Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c8e8abe3-275a-3567-9883-d2951815a2ac.roa
File:                     c8e8abe3-275a-3567-9883-d2951815a2ac.roa (raw, json)
Hash identifier:          mwJJp9ojv6ILBi/O0f3+c4ikysyiO+tz352K/hGwXiI=
Subject key identifier:   CD:CD:99:D3:E9:0F:2F:03:9F:86:4E:0C:97:5A:1F:3A:3A:3F:6E:13
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665C07C3A6
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c8e8abe3-275a-3567-9883-d2951815a2ac.roa
Signing time:             Wed 10 Oct 2018 03:31:44 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.200.0.0/15 maxlen: 15

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:07:c3:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=d267cfd0-8c17-49a9-a1fb-3a9a50991896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3b:7d:35:41:6e:62:95:f5:9c:38:32:7d:d5:
                    67:0d:fc:ef:98:ab:22:16:31:c1:b7:ab:c3:24:79:
                    67:9b:af:59:eb:6a:0f:76:e0:0e:2f:70:9a:41:bb:
                    06:de:a2:31:95:46:ab:71:75:ee:71:9b:51:58:a9:
                    e2:20:f2:6b:4e:53:73:95:fe:b1:b9:9c:f0:1c:f4:
                    9e:8e:b4:ef:e6:52:a8:46:ca:70:81:30:78:14:a3:
                    4d:f5:d2:4f:8c:c8:4b:38:de:11:80:7c:f7:a5:02:
                    22:2c:fb:e0:63:72:ce:c0:3f:1f:64:e2:54:d8:9d:
                    99:9f:3b:38:36:c2:a7:95:27:ef:19:2a:2e:00:19:
                    d7:1c:ea:8a:a9:e9:6c:bf:5c:98:57:38:41:82:c9:
                    3c:b2:2f:c0:09:59:bc:86:bc:68:f2:74:68:a1:fc:
                    7d:16:14:0a:62:96:77:ae:81:5e:34:47:79:7a:2f:
                    4b:35:08:9e:01:0f:16:2c:e2:3e:dc:f4:0b:9a:f1:
                    de:a1:f3:82:0c:2e:bf:49:84:2a:20:c2:9a:55:8f:
                    f7:1d:74:31:78:60:9b:16:7e:d8:12:63:e2:8e:2d:
                    c3:48:9f:97:69:df:51:c5:20:2e:c0:b0:00:00:0f:
                    b6:3d:90:92:41:bf:bd:46:68:da:aa:a5:9e:e2:4d:
                    ca:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CD:99:D3:E9:0F:2F:03:9F:86:4E:0C:97:5A:1F:3A:3A:3F:6E:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c8e8abe3-275a-3567-9883-d2951815a2ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.200.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:8a:b0:2c:3e:bf:69:9e:6a:25:06:f2:38:8b:f5:ea:3e:43:
         c5:11:13:93:bb:09:f6:8a:6e:a7:af:35:5b:08:d3:f2:6b:62:
         0a:68:ff:76:a9:0f:7d:c9:d7:af:7e:f3:6c:ba:2c:f7:a6:b2:
         3a:b0:ee:99:d4:46:d6:4b:4d:db:1a:fb:9b:4c:d3:7b:bc:9b:
         5b:f9:7b:9d:ab:c6:b6:6e:72:8b:2b:c6:17:db:a9:76:2b:fe:
         b5:0d:de:d2:40:31:43:70:81:a2:d0:90:9c:04:8e:64:df:0b:
         75:a0:46:16:9b:4d:90:fa:7f:33:1b:3a:6c:5e:68:06:db:a8:
         d0:60:a4:e6:57:3d:89:02:9b:c1:b3:b2:95:2c:e9:2c:c6:67:
         96:81:c5:a1:7f:27:61:5d:b0:52:66:ab:23:23:20:30:fe:3a:
         c7:c3:f6:b3:cb:25:3a:b2:e1:a0:0d:c7:e2:b7:d9:61:ae:55:
         43:71:0d:d5:80:a0:dc:7f:5f:64:91:14:cd:11:a4:e2:bc:fb:
         74:24:8f:65:dc:f3:f9:e0:4f:a8:15:35:6a:16:38:ed:73:b7:
         79:12:55:e3:ef:1e:f2:eb:2d:f7:ec:9d:e5:0d:8a:92:23:10:
         0f:31:f9:37:ae:c1:2b:0d:a4:2e:11:ba:87:ea:69:5a:09:80:
         57:1a:4c:53
-----BEGIN CERTIFICATE-----
MIIGPjCCBSigAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZlwHw6YwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMTAwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJGQy
NjdjZmQwLThjMTctNDlhOS1hMWZiLTNhOWE1MDk5MTg5NjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAM47fTVBbmKV9Zw4Mn3VZw3875irIhYxwberwyR5
Z5uvWetqD3bgDi9wmkG7Bt6iMZVGq3F17nGbUVip4iDya05Tc5X+sbmc8Bz0no60
7+ZSqEbKcIEweBSjTfXST4zISzjeEYB896UCIiz74GNyzsA/H2TiVNidmZ87ODbC
p5Un7xkqLgAZ1xzqiqnpbL9cmFc4QYLJPLIvwAlZvIa8aPJ0aKH8fRYUCmKWd66B
XjRHeXovSzUIngEPFiziPtz0C5rx3qHzggwuv0mEKiDCmlWP9x10MXhgmxZ+2BJj
4o4tw0ifl2nfUcUgLsCwAAAPtj2QkkG/vUZo2qqlnuJNytUCAwEAAaOCA1QwggNQ
MB0GA1UdDgQWBBTNzZnT6Q8vA5+GTgyXWh86Oj9uEzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjL2M4ZThhYmUzLTI3NWEtMzU2
Ny05ODgzLWQyOTUxODE1YTJhYy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATbIMFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQELA4IB
AQAuirAsPr9pnmolBvI4i/XqPkPFEROTuwn2im6nrzVbCNPya2IKaP92qQ99ydev
fvNsuiz3prI6sO6Z1EbWS03bGvubTNN7vJtb+Xudq8a2bnKLK8YX26l2K/61Dd7S
QDFDcIGi0JCcBI5k3wt1oEYWm02Q+n8zGzpsXmgG26jQYKTmVz2JApvBs7KVLOks
xmeWgcWhfydhXbBSZqsjIyAw/jrHw/azyyU6suGgDcfit9lhrlVDcQ3VgKDcf19k
kRTNEaTivPt0JI9l3PP54E+oFTVqFjjtc7d5ElXj7x7y6y337J3lDYqSIxAPMfk3
rsErDaQuEbqH6mlaCYBXGkxT
-----END CERTIFICATE-----