Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3165c9a7-701f-3adc-aadd-3868b3c57283.roa
File:                     3165c9a7-701f-3adc-aadd-3868b3c57283.roa (raw, json)
Hash identifier:          lW3JLXoODuMlQh/j0VLRMN9ClEMbPCu+S3w/T7LQU9k=
Subject key identifier:   55:8C:C3:6E:82:60:7E:82:F9:5F:A5:FC:60:45:5A:C7:DC:A9:FE:F2
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C492B06F
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3165c9a7-701f-3adc-aadd-3868b3c57283.roa
Signing time:             Wed 19 Dec 2018 03:46:47 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.219.24.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:92:b0:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=5a329c1d-c57a-492a-9b4d-362e345bfb7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7e:f5:21:e1:97:e8:18:db:da:93:70:b3:23:
                    f6:82:26:d7:d7:b9:eb:3a:53:8d:4a:28:86:71:0e:
                    6a:0d:c6:86:3d:ea:90:cf:86:89:dd:65:6f:9d:86:
                    c2:a0:88:75:9d:77:da:aa:80:80:ea:48:a0:d8:5d:
                    09:19:f4:61:f6:83:0f:5c:85:06:24:09:e2:ac:f7:
                    02:c3:6a:5d:dc:09:9d:74:f1:e3:22:e9:f0:a9:7d:
                    db:b7:3f:18:56:c7:89:71:2e:15:aa:1e:27:6a:2f:
                    0c:73:72:1d:6c:16:7b:ef:0e:bc:75:13:02:75:16:
                    35:cb:4d:2f:bb:7d:a6:17:15:f1:ec:41:6a:96:48:
                    7e:33:ae:24:e7:09:79:fb:7b:29:7a:32:c7:31:e4:
                    d3:c5:23:6e:74:d2:9b:7a:4b:29:2f:82:86:68:ed:
                    bc:7d:90:10:63:a1:ce:1e:fa:10:fc:5b:65:dc:82:
                    db:9e:56:7a:30:af:cb:9f:3e:20:30:8e:93:8b:74:
                    bf:13:12:81:4d:17:43:28:5a:a1:af:97:5c:76:85:
                    56:17:0e:46:63:04:d5:95:68:0a:91:f6:f0:11:ee:
                    38:67:39:43:61:05:2c:8b:eb:9d:f0:21:94:06:9f:
                    95:3e:2b:a0:27:fc:fe:88:ba:35:7c:10:5d:01:bf:
                    d8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8C:C3:6E:82:60:7E:82:F9:5F:A5:FC:60:45:5A:C7:DC:A9:FE:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3165c9a7-701f-3adc-aadd-3868b3c57283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.219.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:b1:2c:32:50:29:95:d6:ac:46:20:59:c1:14:fd:44:57:6c:
         91:f6:fa:bc:2f:cb:d2:92:7b:16:76:9c:59:fc:03:e5:48:7f:
         99:bf:53:40:62:81:f2:5a:f6:00:97:4f:c4:4e:9f:0f:6e:3f:
         a4:08:73:b2:2e:a5:9c:b7:72:d7:28:86:d2:cf:b9:99:71:3c:
         c4:9d:52:d6:c0:17:40:9b:ce:7f:57:7c:2c:fc:dc:03:2d:e0:
         69:14:0a:07:42:4f:d8:67:b5:26:88:7a:3f:c1:c2:98:9d:02:
         8a:4a:a5:c6:38:dc:0a:43:ae:90:db:33:6f:17:bf:99:23:eb:
         9f:2a:b0:1e:c1:22:67:0a:d2:2b:07:6c:92:00:37:04:e0:2e:
         28:03:ec:6d:97:97:38:d7:46:51:3a:4b:25:01:43:36:d7:8d:
         47:8f:14:08:e7:77:61:5d:24:3b:fc:ca:df:f2:b8:33:b4:04:
         6f:f8:0e:3f:d9:85:c0:b6:04:78:ef:35:ff:93:6d:06:ab:83:
         7e:fa:95:0e:90:fc:00:18:30:26:83:1b:55:9f:4b:26:92:a3:
         e4:c5:44:43:46:ff:77:d9:43:cc:83:fc:c5:9c:2f:02:99:7d:
         24:d9:33:e7:02:b4:9a:61:9e:fe:d7:f5:88:ec:70:97:e5:f8:
         90:cd:c1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----