Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5d549907-aa2b-3771-b6aa-2d07348c952b.roa
File:                     5d549907-aa2b-3771-b6aa-2d07348c952b.roa (raw, json)
Hash identifier:          K4NJAQVEiBVt3Qfd2f0YegPpcem4/QNhtYN8PHWg9zw=
Subject key identifier:   DD:DF:E8:ED:01:22:E7:6F:3B:09:20:E0:56:BC:2E:5D:4D:A7:7C:EF
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665C06C1E7
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5d549907-aa2b-3771-b6aa-2d07348c952b.roa
Signing time:             Wed 10 Oct 2018 03:30:38 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        18.246.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:06:c1:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=b078b546-b37c-4327-b2ce-2ec48b3bb3ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:98:68:3d:cb:0a:18:e3:bb:05:7e:65:65:69:
                    26:cf:75:94:33:4f:89:b9:1c:35:26:03:dc:85:60:
                    25:4b:42:84:a5:2f:08:9d:b7:01:99:16:7a:a2:07:
                    1f:60:23:e3:e6:96:b3:6d:ef:32:c4:84:cb:6a:42:
                    59:f9:25:2e:fd:f2:8f:d2:b1:aa:3d:95:e1:1d:db:
                    4d:35:69:77:aa:0a:d3:9b:11:cc:27:5b:b1:0d:52:
                    ce:53:61:f5:e4:cb:d7:ab:75:a3:51:f2:ad:89:c5:
                    f9:fd:a3:a7:2f:8d:3e:a2:f6:a4:ee:59:a6:e6:e8:
                    cc:75:b0:9f:b9:a3:7e:70:cb:cb:53:3d:39:4a:b1:
                    d5:6d:1f:91:9b:84:6c:80:d2:fd:24:3b:32:67:03:
                    b1:ae:84:13:78:b5:84:51:01:fe:8c:ce:94:71:2b:
                    09:d5:c7:cb:98:29:79:15:c4:31:f3:00:79:da:5f:
                    03:5a:c6:e9:59:ea:5b:71:ce:f7:28:87:e2:9d:8c:
                    7e:d2:3d:84:9f:d1:89:43:3f:92:62:92:53:ab:e5:
                    ef:05:1e:2b:97:72:e9:84:ae:8f:a4:e2:ee:de:4f:
                    5f:cd:af:79:a5:37:e7:16:04:41:6d:57:08:d6:78:
                    92:bc:bf:68:64:9d:5e:93:47:e5:2d:27:62:4d:cf:
                    9b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DF:E8:ED:01:22:E7:6F:3B:09:20:E0:56:BC:2E:5D:4D:A7:7C:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5d549907-aa2b-3771-b6aa-2d07348c952b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.246.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:b2:c7:86:36:d3:01:22:a6:b0:93:35:6f:5f:4b:60:65:10:
         59:4e:d0:3e:b7:19:fd:a2:4b:6a:08:58:28:07:bb:fe:fe:55:
         71:7b:ca:c6:ea:95:62:4e:1c:b2:86:28:e3:16:5a:d2:e6:61:
         02:bb:dd:c1:fb:37:4b:60:76:33:1c:7c:74:a6:59:8c:23:24:
         28:b6:11:0e:99:bc:7c:27:62:5c:ec:79:e7:80:6e:36:35:da:
         0d:65:79:0b:9e:fc:e5:6a:e4:a2:92:69:b2:a0:89:6a:ac:a1:
         3a:21:0b:06:47:1f:df:60:2b:b6:b6:5d:77:f2:05:3e:66:84:
         d4:6e:1a:35:7f:3b:be:99:16:cf:5c:c8:5e:c1:4c:72:9b:81:
         75:c7:d7:45:23:ad:dd:8b:27:67:14:27:22:76:db:d7:36:9f:
         5f:b6:95:5c:75:f8:a5:9f:76:07:9e:e5:2d:e9:72:9c:fd:3f:
         47:04:46:e0:6c:8a:e7:e1:5a:89:89:62:76:21:64:2e:e3:48:
         4c:9d:a1:4c:4d:51:49:6d:f0:5a:c2:2e:55:88:1a:11:86:e9:
         ed:62:10:4b:3a:d1:a8:a5:6c:e3:66:b5:b1:c0:81:3d:6e:b8:
         dd:aa:06:99:9e:f9:84:c0:be:72:d5:58:7d:6a:ba:6f:b3:8d:
         60:88:0a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----