Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/387cf851-7281-364f-bd8a-717606fb696b.roa
File:                     387cf851-7281-364f-bd8a-717606fb696b.roa (raw, json)
Hash identifier:          ym9sE24eV5Ai4DLzJgnn9b4enk1b0L8f3U3MeNyDxzk=
Subject key identifier:   32:70:C8:5C:51:3B:81:91:86:5B:51:FD:8C:96:7F:EE:16:10:A9:87
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665C2EB0B4
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/387cf851-7281-364f-bd8a-717606fb696b.roa
Signing time:             Wed 10 Oct 2018 04:14:15 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.92.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:2e:b0:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=0dcfb165-fd5a-4038-959d-d2ec227c6d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:68:4a:82:04:e0:de:b8:db:47:5b:84:7d:
                    5a:cb:f0:9e:c9:02:4e:f6:53:c3:12:2a:72:0d:5e:
                    50:31:2d:38:3e:51:19:01:cf:ff:54:4a:5f:1f:cd:
                    11:ff:0a:7c:db:ec:69:73:8c:19:a7:ea:9f:03:97:
                    ec:16:4b:da:9d:5e:f0:4e:91:0a:f7:ce:38:17:2f:
                    06:84:f7:0d:a5:1e:7a:66:36:ca:10:1e:df:fb:cb:
                    60:dc:7c:08:0c:33:fd:39:d5:bd:94:2f:5a:25:1b:
                    4e:13:3f:ce:80:34:d5:cf:9e:51:cb:67:63:cf:79:
                    ce:a7:96:2a:d9:5e:ca:9d:d6:05:dd:e9:df:a8:1b:
                    c8:b1:84:f1:e7:e1:17:b5:59:55:3f:d3:77:7c:d3:
                    93:7b:71:5b:d8:8c:61:c0:c9:d8:1f:21:bd:2c:1b:
                    ef:7b:31:61:31:d4:86:e0:e8:be:5e:73:70:d4:95:
                    a1:ed:31:4e:2a:a4:8f:47:5b:d6:76:60:1e:8e:f1:
                    d8:98:a4:b9:50:d5:e7:00:19:60:73:98:35:99:78:
                    7e:1c:21:ab:7b:23:8b:1d:ac:7c:e5:2f:10:18:f4:
                    97:48:a3:5d:b5:02:62:43:93:aa:a0:bd:eb:aa:e1:
                    9d:78:f1:7d:d6:4d:57:5e:3c:17:95:41:8c:1c:02:
                    ec:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:70:C8:5C:51:3B:81:91:86:5B:51:FD:8C:96:7F:EE:16:10:A9:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/387cf851-7281-364f-bd8a-717606fb696b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.92.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:62:19:29:be:20:0e:24:e9:73:5f:73:c3:fa:b8:a4:1e:aa:
         cd:d5:69:1a:da:4d:18:4f:bd:83:85:50:44:6b:83:79:57:bf:
         81:41:eb:a8:ec:20:30:54:ef:d8:14:cb:e5:ed:e2:4b:63:15:
         f1:88:13:46:d0:cd:0f:6b:fd:53:e6:49:73:81:c3:48:4f:af:
         8b:2d:89:b6:1e:97:e0:0f:0f:6a:98:7a:fe:11:25:3e:48:fc:
         71:05:e1:b5:be:20:c2:98:00:63:ce:f3:b3:0f:bc:cc:c7:e4:
         0f:dc:c1:58:5e:57:96:81:72:38:1a:85:2e:47:40:f5:11:10:
         cc:23:f2:1b:98:c9:99:5e:52:fc:31:49:f8:9f:79:8c:21:c1:
         c2:80:9e:97:41:fe:a6:43:c2:f5:7b:f7:52:a8:4c:a7:c8:2e:
         5b:a1:80:7e:a4:bb:f3:89:bd:f4:bb:15:eb:36:4e:be:3a:7a:
         01:2e:5c:5c:c6:d5:dd:fa:42:80:5c:38:06:62:11:57:49:38:
         41:36:b2:84:ee:f2:1a:7d:a7:cf:c5:d9:4c:79:d0:5a:5b:51:
         b6:81:9b:3f:22:15:b0:7b:62:7d:97:d0:d6:44:24:ff:f0:27:
         8e:d6:2a:73:d3:1f:f0:d7:98:9c:ae:db:cc:48:1c:b2:22:28:
         7d:46:9d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----