Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8579af12-237e-3ef4-b00d-636b0a2c4a4e.roa
File:                     8579af12-237e-3ef4-b00d-636b0a2c4a4e.roa (raw, json)
Hash identifier:          duDNxDU74TtqN7OzHV0EMkH3F/a5o41ob2+ZmRxdAmU=
Subject key identifier:   D1:23:65:4E:F5:9D:D3:23:08:8D:64:4A:B5:FE:B5:01:FA:1C:1D:92
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B58C70
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8579af12-237e-3ef4-b00d-636b0a2c4a4e.roa
Signing time:             Sun 21 Oct 2018 08:19:55 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        54.249.0.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b5:8c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=20e78c4b-1686-4cdb-9fca-2fc1cf08f13c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bc:2d:7e:79:a8:49:d9:ec:5b:ed:ad:12:b9:
                    56:36:ce:a0:9a:a9:70:70:d8:23:14:d2:0d:11:ee:
                    20:ed:8f:85:d1:d9:cd:59:67:0f:99:e1:36:fa:8f:
                    4d:63:62:33:ef:2c:1f:4f:c8:f2:bf:ff:dd:37:30:
                    ef:b0:e8:ff:91:79:63:dc:7f:9e:1c:46:7c:29:7b:
                    9d:e1:23:ad:d8:8d:06:02:b9:32:1b:b5:fa:dc:a1:
                    61:9f:ee:f3:af:59:85:38:82:c1:ee:8d:89:43:70:
                    49:f8:b9:04:af:05:0f:f9:b5:2d:b6:d7:e1:59:4a:
                    bf:04:c0:ee:d6:c1:b9:8e:51:3f:7b:91:cc:11:e3:
                    91:d4:77:27:b4:82:19:e2:3c:1e:de:d8:95:a1:2c:
                    14:75:d7:72:05:35:b6:8e:a2:cf:2e:79:0a:74:a8:
                    67:25:4b:8a:20:b6:38:37:e4:56:ee:97:0e:40:60:
                    09:68:46:d4:74:aa:f3:8f:c6:90:15:42:d5:98:a1:
                    9b:8d:88:cc:39:3c:84:5e:30:00:3a:60:3f:64:61:
                    4a:4c:01:a1:a0:0b:35:e3:26:6f:e2:b0:46:42:e7:
                    38:f5:0b:21:cf:b6:fd:5d:8c:0c:94:4c:71:8c:a5:
                    f9:e6:42:e9:8c:25:57:74:49:27:fb:ed:61:31:01:
                    6d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:23:65:4E:F5:9D:D3:23:08:8D:64:4A:B5:FE:B5:01:FA:1C:1D:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8579af12-237e-3ef4-b00d-636b0a2c4a4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.249.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:c7:3a:e3:4a:a0:6f:1d:2c:a2:72:5e:21:f0:53:04:34:78:
         85:97:98:48:f4:fb:47:f6:c4:5c:74:45:02:d0:04:ec:bc:43:
         c6:f8:ba:95:6f:94:90:1b:ac:c0:42:ee:2f:19:35:99:b2:6f:
         2c:64:4c:42:e6:66:4c:3a:ef:2c:48:12:34:1b:87:a1:7a:03:
         cc:35:72:3b:9d:98:d2:1c:6e:a3:ad:c4:a9:30:59:1a:ec:a6:
         37:b3:d1:a1:c3:2c:23:27:ba:6d:a7:67:84:87:33:bc:40:95:
         20:1f:02:33:9f:81:6b:8c:05:0b:82:28:9c:51:9e:c5:24:13:
         20:1d:7a:b1:18:f8:10:db:b6:42:01:33:c6:19:02:2d:a3:d5:
         c4:07:15:bd:53:f5:73:83:83:66:c9:04:50:1d:3a:85:10:a2:
         17:19:4d:9a:72:25:ef:bb:61:c4:6f:62:63:3a:a8:38:6e:11:
         e8:3d:45:91:d1:a9:0e:1b:00:7f:5f:57:1e:43:28:88:16:35:
         bf:7b:6b:47:33:a0:5d:92:08:ce:da:7d:fe:08:63:71:d3:f1:
         b0:85:76:da:77:ac:f8:c4:47:1e:77:6b:bf:1a:ec:68:83:58:
         59:f3:ac:46:3c:5a:a5:80:87:58:ba:31:c5:bb:df:99:b0:fa:
         49:e9:f0:1e
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZpW1jHAwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMjEwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDIw
ZTc4YzRiLTE2ODYtNGNkYi05ZmNhLTJmYzFjZjA4ZjEzYzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAL68LX55qEnZ7FvtrRK5VjbOoJqpcHDYIxTSDRHu
IO2PhdHZzVlnD5nhNvqPTWNiM+8sH0/I8r//3Tcw77Do/5F5Y9x/nhxGfCl7neEj
rdiNBgK5Mhu1+tyhYZ/u869ZhTiCwe6NiUNwSfi5BK8FD/m1LbbX4VlKvwTA7tbB
uY5RP3uRzBHjkdR3J7SCGeI8Ht7YlaEsFHXXcgU1to6izy55CnSoZyVLiiC2ODfk
Vu6XDkBgCWhG1HSq84/GkBVC1Zihm42IzDk8hF4wADpgP2RhSkwBoaALNeMmb+Kw
RkLnOPULIc+2/V2MDJRMcYyl+eZC6YwlV3RJJ/vtYTEBbWsCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTRI2VO9Z3TIwiNZEq1/rUB+hwdkjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjLzg1NzlhZjEyLTIzN2UtM2Vm
NC1iMDBkLTYzNmIwYTJjNGE0ZS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBTb5ADBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAEsc640qgbx0sonJeIfBTBDR4hZeYSPT7R/bEXHRFAtAE7LxDxvi6lW+UkBus
wELuLxk1mbJvLGRMQuZmTDrvLEgSNBuHoXoDzDVyO52Y0hxuo63EqTBZGuymN7PR
ocMsIye6badnhIczvECVIB8CM5+Ba4wFC4IonFGexSQTIB16sRj4ENu2QgEzxhkC
LaPVxAcVvVP1c4ODZskEUB06hRCiFxlNmnIl77thxG9iYzqoOG4R6D1FkdGpDhsA
f19XHkMoiBY1v3trRzOgXZIIztp9/ghjcdPxsIV22nes+MRHHndrvxrsaINYWfOs
RjxapYCHWLoxxbvfmbD6SenwHg==
-----END CERTIFICATE-----