Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b2cf01e-626d-3bc0-a773-efb0e146bc8d.roa
File:                     0b2cf01e-626d-3bc0-a773-efb0e146bc8d.roa (raw, json)
Hash identifier:          IIilxr+wM8qyiyJboPHbMZLGKpaYDbASkhkrcl2PbWM=
Subject key identifier:   8E:36:83:0F:1A:0A:06:99:BF:F1:CD:00:04:D0:E5:F0:BF:D7:C7:75
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1664BD0F44D
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b2cf01e-626d-3bc0-a773-efb0e146bc8d.roa
Signing time:             Sat 06 Oct 2018 23:57:57 +0000
ROA not before:           Sat 06 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.12.0.0/15 maxlen: 15

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:4b:d0:f4:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  6 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=3872f08a-4b80-4730-8c43-723a10868f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a8:64:3d:11:7a:d6:6a:e9:e9:93:01:28:2e:
                    aa:61:8d:55:0a:25:71:cc:e2:f7:ae:eb:6f:6a:e2:
                    36:eb:92:ec:79:dd:80:8d:5f:90:1d:dd:81:fa:b4:
                    0e:84:0e:64:9e:69:2e:36:04:82:01:f5:81:c7:00:
                    40:f1:11:c7:98:fb:25:2a:cc:30:9a:50:70:6b:fb:
                    c8:f5:e5:8d:b2:b0:ca:83:df:94:3f:d5:d9:ef:2d:
                    11:24:89:95:ae:52:2a:ad:40:42:2b:38:9e:ac:50:
                    7d:4b:9c:3e:18:a4:31:95:c7:5c:f4:94:4c:39:82:
                    b0:a3:e1:17:f0:92:64:0b:23:bf:42:3e:f3:69:2b:
                    56:b7:d3:3a:bd:e7:b1:d6:81:63:e5:81:e7:ad:2b:
                    ff:98:00:62:23:a7:5d:29:a7:f3:92:01:20:e7:f4:
                    37:c6:52:03:5f:bb:a5:41:8e:89:a8:f2:8a:ca:ce:
                    6a:d1:02:ab:bf:7f:8d:c8:fc:67:1b:a5:e3:fd:c2:
                    1c:1c:88:e0:54:e8:a1:dc:6b:57:2c:5a:eb:1e:e9:
                    94:2f:1a:41:52:7c:5f:6d:16:ed:bf:59:f1:15:9c:
                    21:6c:e0:83:0a:8b:c5:45:23:0e:f3:6a:72:62:60:
                    41:00:fc:a2:38:6e:67:3d:d4:e2:a7:25:5a:53:ee:
                    37:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:36:83:0F:1A:0A:06:99:BF:F1:CD:00:04:D0:E5:F0:BF:D7:C7:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b2cf01e-626d-3bc0-a773-efb0e146bc8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.12.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:39:48:bb:5b:a3:c8:f5:0b:78:af:4e:2d:5d:45:d1:f9:8e:
         fc:e7:a8:77:ee:fc:30:34:bd:b2:e0:06:c7:c9:31:59:68:74:
         90:8b:1d:99:c5:38:4b:34:0a:e4:7d:d1:df:0a:02:4b:f5:ed:
         f6:1f:d8:40:14:72:7f:d1:d8:7f:f7:fe:e1:49:f0:a5:80:5e:
         82:08:1c:fa:35:96:5d:1c:1f:52:73:e2:0e:8b:3a:cd:f4:5a:
         84:ca:0e:fe:8b:d2:64:47:82:ca:63:55:bb:6f:3a:90:8c:ae:
         c0:e6:36:b8:3d:83:00:2a:96:5c:e8:75:2e:55:b7:39:85:6d:
         ba:1d:ab:8d:f2:a1:a4:a3:87:5e:e6:79:c0:61:88:6f:78:83:
         05:d9:c0:e5:3e:4b:3d:2f:4b:11:8f:d8:56:87:9a:6f:1d:fc:
         f3:52:98:10:9d:b9:43:f0:3a:12:37:d3:cc:f2:cb:5c:e4:55:
         08:c2:07:41:59:d2:b8:d9:e1:3c:89:ec:46:a8:ea:08:ad:3e:
         a0:4e:eb:aa:19:0f:14:42:30:20:9c:8c:a4:09:8f:56:04:25:
         34:64:2a:d8:78:df:68:f4:90:62:f2:45:26:2e:77:60:86:5e:
         77:19:36:8d:bb:90:44:e1:85:d8:5d:ee:10:14:39:6e:0a:4f:
         ad:e3:e9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----