sGHo1xPnauPSRolaeBZOkv5vrLKo5g
54zvDIYpMxCpcCwhaXIOajTRMp7AaDizC3fm8Ym8fjqosJMqAPD9YcjZTilDHkyx
eHnPcTIYUZEsQ0qvlzBDtXZiALajoQ/PPvsOKIzt/WxNgzZm8PFx9S9h2q5QHZfl
WhRfrJ0PMJxasubX5SP0HwUWSXQYtIqnvzauMoKbEE97PHPZlyYRqGukIfsS78u2
M4+R2Ga8YbWkTvKNiPhb5p3Pc6QxDi+a2Ieq8o0BTUdu3hsCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTT+9/q7K3mNYlLVktr4M5JbXXmxDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2UzNWFlNzkyLTJmZDUtMzk0
ZC05Y2I5LTMzODhlODY5ZjM5NS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADQutzBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAASPYfqUYbFsqdnThNkQMWBAMVWqtJTV5oG47smv7M2aaJrh/NFmh5SbC4X+U
rU1RpCfxUm3Fm3Dbo5zGULiv0bGkmW1Ylkb11AGc3BS+TV2/O5G1t6CPjKOlOyIv
IzcAhOd0i6FZvpr51U7ySQ8Pta8LDuMt8J2YxZtOujsogSbaFmWFCm6KpO3uOdLB
ABLviaJYTRoP2oDxhwxInsch0XTJbzuxVVMEXrP0kmBpLWuCiriC/OA9fl0Qo6nW
0wzPvZRmCVpsIuC+CSRjLfZRK+EMTGBZJqEMLLct8lYI9yI+QTzovadXjCMHid23
3f9MveAhbPw67tkGCPTtWFjvUg==
-----END CERTIFICATE-----