Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/288f85b1-c5b2-3be9-b48c-b259c0bde869.roa
File:                     288f85b1-c5b2-3be9-b48c-b259c0bde869.roa (raw, json)
Hash identifier:          2RMFKej8sjDMWrqxBtZblmhzpdinbDc77FC/O1nVknY=
Subject key identifier:   B0:A8:7F:E6:CD:88:E8:58:B4:AA:FB:14:8F:11:F6:F4:5E:75:2E:F7
Certificate issuer:       /CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665A4BA3A4
Authority key identifier: 6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/288f85b1-c5b2-3be9-b48c-b259c0bde869.roa
Signing time:             Tue 09 Oct 2018 19:26:38 +0000
ROA not before:           Tue 09 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        50.112.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5a:4b:a3:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
        Validity
            Not Before: Oct  9 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=ca42696e-4757-4e29-ba4b-6713e787609b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3d:4d:2e:71:60:c4:a6:41:6a:c7:67:5c:60:
                    2b:f4:df:3f:a3:db:db:f8:94:84:ec:ae:00:84:35:
                    d1:4d:bc:10:01:e9:ee:2e:d8:b3:37:ed:e5:29:e8:
                    35:81:9b:51:30:a6:51:c2:d9:3a:71:8a:21:64:11:
                    bc:96:ac:87:08:4a:90:5d:0f:d7:1d:e6:58:5e:06:
                    35:09:69:8d:3e:3c:80:e4:6e:30:cc:ba:1c:e2:7b:
                    03:c7:23:5a:3e:1b:25:84:53:d6:43:4e:c7:ab:17:
                    58:c5:a9:87:f3:87:2d:92:f7:68:3a:a0:bb:5f:21:
                    f7:66:9e:c4:f0:b2:51:58:bf:a9:64:0a:fa:34:df:
                    fa:36:79:67:d2:e9:ff:3b:52:47:4e:df:21:7e:f7:
                    88:b0:85:c3:a1:90:0c:f3:1c:64:9d:5a:d6:1e:26:
                    2b:95:7d:83:a3:ca:d8:81:7f:6e:02:fa:b2:19:07:
                    16:9f:54:45:1d:b6:99:4d:a8:e1:e2:52:51:ff:34:
                    1a:9c:a0:94:64:19:d5:b6:bb:0b:7a:58:27:7b:34:
                    54:fd:50:2e:c6:3f:df:5d:e0:c1:01:60:52:bf:c2:
                    fb:a5:18:e1:da:dd:d7:51:60:b6:af:b8:b1:ef:87:
                    9f:5e:6c:74:28:ba:49:b0:d5:e7:e0:63:6a:7f:6f:
                    d4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A8:7F:E6:CD:88:E8:58:B4:AA:FB:14:8F:11:F6:F4:5E:75:2E:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/288f85b1-c5b2-3be9-b48c-b259c0bde869.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.crl

            X509v3 Authority Key Identifier:
                keyid:6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:3e:00:9f:8b:d4:a2:2e:96:38:d2:dc:44:5f:e1:34:a6:39:
         39:b4:a2:71:26:56:dd:4f:5a:38:9a:4f:80:11:41:8f:ea:cc:
         6b:b6:78:ba:86:37:d9:5d:ff:60:4e:6c:f4:64:1a:b6:11:ff:
         26:e6:da:e6:7e:00:96:f2:90:c9:4b:20:98:c2:9d:f0:59:e3:
         ae:f0:ce:f0:f2:85:58:ea:ce:21:4c:9f:b9:3b:22:63:fd:06:
         2c:d1:14:0a:1a:a1:1f:95:26:d5:74:55:64:57:61:46:24:ee:
         a0:05:9e:ac:c2:bf:0c:3e:7b:21:44:7e:2f:02:fe:e3:03:4d:
         3d:35:6b:20:06:d1:30:d7:ae:7b:5c:04:f4:d0:c2:f3:78:e5:
         29:11:65:1d:9f:73:df:90:99:45:7f:91:3b:1a:d8:aa:88:5e:
         41:61:b3:01:bc:c8:9e:06:25:fe:ed:c9:a8:ca:e7:a3:e6:64:
         6d:80:88:f4:b5:b8:fe:66:b0:f6:4a:fb:7c:62:c9:3c:79:81:
         f7:17:43:2b:a8:cc:d2:2e:ec:52:26:04:cb:e3:ee:82:1e:2d:
         b9:c8:cf:56:90:ba:83:7b:f6:5a:cf:e0:a2:2a:b1:f6:18:6d:
         74:85:44:45:9d:ca:c7:b5:69:db:1c:f1:46:db:0a:af:f5:2d:
         9b:b5:c6:43
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZlpLo6QwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDljMGVlM2JjLWM0Y2EtNGEzNi05OWViLTE0MDczNGIxNGEw
MjAeFw0xODEwMDkwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJGNh
NDI2OTZlLTQ3NTctNGUyOS1iYTRiLTY3MTNlNzg3NjA5YjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALA9TS5xYMSmQWrHZ1xgK/TfP6Pb2/iUhOyuAIQ1
0U28EAHp7i7Yszft5SnoNYGbUTCmUcLZOnGKIWQRvJashwhKkF0P1x3mWF4GNQlp
jT48gORuMMy6HOJ7A8cjWj4bJYRT1kNOx6sXWMWph/OHLZL3aDqgu18h92aexPCy
UVi/qWQK+jTf+jZ5Z9Lp/ztSR07fIX73iLCFw6GQDPMcZJ1a1h4mK5V9g6PK2IF/
bgL6shkHFp9URR22mU2o4eJSUf80GpyglGQZ1ba7C3pYJ3s0VP1QLsY/313gwQFg
Ur/C+6UY4drd11Fgtq+4se+Hn15sdCi6SbDV5+Bjan9v1MkCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSwqH/mzYjoWLSq+xSPEfb0XnUu9zCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWMwZWUz
YmMtYzRjYS00YTM2LTk5ZWItMTQwNzM0YjE0YTAyLzI4OGY4NWIxLWM1YjItM2Jl
OS1iNDhjLWIyNTljMGJkZTg2OS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzljMGVlM2JjLWM0Y2EtNGEzNi05OWVi
LTE0MDczNGIxNGEwMi85YzBlZTNiYy1jNGNhLTRhMzYtOTllYi0xNDA3MzRiMTRh
MDIuY3JsMB8GA1UdIwQYMBaAFGx4thltQweEG59beuLv5LtWbn1DMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvOWMwZWUzYmMtYzRjYS00YTM2LTk5ZWItMTQwNzM0
YjE0YTAyLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBzJwADBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAZz4An4vUoi6WONLcRF/hNKY5ObSicSZW3U9aOJpPgBFBj+rMa7Z4uoY32V3/
YE5s9GQathH/Juba5n4AlvKQyUsgmMKd8FnjrvDO8PKFWOrOIUyfuTsiY/0GLNEU
ChqhH5Um1XRVZFdhRiTuoAWerMK/DD57IUR+LwL+4wNNPTVrIAbRMNeue1wE9NDC
83jlKRFlHZ9z35CZRX+ROxrYqoheQWGzAbzIngYl/u3JqMrno+ZkbYCI9LW4/maw
9kr7fGLJPHmB9xdDK6jM0i7sUiYEy+Pugh4tucjPVpC6g3v2Ws/goiqx9hhtdIVE
RZ3Kx7Vp2xzxRtsKr/Utm7XGQw==
-----END CERTIFICATE-----