Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64619d5b-b891-3649-b919-d624b52acc0d.roa
File:                     64619d5b-b891-3649-b919-d624b52acc0d.roa (raw, json)
Hash identifier:          MrJM7wRmg/tSrzUJTuGP8Vis297WOOCpKNg2Ek9KnxQ=
Subject key identifier:   7D:CB:D2:33:B4:CC:52:92:C3:A3:9F:A0:53:2A:3D:14:4F:5B:B9:56
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C4696B61
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64619d5b-b891-3649-b919-d624b52acc0d.roa
Signing time:             Wed 19 Dec 2018 03:01:42 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.203.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:69:6b:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=70a821ae-7417-49a4-a1fc-003871665a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2d:f9:15:b5:6e:4a:70:09:47:ac:d1:89:85:
                    33:36:19:71:8b:fc:7f:76:ff:53:48:ec:4d:44:6d:
                    9d:6f:00:b1:a5:74:49:76:d5:db:19:23:35:6e:eb:
                    6f:c0:fc:c4:2f:ad:58:53:b9:90:1e:54:66:d1:f6:
                    9a:93:d4:ee:7a:4f:0a:d6:f5:fa:63:b0:48:19:0f:
                    90:ee:f9:f0:8f:20:6c:9d:0e:45:b3:48:9d:6b:42:
                    c4:f6:0f:56:29:db:e1:02:83:fe:e3:19:1f:0a:06:
                    05:13:f1:5d:43:93:6c:61:93:69:8e:40:8b:55:c1:
                    4e:38:b8:37:51:70:76:78:90:f8:06:74:fd:c1:13:
                    f0:5b:75:9f:bd:17:b3:0f:a1:55:f8:3d:1b:57:11:
                    70:46:34:6e:1a:08:af:91:39:fe:27:ac:06:da:ba:
                    c8:dd:42:57:9a:6f:c1:d0:c5:78:02:b5:7f:e7:82:
                    69:4d:83:e2:0d:fd:ae:7e:76:57:af:fb:0f:85:7a:
                    ee:78:f7:ed:92:e3:fc:b3:7f:0b:fe:a4:04:88:13:
                    40:97:89:6e:6e:88:69:42:9b:42:87:7a:ec:1a:a1:
                    5c:31:e1:74:cf:3f:6f:bd:eb:0e:81:86:dd:11:f9:
                    b0:ea:b4:50:98:bd:77:fa:d4:2e:69:c9:72:ab:61:
                    bb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CB:D2:33:B4:CC:52:92:C3:A3:9F:A0:53:2A:3D:14:4F:5B:B9:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64619d5b-b891-3649-b919-d624b52acc0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:d1:b0:5d:64:d5:05:8d:b6:9c:62:de:05:36:21:2a:9e:c0:
         0b:27:ac:6f:df:c4:ab:28:02:2c:18:da:8e:ae:a0:0f:08:e3:
         00:5c:f1:cb:ce:eb:8a:a0:bd:79:d2:36:3a:55:4c:67:0c:49:
         54:cf:7d:1e:23:3b:69:3c:8d:6a:9e:72:5b:bc:33:b1:3c:8d:
         dc:c7:90:d7:1e:c9:04:e3:2d:50:5b:a3:84:03:c5:f0:91:d3:
         f1:3f:9c:24:e9:3f:02:20:4d:a8:3b:85:9b:62:33:46:24:2f:
         f3:9e:2f:99:90:64:f5:d2:2c:80:55:ea:64:d4:03:67:1e:a7:
         a9:3b:ac:15:2f:04:3c:34:74:1d:c9:75:d8:cb:11:6c:a9:7f:
         5a:4f:b6:6f:49:4a:d1:96:fc:ee:6c:f1:2b:d9:5f:4a:16:f0:
         bf:15:75:ab:cc:03:7a:0d:bc:19:ff:e1:62:9d:bc:d9:15:04:
         50:a2:18:d1:ca:a3:ce:3a:d1:e9:e7:f2:e0:ec:24:4c:d7:66:
         cf:70:bc:83:43:70:83:5c:54:78:f1:4f:7d:4e:71:6a:9b:98:
         64:ab:f8:da:2d:cb:79:92:6a:4d:19:78:4b:d6:d7:25:99:4c:
         0e:c8:7b:f3:b0:47:a7:1d:6f:9a:6b:74:7a:d3:b0:df:1d:ab:
         f2:1b:d1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----