Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a56801d4-bbde-3947-899d-e3d4d8d0fe52.roa
File:                     a56801d4-bbde-3947-899d-e3d4d8d0fe52.roa (raw, json)
Hash identifier:          65DlVHlUWTPBIGCvM9ly0Lj2/YZjLMszn5RQVaxMtJk=
Subject key identifier:   34:85:87:07:CB:F6:1B:7C:C9:43:70:92:FD:5A:61:A5:45:FD:60:A2
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665C07B1F9
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a56801d4-bbde-3947-899d-e3d4d8d0fe52.roa
Signing time:             Wed 10 Oct 2018 03:31:40 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.190.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:07:b1:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=a37fb388-b7fb-4de7-aea2-eb8b71918003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fd:71:20:ef:f4:9a:00:86:96:cc:69:73:01:
                    ad:8e:ee:63:7d:82:75:c7:bc:17:ac:f1:29:9a:ff:
                    98:77:e7:d9:48:cf:68:49:b8:a5:e1:90:c6:a6:3f:
                    c8:63:4d:d0:0d:c4:1e:87:f0:39:ff:ff:fa:ee:16:
                    e1:03:34:a3:ec:70:23:3f:27:15:e6:e7:99:84:5b:
                    78:52:fb:ac:7c:fe:84:e8:2b:5a:34:fb:34:c9:d9:
                    01:36:39:f3:69:5d:a0:b7:a6:f2:fd:68:73:06:ae:
                    d0:2e:2a:7d:2b:3a:d6:7b:02:1e:f0:7a:59:51:cc:
                    2e:a1:55:8c:1d:7a:48:88:37:b3:9f:e3:cf:17:3b:
                    2c:1f:cb:76:bb:5e:c2:1f:b2:73:99:3a:ba:5b:10:
                    b6:84:06:ea:6d:cb:cc:a8:aa:65:db:8c:80:56:8a:
                    47:03:20:b2:5a:37:12:1b:63:c9:0f:e3:7c:13:d9:
                    cf:1c:5c:10:8c:8a:16:d8:1c:92:13:86:19:d5:89:
                    23:44:47:bd:4e:e3:92:e0:e5:78:f1:43:3a:34:77:
                    81:86:d7:fa:f6:55:97:19:af:a2:41:1e:23:44:c1:
                    3c:7b:9f:fb:e5:f6:49:b0:85:15:6f:97:21:a0:4b:
                    e0:e0:c1:ad:05:e4:52:06:14:c5:30:2f:32:93:eb:
                    b6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:85:87:07:CB:F6:1B:7C:C9:43:70:92:FD:5A:61:A5:45:FD:60:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a56801d4-bbde-3947-899d-e3d4d8d0fe52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.190.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:b9:5a:f0:8c:7c:6b:b5:59:be:d8:49:78:49:a3:87:1e:ef:
         d7:68:a4:65:ae:d6:29:6f:e6:cd:0a:03:0f:58:59:ed:81:91:
         1f:ae:c4:d8:15:ea:7f:52:12:cc:0a:6d:71:3a:1f:a2:77:59:
         3f:65:d1:77:ce:82:97:5f:1e:1f:fd:9f:9d:d3:39:c7:ba:3f:
         ce:a2:3a:dd:21:9e:73:46:13:62:0b:d9:be:dc:b2:3f:d1:f4:
         09:bb:38:76:f6:09:fe:ca:ef:46:04:d7:a4:34:9b:46:4c:5a:
         e6:4d:8f:e9:fc:d6:00:08:8c:19:72:b3:6e:cc:4e:e8:25:81:
         28:31:fd:e3:b8:14:5f:16:20:e8:04:bc:82:a2:bf:40:9a:06:
         75:3c:83:a3:b2:3c:33:9e:f6:82:3d:46:72:a0:71:68:c8:ef:
         97:f9:56:db:f1:0f:51:35:3a:f3:aa:92:7c:a3:49:f5:8a:cb:
         4a:ab:bd:55:68:59:a4:a0:63:33:36:55:3b:c6:2f:2a:85:ae:
         43:7b:18:72:55:7f:30:c5:d8:d5:1c:a4:24:cf:93:79:dd:0b:
         03:13:c5:26:8b:fd:be:9d:75:4b:97:ef:ae:55:8d:c6:25:5e:
         d0:9c:07:a9:d0:5a:f6:c5:60:c1:56:e7:1a:be:05:58:5f:73:
         e1:38:27:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----