Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190/529e45d9-f04b-365b-8203-2350844c5d22.roa
File:                     529e45d9-f04b-365b-8203-2350844c5d22.roa (raw, json)
Hash identifier:          2Gx/AWgtNLVDXVylnLZR95QSvDTGlsHl2fjYD3ci4Wo=
Subject key identifier:   50:15:B8:30:9F:97:10:89:7A:3B:0A:54:7F:C4:6E:F4:2A:34:32:C5
Certificate issuer:       /CN=8a69f9d3-746f-47a4-971f-36ee3a52a190
Certificate serial:       010D0C9F4328576D51CC73C042CFC168E6E102A3
Authority key identifier: 16:B3:E8:A9:FC:0C:22:F4:68:BE:86:8C:B0:69:47:3E:55:3A:B0:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190/529e45d9-f04b-365b-8203-2350844c5d22.roa
Signing time:             Wed 13 Feb 2019 12:42:12 +0000
ROA not before:           Tue 20 Nov 2018 05:00:00 +0000
ROA not after:            Mon 20 Nov 2028 05:00:00 +0000
asID:                     14618
IP address blocks:        45.223.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:68:e6:e1:02:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a69f9d3-746f-47a4-971f-36ee3a52a190
        Validity
            Not Before: Nov 20 05:00:00 2018 GMT
            Not After : Nov 20 05:00:00 2028 GMT
        Subject: CN=a0f39c64-408a-42f4-a565-b78175159213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fb:30:12:64:cd:aa:43:c9:f3:e6:cf:64:fe:
                    87:ff:28:9e:de:4a:d4:cd:ea:d5:cf:4f:3b:48:9b:
                    e0:b0:0e:de:79:4b:4e:81:56:43:1d:18:d5:f2:37:
                    05:a0:91:63:1f:3f:2b:01:4d:74:29:7d:b1:89:31:
                    b7:c4:d8:78:a6:f9:b3:f5:92:3c:16:0f:e7:98:ff:
                    13:eb:99:15:5c:00:99:24:c6:08:28:dc:67:c3:3a:
                    d3:5c:e3:e0:67:50:4f:2c:3c:f0:c6:b8:f9:88:9b:
                    0a:78:84:c3:b9:2d:c8:46:5c:f1:dc:b3:ad:e4:72:
                    72:17:77:ad:9f:81:79:4b:ff:2c:58:9c:40:77:a9:
                    32:6a:9c:70:c3:68:82:22:72:3a:ec:37:8f:13:a9:
                    ed:83:a2:93:0a:32:59:2f:cf:fb:e3:a1:d4:3c:d2:
                    0e:d9:22:df:37:4d:e2:11:81:56:19:72:d4:64:3c:
                    4a:e8:de:05:81:7d:cc:9d:a0:48:f9:2d:59:6a:47:
                    fd:8d:01:f1:ca:d4:21:56:9e:94:18:bf:df:04:f9:
                    39:ac:30:c3:a8:a9:27:a6:cb:6b:6f:52:5d:cd:46:
                    e6:a8:46:73:61:7a:e7:92:24:07:55:bc:61:f1:3b:
                    c4:f7:50:5c:16:43:06:ec:c6:90:97:5b:db:62:0d:
                    d2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:15:B8:30:9F:97:10:89:7A:3B:0A:54:7F:C4:6E:F4:2A:34:32:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190/529e45d9-f04b-365b-8203-2350844c5d22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190/8a69f9d3-746f-47a4-971f-36ee3a52a190.crl

            X509v3 Authority Key Identifier:
                keyid:16:B3:E8:A9:FC:0C:22:F4:68:BE:86:8C:B0:69:47:3E:55:3A:B0:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.223.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:c9:aa:05:74:ca:63:59:f2:3f:7f:fa:35:ec:28:90:31:79:
         c3:76:23:ee:64:52:21:07:cb:48:ad:56:14:83:3b:30:58:2d:
         72:41:ff:f5:d1:bb:90:ca:07:34:87:5f:fb:82:a1:87:27:91:
         2b:69:4e:18:1d:fa:89:f5:f6:e3:9f:f1:99:2a:09:ad:97:4b:
         52:b6:c8:07:11:c3:3b:0f:00:b9:45:e4:5d:68:b3:d1:a8:df:
         92:54:78:96:5b:d3:47:ac:49:a3:3e:51:fa:53:71:4b:35:31:
         f7:9d:c9:90:df:a8:b4:2b:29:48:7f:81:e4:aa:5c:25:1d:52:
         11:79:bd:86:a4:0e:67:4d:19:d9:ae:cb:4b:37:b2:c5:2f:ba:
         93:c1:b1:8f:6c:22:6c:16:36:10:8a:a3:72:c6:56:e0:8d:1c:
         6d:59:16:30:f3:ee:c9:4f:96:9a:f4:7f:fe:e1:3a:3c:aa:e9:
         d8:a6:3d:e0:18:d0:8e:3f:05:f4:ea:1b:ea:10:8f:50:8d:42:
         b1:1d:2b:84:84:e9:c1:8b:56:9c:10:bf:54:43:1e:0f:58:cd:
         23:10:ab:f2:f4:b3:0b:cb:a7:48:91:1d:b5:30:a6:b4:b8:39:
         8a:90:68:24:7f:58:09:71:d6:0d:09:2d:23:45:60:10:de:87:
         c1:2d:ed:63
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BaObhAqMwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDhhNjlmOWQzLTc0NmYtNDdhNC05NzFmLTM2ZWUzYTUyYTE5
MDAeFw0xODExMjAwNTAwMDBaFw0yODExMjAwNTAwMDBaMC8xLTArBgNVBAMTJGEw
ZjM5YzY0LTQwOGEtNDJmNC1hNTY1LWI3ODE3NTE1OTIxMzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKr7MBJkzapDyfPmz2T+h/8ont5K1M3q1c9PO0ib
4LAO3nlLToFWQx0Y1fI3BaCRYx8/KwFNdCl9sYkxt8TYeKb5s/WSPBYP55j/E+uZ
FVwAmSTGCCjcZ8M601zj4GdQTyw88Ma4+YibCniEw7ktyEZc8dyzreRychd3rZ+B
eUv/LFicQHepMmqccMNogiJyOuw3jxOp7YOikwoyWS/P++Oh1DzSDtki3zdN4hGB
Vhly1GQ8SujeBYF9zJ2gSPktWWpH/Y0B8crUIVaelBi/3wT5Oawww6ipJ6bLa29S
Xc1G5qhGc2F655IkB1W8YfE7xPdQXBZDBuzGkJdb22IN0usCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBRQFbgwn5cQiXo7ClR/xG70KjQyxTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGE2OWY5
ZDMtNzQ2Zi00N2E0LTk3MWYtMzZlZTNhNTJhMTkwLzUyOWU0NWQ5LWYwNGItMzY1
Yi04MjAzLTIzNTA4NDRjNWQyMi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzhhNjlmOWQzLTc0NmYtNDdhNC05NzFm
LTM2ZWUzYTUyYTE5MC84YTY5ZjlkMy03NDZmLTQ3YTQtOTcxZi0zNmVlM2E1MmEx
OTAuY3JsMB8GA1UdIwQYMBaAFBaz6Kn8DCL0aL6GjLBpRz5VOrB/MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvOGE2OWY5ZDMtNzQ2Zi00N2E0LTk3MWYtMzZlZTNh
NTJhMTkwLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3fDDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAfMmqBXTKY1nyP3/6NewokDF5w3Yj7mRSIQfLSK1WFIM7MFgtckH/9dG7kMoH
NIdf+4KhhyeRK2lOGB36ifX245/xmSoJrZdLUrbIBxHDOw8AuUXkXWiz0ajfklR4
llvTR6xJoz5R+lNxSzUx953JkN+otCspSH+B5KpcJR1SEXm9hqQOZ00Z2a7LSzey
xS+6k8Gxj2wibBY2EIqjcsZW4I0cbVkWMPPuyU+WmvR//uE6PKrp2KY94BjQjj8F
9Oob6hCPUI1CsR0rhITpwYtWnBC/VEMeD1jNIxCr8vSzC8unSJEdtTCmtLg5ipBo
JH9YCXHWDQktI0VgEN6HwS3tYw==
-----END CERTIFICATE-----