Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3e108bcb-7a3d-300a-8c8f-98be7e838263.roa
File:                     3e108bcb-7a3d-300a-8c8f-98be7e838263.roa (raw, json)
Hash identifier:          LTbqD1narwyWf20zPj8+UqBYAq1DoQsUXbAzrAQndNo=
Subject key identifier:   64:E1:82:C7:91:A1:B2:F4:08:13:A3:BC:A8:50:25:2C:B3:9C:7E:0B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665D255385
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3e108bcb-7a3d-300a-8c8f-98be7e838263.roa
Signing time:             Wed 10 Oct 2018 08:43:39 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.231.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5d:25:53:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=b36de3a2-4647-4e7d-a182-1e32d68681ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:00:00:55:72:e4:2f:b7:54:b4:27:2c:b3:c6:
                    51:57:3e:97:63:b4:3e:6a:b0:6a:44:aa:4e:9e:de:
                    19:28:ab:fc:0b:05:e8:51:a8:51:7d:6d:55:45:a7:
                    d7:ae:68:19:32:1f:d7:03:c5:5c:dd:4f:bb:41:96:
                    78:54:f3:bb:e3:8d:0b:f6:ac:6b:dd:f4:6c:98:cc:
                    78:2c:50:4a:a6:56:1b:bd:54:04:dc:11:06:25:5b:
                    e3:3f:98:be:5b:24:65:a3:12:40:81:d4:e5:88:69:
                    24:7f:de:af:cd:56:06:5c:80:df:e7:59:ff:21:43:
                    e9:65:d7:6e:f5:9f:c5:fb:39:ca:bf:25:80:80:fd:
                    69:b8:5f:7a:65:74:b7:1a:a7:3f:73:81:d1:a1:5a:
                    bd:18:84:2f:db:cf:17:12:fa:c9:42:6b:80:5d:ea:
                    e8:a1:4d:ff:b1:dd:7f:89:ee:1e:8b:b0:da:ad:4f:
                    f8:0f:d2:9e:2e:70:42:2c:14:31:79:94:97:20:ac:
                    7d:a0:3f:b6:bd:da:f3:af:23:bf:13:f2:5b:3a:a0:
                    ae:9d:49:6b:ea:a9:d0:5b:2b:b5:01:cb:c2:9c:f2:
                    2f:60:a3:46:1d:21:fb:fc:4d:e2:7c:5f:58:f1:8e:
                    d3:f7:a9:df:35:3a:c7:f6:43:90:87:d2:62:b7:13:
                    6a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E1:82:C7:91:A1:B2:F4:08:13:A3:BC:A8:50:25:2C:B3:9C:7E:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3e108bcb-7a3d-300a-8c8f-98be7e838263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.231.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:f8:d2:2f:9f:43:1c:66:14:96:f1:26:ad:2c:e7:0c:6f:fb:
         80:88:7a:47:be:d9:b8:73:68:ac:08:50:ae:c3:c8:aa:5f:71:
         ca:ed:60:8a:02:93:e2:64:8b:7b:55:cf:d6:59:d7:f7:aa:b8:
         ba:0a:b9:f6:09:de:7a:2a:87:be:01:89:33:5a:c5:ce:c9:78:
         79:4d:91:d5:8a:16:a8:54:86:5d:43:85:6e:d3:a2:04:46:e0:
         fb:a4:3b:6f:8d:a8:fe:89:73:ce:09:d7:94:01:2b:28:72:59:
         43:f4:9f:3b:19:29:33:de:28:48:94:69:9d:40:c0:28:14:38:
         ed:d6:3a:7f:ce:cd:dc:95:5b:8d:ad:78:bc:27:b0:2d:46:15:
         53:41:f3:68:b8:f2:6e:8f:47:f2:c1:02:6e:f0:cd:d9:b7:6b:
         f8:cb:6f:69:4e:65:62:14:d7:12:f5:24:e5:47:78:0d:61:26:
         a9:bd:a1:3c:0a:d1:13:ef:c0:cd:95:0d:00:34:8d:b3:64:e0:
         8c:0a:9f:a7:ca:36:1f:7f:2b:b8:20:90:f0:9b:a6:26:c1:ae:
         bb:28:b1:a5:0b:6e:b5:39:56:5e:a5:c7:93:c7:e9:09:8a:87:
         b7:0e:51:4d:28:a3:dc:49:c9:25:3d:66:77:3b:83:01:65:cf:
         c7:d8:80:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----