Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5691f524-3f25-3ce2-b002-54d7ccf371da.roa
File:                     5691f524-3f25-3ce2-b002-54d7ccf371da.roa (raw, json)
Hash identifier:          nzev71oU+O8qYaHXSYeJ87eyXyCbwWLhAthHOwi5HAc=
Subject key identifier:   01:32:CB:66:25:20:E7:05:9E:6A:71:EB:B7:46:E4:4C:90:1A:E2:ED
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665B694CD7
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5691f524-3f25-3ce2-b002-54d7ccf371da.roa
Signing time:             Wed 10 Oct 2018 00:38:39 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.92.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5b:69:4c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=3e6c63ba-40d2-45f7-b0ae-39b4ea2d1a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f8:c7:90:ff:da:f8:d4:9c:db:39:3a:e0:33:
                    a5:60:17:a9:d6:6a:74:d9:61:2c:4f:87:91:3f:6f:
                    79:1d:75:ec:78:f3:ce:13:3f:70:36:d6:1e:e3:62:
                    14:a6:c5:c4:91:9d:1a:67:05:8e:e5:07:ac:27:54:
                    bd:5d:f7:32:6f:2b:42:d8:4d:29:9e:f0:63:20:81:
                    54:32:80:12:7b:fa:49:00:45:bc:04:78:c8:2d:3c:
                    cd:1a:25:df:48:81:20:f9:69:fd:ad:6a:3f:9e:26:
                    ec:d2:fc:45:c8:40:0f:71:53:f7:4c:c6:b7:87:18:
                    35:8a:20:b3:f3:de:08:07:ec:ad:04:71:65:d1:7c:
                    e9:a5:06:8e:97:ad:8c:e9:24:0f:b7:b2:a3:cb:9a:
                    c9:de:5b:16:40:0a:3f:28:2b:24:f9:db:54:bd:39:
                    7e:6a:fa:56:22:c7:6f:bb:87:2e:2d:b0:28:32:cc:
                    c0:5e:44:b0:e5:96:7a:7e:b1:33:45:6a:00:7b:95:
                    7b:5f:50:89:b6:18:76:42:8e:db:22:c0:3c:7f:47:
                    aa:02:9a:51:3a:d9:4b:e3:ab:08:72:d0:56:78:90:
                    9f:50:1f:5a:10:72:23:a1:b5:04:77:39:e1:49:74:
                    12:f4:89:67:58:f8:03:90:6c:9c:bd:80:2b:36:f5:
                    b9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:32:CB:66:25:20:E7:05:9E:6A:71:EB:B7:46:E4:4C:90:1A:E2:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5691f524-3f25-3ce2-b002-54d7ccf371da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.92.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:f7:f5:8c:60:17:de:cb:33:22:e1:4d:51:8d:dd:aa:09:d9:
         05:cf:87:16:e2:c3:5c:db:5c:19:6a:fe:a4:61:cf:91:96:6f:
         76:6b:6d:cc:3c:e5:05:e3:d8:6a:c7:45:78:e8:3e:6f:7b:be:
         36:e1:2e:3c:17:67:e9:e4:bf:9d:11:38:22:49:23:9e:fa:76:
         45:18:be:26:05:2f:2f:23:a4:f8:da:9d:15:eb:e6:96:2f:fa:
         63:07:6d:27:7b:ac:a2:9d:b2:15:db:bb:0b:c7:b4:45:82:ea:
         56:91:43:6a:58:34:03:55:19:6b:a3:72:a3:f5:b9:0b:8e:e0:
         8c:ed:74:b1:ba:f3:9c:a0:2a:ba:58:a2:c3:7a:3c:9a:e3:d3:
         bc:ae:92:6b:2a:b0:bf:79:b1:05:dd:23:7b:ca:5d:17:08:c6:
         33:76:a5:06:6d:92:1e:f8:d3:8e:23:4b:48:36:90:be:c0:31:
         2b:ce:ca:da:40:04:ae:36:e7:df:bc:64:61:99:c4:5e:f9:e5:
         cc:fa:b6:ad:89:30:a5:24:b1:5a:91:84:c5:e9:47:23:91:61:
         2f:53:c7:6c:33:25:70:3d:2a:be:4d:10:a4:bb:f6:12:cb:26:
         4d:85:8d:a8:d9:cb:9b:44:7d:1e:0e:99:8e:51:18:5a:a0:a9:
         88:7e:ba:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----