Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9db1dcaf-30fb-3423-8f73-696da8d5f380.roa
File:                     9db1dcaf-30fb-3423-8f73-696da8d5f380.roa (raw, json)
Hash identifier:          7cBNrNck1hsFpmaLh6Ypw7QUi9mzPGdsIFH2c/ZR+Vg=
Subject key identifier:   BE:61:95:49:F1:F9:35:45:27:1A:CC:1A:F5:05:4E:EE:DF:91:A5:04
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665CD4120A
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9db1dcaf-30fb-3423-8f73-696da8d5f380.roa
Signing time:             Wed 10 Oct 2018 07:14:54 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.76.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:d4:12:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=0f57cda2-6db4-43e3-9821-de6c1b48ce5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b0:6a:00:d3:1b:16:a1:a2:32:ed:fa:4d:52:
                    61:ea:45:83:34:f5:09:dc:a3:b9:d8:cb:0e:fe:fd:
                    48:57:33:3a:14:07:0c:67:75:e6:45:71:cd:fc:ce:
                    f4:43:20:57:ad:9c:80:6d:73:e2:dd:a0:0e:8c:74:
                    0b:b2:6a:6d:bb:e0:c4:c9:8f:69:17:83:4c:f3:21:
                    8b:eb:e4:66:ca:43:8e:50:03:9d:fd:1a:c5:1c:3e:
                    a5:81:4d:82:58:e2:71:de:85:62:3a:82:84:76:c0:
                    c4:e2:2a:1d:80:bc:f2:a3:fa:4b:2c:1f:77:9e:6d:
                    a9:a8:f4:ee:83:9c:80:ce:e6:ef:c1:44:cb:4d:99:
                    93:21:7a:7c:36:66:d7:ff:72:a3:94:92:18:a0:66:
                    4e:12:45:50:da:3d:98:a8:5e:55:15:10:ff:4f:b3:
                    ca:f2:bf:c7:13:72:a1:e2:0f:f1:2c:7b:dd:60:92:
                    8c:3f:4d:b8:26:d7:dd:7f:3a:6d:3b:13:83:9c:04:
                    56:11:db:34:22:47:5e:4d:d9:56:2b:1c:bd:cf:cc:
                    02:aa:86:7e:51:97:e8:f4:7e:c2:3b:c4:8a:83:ee:
                    86:a3:a7:97:1a:58:94:43:7b:2a:b7:02:64:ba:e4:
                    48:32:9d:48:eb:57:bc:b8:20:6a:63:53:56:ee:d0:
                    23:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:61:95:49:F1:F9:35:45:27:1A:CC:1A:F5:05:4E:EE:DF:91:A5:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9db1dcaf-30fb-3423-8f73-696da8d5f380.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.76.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:17:50:69:4b:83:39:55:7c:0c:08:27:d7:70:7b:fa:44:25:
         9c:93:29:75:a3:10:af:c1:35:e5:d7:08:ba:f2:23:d8:d5:7a:
         86:b1:98:ee:8e:7c:4e:e5:7c:34:56:07:ed:41:b9:a8:48:bc:
         a0:e6:f3:6c:64:29:9c:40:00:39:08:cd:c0:8c:29:61:85:9c:
         df:58:ba:e1:a1:97:d9:49:f5:03:1c:7a:66:7c:35:d5:fe:ef:
         5f:66:c2:b1:df:0e:2f:d2:e1:7b:4b:a2:a0:87:f6:b9:6b:ae:
         53:94:70:83:74:a1:03:3f:9e:a9:a4:4e:d9:1c:50:34:3a:82:
         48:2c:3c:7a:19:1a:a1:5d:15:69:a0:04:ed:2a:9d:e3:0e:9e:
         d8:00:73:af:dc:2f:34:5e:e7:2c:51:d4:d4:ee:db:91:55:a5:
         7f:e7:20:93:b9:11:ec:94:9d:17:ed:fe:fb:cf:cd:34:c0:bf:
         07:c5:e1:d7:b2:cf:c7:47:98:ef:cc:56:94:21:a7:1a:86:af:
         8f:cd:80:dc:aa:47:98:a5:22:6a:41:0e:f8:be:3b:d9:3a:b7:
         be:3c:94:15:7b:b0:9a:20:6e:86:ab:3f:2a:eb:da:5a:b4:36:
         8a:f4:76:df:73:1a:6d:f7:48:62:6b:cf:d7:b3:fe:65:14:f6:
         f1:c0:4a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----