Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/29f80bc1-b547-3508-9bb9-1127e7abcaf0.roa
File:                     29f80bc1-b547-3508-9bb9-1127e7abcaf0.roa (raw, json)
Hash identifier:          6f/9zQqbn8I+3CvGNQtJgXIoLhPiwGac05p2FjPJEgs=
Subject key identifier:   74:71:A7:A7:D6:47:CB:68:38:CE:88:6C:6E:6B:DD:A4:88:52:BC:2D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16693C6D8FC
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/29f80bc1-b547-3508-9bb9-1127e7abcaf0.roa
Signing time:             Sat 20 Oct 2018 23:19:34 +0000
ROA not before:           Sat 20 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.60.32.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:93:c6:d8:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 20 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=ad8c2534-bda1-445e-b128-61f9d52abb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1e:a1:49:f4:df:ae:a7:bf:38:68:a8:88:31:
                    c6:c5:aa:99:52:55:87:e8:ed:da:bb:48:1e:8b:7f:
                    85:7d:bf:bc:f0:b0:87:18:ac:9c:9c:1a:cb:42:7e:
                    47:90:31:5e:42:0a:43:82:a8:81:20:b8:27:0c:ec:
                    0d:4b:f6:68:50:da:64:13:e4:29:3b:9c:c4:26:78:
                    81:c5:9f:ef:c2:ca:c3:86:ee:23:28:2a:3a:67:1f:
                    71:29:9b:44:e3:42:dc:47:da:0d:26:16:00:d7:00:
                    d0:33:2f:df:64:9b:23:bb:55:18:95:e1:d5:2e:45:
                    11:f4:f2:7d:96:3c:32:7a:72:56:55:51:c4:7f:75:
                    ec:82:66:36:18:88:5e:e4:fd:8e:3d:d9:fc:70:a5:
                    9e:c6:b8:b3:93:a1:bb:8d:69:6f:3a:b1:c1:ba:4e:
                    ff:b4:21:da:33:82:c8:e7:08:08:3d:ca:f7:fe:9c:
                    50:e9:7d:8a:90:10:a5:be:73:ad:87:b7:a1:3b:ca:
                    e4:eb:2a:6a:b4:24:2c:e3:b5:a3:fb:99:20:04:80:
                    1c:07:9d:bb:5a:98:8e:37:ce:02:8f:34:65:2f:58:
                    8d:19:da:d3:ed:b7:00:22:1b:f7:26:2f:0c:c4:22:
                    ac:f7:4d:d1:e7:46:a3:07:be:10:fd:c4:14:71:e3:
                    9c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:71:A7:A7:D6:47:CB:68:38:CE:88:6C:6E:6B:DD:A4:88:52:BC:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/29f80bc1-b547-3508-9bb9-1127e7abcaf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.60.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:e1:49:b2:ee:68:91:d7:b0:8a:a7:56:f2:3b:95:13:f8:47:
         f8:82:70:a1:36:c3:f2:bd:54:9c:ab:ac:60:8f:44:85:35:8d:
         95:40:4f:1d:59:30:85:4e:87:f5:60:5a:a2:38:62:f3:79:03:
         07:5d:4f:e5:ea:ea:b6:66:90:a5:4f:50:0b:89:83:fe:ed:b3:
         70:ec:d0:52:18:5a:02:d0:f1:96:0e:f5:26:98:50:f3:49:a9:
         7d:0c:09:d9:d6:b2:2e:e1:1e:23:31:d3:fb:29:42:6e:e9:52:
         99:ce:48:d5:bb:24:b6:e8:8b:7a:61:c8:a7:72:4e:54:9d:a5:
         d4:70:58:e5:ae:19:68:81:83:25:5e:d9:7a:30:eb:87:9a:80:
         34:76:66:60:41:76:9c:33:a4:7c:b4:d8:bc:59:c0:1b:3e:38:
         98:f4:9c:52:9e:c3:24:98:3a:20:99:34:2d:9a:27:01:e2:ce:
         82:c3:17:9d:06:bc:36:6c:3c:a3:4f:41:9b:ab:3f:90:08:01:
         8e:a9:16:9d:c1:8d:30:05:fe:d6:25:eb:f0:c0:74:90:c3:74:
         af:96:d3:8a:9b:b2:e8:39:34:7a:1d:0f:f1:d3:55:e8:5f:6f:
         a1:0b:f5:53:0e:4e:c5:62:6f:5f:e0:32:3a:4e:9f:32:78:5f:
         40:fd:00:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----