Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7e5777ea-4293-3b88-acb5-36829652c0ad.roa
File:                     7e5777ea-4293-3b88-acb5-36829652c0ad.roa (raw, json)
Hash identifier:          iYiLOJnVA7bUKUvUetOMXmqoBsPBhI2FrSKJ8Y7LisU=
Subject key identifier:   CA:6E:91:FC:D5:AF:0C:39:B6:B1:FA:44:AA:C2:D1:1A:D3:9A:50:91
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16694465427
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7e5777ea-4293-3b88-acb5-36829652c0ad.roa
Signing time:             Sun 21 Oct 2018 01:38:49 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.252.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:94:46:54:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=b5cf01ce-ae90-4f34-bc5c-3437d7848b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:34:9d:23:db:ca:63:6d:8a:67:bf:7b:85:78:
                    72:09:a8:92:f2:a2:20:2c:85:a1:90:b2:ff:9f:97:
                    34:a9:35:01:9b:2b:81:78:76:0e:4e:ae:94:7c:d4:
                    7f:cf:4f:e9:9e:5c:b3:46:68:e2:5d:b8:3f:bf:1e:
                    fa:a6:01:f6:17:fd:66:fc:9f:cc:51:98:d2:6c:90:
                    43:87:67:64:af:83:7a:21:76:b5:89:3b:20:d8:ea:
                    fb:6d:de:7a:27:7f:3b:66:00:6f:c3:cb:b5:e1:35:
                    db:60:ad:a5:5c:91:d4:df:3c:c6:86:ed:b4:c0:e0:
                    ab:85:d1:81:f1:8c:91:22:51:ee:d7:21:79:e3:fc:
                    f9:0c:f9:f0:36:2a:31:b8:59:2d:e9:a0:2c:b1:f3:
                    f8:86:7d:4b:a9:73:f7:6c:f5:2d:8d:47:29:62:3f:
                    6b:b5:3b:e1:24:57:4d:65:f0:1f:e8:27:40:21:bb:
                    da:dc:65:4a:df:6c:75:e1:d0:0a:f2:59:16:d9:1f:
                    96:ea:90:a5:c1:26:ba:9a:5b:d8:97:e9:32:5d:95:
                    e8:5d:50:91:e5:6d:89:b1:a0:c9:26:03:a2:f1:be:
                    e9:d3:f2:e6:97:4e:46:27:4e:51:7f:e0:ab:55:51:
                    04:5a:a3:09:86:b4:b6:a5:fd:a1:eb:e1:97:99:5e:
                    03:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6E:91:FC:D5:AF:0C:39:B6:B1:FA:44:AA:C2:D1:1A:D3:9A:50:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7e5777ea-4293-3b88-acb5-36829652c0ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.252.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:c5:a3:b6:dc:99:e4:01:94:d0:57:0d:7f:20:f4:7a:96:bf:
         af:11:57:81:cb:23:f5:ae:6b:fb:1b:81:ba:1d:a3:8d:1a:0c:
         eb:a9:80:2e:c1:b7:3b:06:82:a3:1a:07:af:c0:c0:fc:11:a9:
         93:9e:99:b3:e1:f7:1c:2b:b8:74:43:34:f0:e5:94:6a:13:39:
         2a:c2:7b:02:05:ba:34:5b:7d:87:f8:ac:01:96:5b:c3:c8:34:
         11:27:57:08:a2:fc:cb:28:e5:ec:e0:d3:e9:de:6d:97:d4:2a:
         b0:18:62:43:99:90:54:82:50:7f:89:36:8f:3c:7e:c3:8b:01:
         fd:78:89:5d:0d:ef:f8:f5:cb:a0:40:b5:7f:75:17:2e:f6:28:
         40:a0:44:3c:f3:2c:3c:fe:e2:05:ce:6e:4e:aa:b9:8b:dd:1d:
         95:3d:af:d6:dc:1e:1b:27:64:d1:08:e9:ed:f1:ef:09:d5:09:
         1d:91:b6:98:1d:37:ee:78:9f:6f:b8:80:89:4a:28:90:f7:49:
         ce:c9:df:7c:aa:c5:04:1e:ca:55:e1:ab:cb:28:b9:87:8f:a8:
         a9:b1:79:1d:2b:21:a3:b9:3e:68:b9:0b:e3:44:ef:ce:6a:f8:
         15:b8:9b:9c:92:80:dc:ea:2c:09:3e:25:cc:ba:3f:a4:ed:eb:
         c1:8c:a8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----