Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/54b6c956-1650-3e70-a796-3e0e781f06bf.roa
File:                     54b6c956-1650-3e70-a796-3e0e781f06bf.roa (raw, json)
Hash identifier:          ew6n7LNsGBM0NHtGf+GPeWBJeblwWUqV0n9YjLadFP8=
Subject key identifier:   D4:2E:EF:14:44:89:C9:95:88:2B:C0:96:45:01:81:12:83:93:35:55
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC166944542B1
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/54b6c956-1650-3e70-a796-3e0e781f06bf.roa
Signing time:             Sun 21 Oct 2018 01:37:39 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        13.236.0.0/14 maxlen: 14

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:94:45:42:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=2ec9bec1-36b7-470e-95c5-9834a8af5250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:02:71:a6:83:50:a0:4e:e5:10:71:00:8b:f6:
                    c4:88:6c:0c:0f:59:f0:fe:bf:cb:86:b4:a3:20:bd:
                    e2:04:1e:ee:f8:0a:03:74:1a:7a:bd:ec:6d:50:39:
                    21:bd:95:fe:ec:f3:cd:69:f5:ea:52:88:5a:04:9b:
                    c8:a3:e8:7c:2d:bc:6d:44:59:a0:81:8e:6e:31:75:
                    1e:78:e9:0b:bb:9e:30:e9:da:d3:06:9c:79:d6:a7:
                    ec:0b:f4:98:ee:85:fc:c3:e7:af:9b:82:be:34:a3:
                    fc:85:20:2f:3b:a2:dd:83:a2:fb:a8:10:ad:dd:03:
                    ae:21:94:d6:5f:b2:43:32:dd:8b:5c:d0:04:51:c1:
                    be:98:f2:87:fb:00:f4:60:55:f6:77:98:0d:2b:f7:
                    c3:09:52:39:a9:33:09:ae:34:21:3c:43:b8:de:48:
                    65:84:9d:bc:b9:a6:96:dd:ec:1e:e8:f6:fb:7d:d8:
                    3d:58:85:c1:a9:d5:b7:13:c8:f7:6f:e4:32:69:6e:
                    b3:4c:d1:98:e8:16:b2:43:ce:cd:2e:38:08:74:5e:
                    2e:0d:ea:a8:45:0f:99:c8:0c:1e:d4:96:c4:fa:ff:
                    26:db:fd:de:33:78:b3:21:22:36:44:82:e7:08:33:
                    71:cd:3f:3c:f5:11:86:dd:af:8f:cb:85:ea:c2:18:
                    dc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2E:EF:14:44:89:C9:95:88:2B:C0:96:45:01:81:12:83:93:35:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/54b6c956-1650-3e70-a796-3e0e781f06bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.236.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:54:02:5f:d1:ba:9e:12:56:3b:09:a0:67:f6:ca:a9:1f:8a:
         5c:6f:fe:84:6e:69:0b:dc:7f:ca:69:5d:75:ae:22:e1:c2:2b:
         14:f7:55:03:59:76:1d:23:64:75:6f:6c:39:ab:65:70:1d:fd:
         a1:18:c8:b8:4d:bc:21:c7:a9:71:8f:90:43:44:2c:e0:ba:12:
         31:28:11:38:a8:03:05:2e:08:ed:5d:56:c8:d6:3d:5e:70:fa:
         c3:c7:2f:97:28:4e:98:1b:c0:90:ba:bd:20:cf:83:75:6a:6f:
         16:9d:52:1b:07:37:d4:48:06:a2:51:c4:ef:a8:0e:7c:aa:c7:
         66:d4:ef:e8:92:da:78:27:16:46:46:3f:1b:ad:65:f4:d3:55:
         f8:28:7b:46:89:56:8e:85:81:1c:d7:80:96:45:72:e1:5e:af:
         bb:f5:a9:75:7c:05:c8:17:df:8f:ef:13:72:39:35:66:28:29:
         4c:d7:53:77:31:de:d5:52:c8:5f:fb:2c:c1:4b:d2:ff:b0:ec:
         2f:1a:c4:f0:c2:d6:0f:29:2a:88:81:c9:04:81:c8:e0:36:bd:
         15:ff:c8:73:29:13:ef:69:4e:2a:12:12:a7:e5:53:93:0e:89:
         4d:1a:2d:d1:83:fc:06:33:cf:96:1d:8a:40:ce:e8:c7:9b:ee:
         82:dd:83:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----