Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/39a06532-09b4-3ce0-98f1-dfda1bf06bdf.roa
File:                     39a06532-09b4-3ce0-98f1-dfda1bf06bdf.roa (raw, json)
Hash identifier:          Csjpf2Y79Y4yxx++3Kb/vyUT4wKwPqDIAo7ONroMufo=
Subject key identifier:   B2:EB:EC:9B:ED:2E:8B:8E:54:8E:BC:16:FF:D0:A9:9F:80:65:38:4F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1664BC1C052
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/39a06532-09b4-3ce0-98f1-dfda1bf06bdf.roa
Signing time:             Sat 06 Oct 2018 23:41:20 +0000
ROA not before:           Sat 06 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        35.160.0.0/13 maxlen: 13

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:4b:c1:c0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  6 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=9ed5c1da-4070-4c17-b8fd-87bc82a342bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ae:ef:be:1f:fc:e4:ef:87:32:cc:09:02:7b:
                    0e:d7:dd:d2:72:f0:ac:12:b0:7f:16:a0:17:e6:41:
                    2f:91:65:9a:ff:91:9b:76:ca:b3:f1:24:b1:73:ff:
                    ab:0a:a7:6f:4c:86:0a:9c:b0:49:e3:39:37:17:2b:
                    23:93:1c:1b:bd:69:ff:91:ee:94:2d:f8:ee:b5:41:
                    d0:60:bc:b7:c6:86:75:9d:43:fa:70:fe:bb:39:63:
                    51:15:6e:c4:3b:c5:63:bb:ae:1c:3d:0b:3c:ed:bd:
                    6a:f8:3e:76:fc:26:7c:e4:49:d4:d4:53:73:11:a4:
                    3e:6c:b8:c3:4b:74:e0:ef:b0:02:c9:f9:69:9a:cc:
                    db:66:bd:7e:33:e3:74:55:0d:2f:96:46:94:bf:e4:
                    96:71:0e:6d:dd:ad:90:c9:b2:86:f2:8c:18:eb:59:
                    90:43:9f:ac:c1:48:9f:2d:a9:37:e2:d6:1e:bb:08:
                    d5:1b:5f:0e:65:dc:4b:8d:74:46:df:46:23:c0:0a:
                    05:34:e4:43:67:2d:e2:5e:47:fc:54:f7:e3:51:3b:
                    a9:1d:1b:30:8f:eb:0b:d3:4f:23:e0:2e:fe:a0:33:
                    b4:76:dd:75:49:5f:2b:b6:eb:d5:12:f0:bf:d6:63:
                    4b:6c:0f:4d:5b:ff:96:1f:d0:05:ef:0a:b1:fd:aa:
                    fc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:EB:EC:9B:ED:2E:8B:8E:54:8E:BC:16:FF:D0:A9:9F:80:65:38:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/39a06532-09b4-3ce0-98f1-dfda1bf06bdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.160.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:4d:52:4e:76:8c:7f:98:6a:39:dc:d6:9d:9f:b6:85:fd:cb:
         c2:6c:49:0e:82:99:b6:d9:d1:b1:38:2c:f2:77:da:0b:db:c9:
         57:1a:5e:7e:0d:d9:a5:a2:b6:25:b2:bd:b2:8b:be:1d:50:6e:
         ee:e1:50:dc:7c:16:51:78:ed:57:3b:43:c1:08:64:bd:46:c2:
         7b:f3:f5:1a:4a:78:7b:b7:05:aa:7e:72:1f:8c:da:12:f5:09:
         5c:d3:0c:a4:41:d4:f6:ca:c1:d5:f4:e8:5d:e0:cf:f0:5a:27:
         8d:e5:e1:46:e7:d9:d1:41:3d:12:2c:d9:74:5e:bf:37:d1:1a:
         03:df:7e:6b:c6:15:55:e8:63:c1:34:a2:63:2c:5d:81:a7:55:
         f1:10:31:5f:03:e4:b3:25:b5:04:25:15:b1:1a:5e:67:47:74:
         db:d2:39:8a:9d:fa:9c:33:e5:5b:07:93:38:fb:f8:e7:18:f3:
         ad:88:bd:5c:c5:21:4f:b7:99:c4:bd:df:6f:43:fe:d1:05:45:
         08:60:dd:1a:4f:be:cd:c7:dc:ac:14:c6:63:dd:f6:cb:35:e1:
         59:da:7e:98:9c:86:e2:ff:06:61:39:10:06:d8:b0:8f:b1:f4:
         20:70:89:1e:72:10:92:61:33:b4:f8:bc:b5:fa:7c:d4:f3:b3:
         e5:73:c6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----