Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/84499a11-9765-310e-b6e2-e050f0ac758e.roa
File:                     84499a11-9765-310e-b6e2-e050f0ac758e.roa (raw, json)
Hash identifier:          4737wrv7AyQaQFLBPjBRsPZFLaBjoVp4bQQAotACn5A=
Subject key identifier:   AC:E8:9C:6C:85:7B:10:2A:1F:E2:A2:D8:93:0F:B6:AF:F8:5D:AD:2B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695521423
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/84499a11-9765-310e-b6e2-e050f0ac758e.roa
Signing time:             Sun 21 Oct 2018 06:31:16 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.94.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:52:14:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=c54f6b57-6ce9-41a7-ba23-cc8dee2cb35f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:77:8d:91:f3:3b:87:5d:98:94:9d:e0:c1:77:
                    44:74:2a:ba:3a:05:92:26:d4:c2:74:a0:9e:6c:93:
                    fc:15:2f:02:0b:0c:4d:7a:87:ff:75:8e:94:92:b0:
                    40:e3:26:0d:89:00:45:b3:20:78:d3:eb:d4:b2:1e:
                    4c:90:f8:b4:22:8e:97:24:04:9a:46:07:a4:c6:ee:
                    f6:00:02:8c:af:0b:81:09:42:58:70:d5:26:81:bc:
                    02:0f:84:99:39:29:4c:6e:c1:70:3c:45:8b:38:98:
                    c2:53:4c:e7:76:ba:e7:55:cc:b2:6b:f9:49:db:4b:
                    89:ea:8b:d5:82:56:5b:1a:7a:a0:c6:3f:6e:70:0f:
                    5a:4b:fb:ea:3a:87:24:00:26:e6:72:c5:91:bd:ff:
                    15:a9:11:dd:e6:d0:7b:e3:dc:70:69:e1:a6:0a:f5:
                    0e:2f:81:a0:33:14:ba:45:91:b9:8c:bd:cd:6b:4a:
                    3e:fb:36:b6:da:3f:d3:b7:52:50:83:f8:5c:6d:d5:
                    74:fc:81:9d:56:77:5e:ca:49:02:59:d7:d0:d5:5c:
                    1f:1c:7e:58:0f:1f:20:f0:4e:96:34:3f:e9:b5:46:
                    af:ba:60:22:a5:7c:58:24:e1:57:86:b0:f9:bd:6d:
                    50:f8:2b:19:c0:0d:10:c8:da:37:0a:77:31:b4:73:
                    ca:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E8:9C:6C:85:7B:10:2A:1F:E2:A2:D8:93:0F:B6:AF:F8:5D:AD:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/84499a11-9765-310e-b6e2-e050f0ac758e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.94.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:0e:8c:42:4d:75:86:c2:0c:f7:9e:37:cb:8c:5e:e7:2b:cf:
         f8:96:d2:ff:70:9e:dd:ab:49:18:c0:95:7f:51:0d:ba:73:05:
         69:cc:12:1b:44:f7:68:1f:e0:80:2c:5e:1b:e5:05:7d:a1:06:
         a9:8a:7c:e4:8c:67:14:df:54:7e:af:b5:4d:5b:b1:0d:85:b1:
         2f:44:57:47:43:37:7a:cc:d6:f9:44:1b:83:08:9f:96:e3:6c:
         57:dc:28:f4:42:06:7b:c3:e8:41:41:60:3f:f3:31:3a:ce:0c:
         20:00:8b:b3:35:66:37:0e:bf:19:f8:0d:51:57:97:6b:8f:c1:
         ec:d0:40:51:a3:40:53:e9:3e:58:06:8b:e5:2b:b7:b0:3f:82:
         19:a5:3f:54:d1:b4:49:27:c5:a2:d9:e3:2d:bf:97:94:06:c1:
         77:98:56:96:ea:35:ac:93:a4:b8:5a:8d:a1:d6:c4:04:ac:7a:
         ec:fb:ab:04:46:61:97:fc:48:f0:88:9c:68:71:d1:0c:d7:86:
         0b:a0:df:d8:c7:87:50:5b:f2:80:ef:ef:7a:32:34:6a:bb:56:
         18:61:bc:6c:d1:d5:4f:36:f4:d0:af:6e:b5:bc:ad:6e:49:a6:
         a1:1b:ad:b7:37:79:63:6b:dd:22:39:bd:07:e8:61:3a:4f:7d:
         46:52:e9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----