Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f77dd6c0-6d1f-3a39-99cc-8ae1adc8d5fe.roa
File:                     f77dd6c0-6d1f-3a39-99cc-8ae1adc8d5fe.roa (raw, json)
Hash identifier:          Ve/9LmwpkY8Anfdtoyn1Nv4oyzsIMqAZe4xyUQxiDxA=
Subject key identifier:   9A:6D:61:E2:82:E4:0D:CA:35:E9:69:A5:4D:8B:E0:BC:4C:2B:58:25
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665C07DE9A
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f77dd6c0-6d1f-3a39-99cc-8ae1adc8d5fe.roa
Signing time:             Wed 10 Oct 2018 03:31:51 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.213.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:07:de:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=22459a37-fde0-40ff-bfdf-4a0200a65a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:33:45:c9:eb:04:d8:ab:fe:2f:67:66:d9:53:
                    10:12:2c:39:83:76:12:1b:c0:f1:af:b6:8f:a9:76:
                    5a:5b:b5:e5:ef:6e:e3:3c:f5:76:65:b6:0a:0d:a0:
                    0a:5f:3a:d8:98:08:51:32:62:7b:3f:a9:38:ea:3c:
                    45:bf:ad:de:b6:80:fa:9c:b4:4d:db:b1:02:58:68:
                    c7:66:8e:6e:d4:f0:75:96:2f:1a:d4:71:f7:61:1c:
                    17:9d:3b:eb:ad:51:91:9f:4e:90:91:02:46:49:d1:
                    0b:24:e7:6f:c7:55:3d:28:29:d8:90:dd:7a:b1:68:
                    d8:66:fd:29:91:99:e7:70:19:d4:06:35:c8:ad:77:
                    46:90:66:fa:8c:2d:47:fe:68:32:fc:05:20:02:f9:
                    cd:44:3a:9b:40:21:e1:53:53:98:c6:a6:14:9c:fd:
                    3a:2b:00:cc:11:e2:0f:fe:84:15:6c:6e:a9:4c:0e:
                    b1:55:ec:67:b3:2e:9d:c9:79:0c:3f:bf:c5:29:90:
                    a2:b5:a7:bc:f4:0e:98:87:db:52:98:da:72:5b:dc:
                    8f:10:7d:55:6f:bc:ea:ea:62:73:50:6c:74:53:1d:
                    25:fc:d2:a4:50:11:26:00:e0:d8:e2:3c:0f:8a:cd:
                    d2:41:e8:23:f2:cf:1f:47:7b:fd:0e:fa:c4:6a:1c:
                    40:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6D:61:E2:82:E4:0D:CA:35:E9:69:A5:4D:8B:E0:BC:4C:2B:58:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f77dd6c0-6d1f-3a39-99cc-8ae1adc8d5fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.213.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:b6:a6:fd:6c:a1:6f:95:79:22:7c:9b:d2:4e:2e:9b:42:ec:
         48:2a:bc:e6:17:3b:7a:ea:3b:b2:45:4b:02:ac:55:3d:27:9d:
         80:ac:b1:62:58:07:b0:25:04:0e:3b:d8:14:e5:80:7b:8a:41:
         90:3c:52:96:03:bc:35:64:75:1d:d0:8a:27:f6:b4:da:4b:a4:
         15:fb:1f:91:99:7f:a3:b0:7a:de:94:5b:f6:63:87:f5:15:db:
         1a:f4:75:7b:b9:ed:e7:c8:02:d5:44:e0:27:80:54:b2:51:bb:
         ed:26:79:8f:de:77:e8:ab:a3:b8:31:af:49:6f:b3:81:6f:e0:
         6e:43:02:c4:a3:28:aa:ff:38:53:04:71:1f:05:0e:90:52:a3:
         4b:2a:86:ab:ba:8e:8e:dc:b6:a0:01:24:8c:18:db:9e:6d:5b:
         fa:81:58:d3:1a:7a:45:ef:97:e3:72:92:9b:a4:9e:09:80:d3:
         8e:51:68:e2:b8:9a:d7:4c:e4:a5:fc:a0:3b:42:95:e6:cb:a2:
         db:af:03:83:24:c9:34:11:dd:7b:f3:2e:8f:59:33:11:eb:21:
         01:26:e3:e4:74:b3:60:4a:b7:7b:14:c4:06:31:68:f5:49:75:
         94:5b:95:ec:33:83:df:33:1b:34:81:fb:a5:6c:ca:35:39:1c:
         a9:f8:58:94
-----BEGIN CERTIFICATE-----
MIIGPjCCBSigAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZlwH3powCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMTAwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDIy
NDU5YTM3LWZkZTAtNDBmZi1iZmRmLTRhMDIwMGE2NWE4ODCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANQzRcnrBNir/i9nZtlTEBIsOYN2EhvA8a+2j6l2
Wlu15e9u4zz1dmW2Cg2gCl862JgIUTJiez+pOOo8Rb+t3raA+py0TduxAlhox2aO
btTwdZYvGtRx92EcF507661RkZ9OkJECRknRCyTnb8dVPSgp2JDderFo2Gb9KZGZ
53AZ1AY1yK13RpBm+owtR/5oMvwFIAL5zUQ6m0Ah4VNTmMamFJz9OisAzBHiD/6E
FWxuqUwOsVXsZ7Muncl5DD+/xSmQorWnvPQOmIfbUpjaclvcjxB9VW+86upic1Bs
dFMdJfzSpFARJgDg2OI8D4rN0kHoI/LPH0d7/Q76xGocQF0CAwEAAaOCA1QwggNQ
MB0GA1UdDgQWBBSabWHiguQNyjXpaaVNi+C8TCtYJTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2Y3N2RkNmMwLTZkMWYtM2Ez
OS05OWNjLThhZTFhZGM4ZDVmZS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADbVMFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQELA4IB
AQCetqb9bKFvlXkifJvSTi6bQuxIKrzmFzt66juyRUsCrFU9J52ArLFiWAewJQQO
O9gU5YB7ikGQPFKWA7w1ZHUd0Ion9rTaS6QV+x+RmX+jsHrelFv2Y4f1Fdsa9HV7
ue3nyALVROAngFSyUbvtJnmP3nfoq6O4Ma9Jb7OBb+BuQwLEoyiq/zhTBHEfBQ6Q
UqNLKoaruo6O3LagASSMGNuebVv6gVjTGnpF75fjcpKbpJ4JgNOOUWjiuJrXTOSl
/KA7QpXmy6LbrwODJMk0Ed178y6PWTMR6yEBJuPkdLNgSrd7FMQGMWj1SXWUW5Xs
M4PfMxs0gfulbMo1ORyp+FiU
-----END CERTIFICATE-----