Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aa7dbb4c-46db-334d-8a2a-acac3ffed044.roa
File:                     aa7dbb4c-46db-334d-8a2a-acac3ffed044.roa (raw, json)
Hash identifier:          jV9cbow6N5ajTHxbZMaozKFRLTldjX0EptieB6qowQ0=
Subject key identifier:   18:35:53:47:BD:CF:B9:E9:0E:45:50:54:9C:E7:32:40:C4:33:E3:1D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665CD49385
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aa7dbb4c-46db-334d-8a2a-acac3ffed044.roa
Signing time:             Wed 10 Oct 2018 07:15:27 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.119.205.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:d4:93:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=b3294619-476c-4e4c-80d4-7e86d5110b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b4:68:f5:37:3c:58:b1:15:7b:30:3e:fb:6b:
                    fb:5f:8f:51:21:f3:a5:99:d7:94:82:2e:4f:fc:1b:
                    db:fc:fa:09:f1:dc:ab:27:03:4b:ea:ea:0c:a4:18:
                    45:d3:af:d3:9d:ea:2d:2e:88:1c:73:c7:12:9a:e4:
                    c1:9b:b4:f3:29:36:03:35:a2:62:f3:73:ba:37:3f:
                    8d:57:2d:28:37:d9:94:37:02:e0:6e:63:dc:b2:f2:
                    3e:2c:54:06:b4:29:e4:c4:44:6f:4e:7f:bf:24:74:
                    e5:66:61:ad:3f:cd:2b:9c:ce:1c:7e:04:77:45:bf:
                    b5:05:a0:17:61:51:01:2b:62:28:76:aa:f0:fe:a7:
                    3e:36:e9:f4:6a:93:b2:7c:41:dd:92:40:bc:85:2d:
                    6e:02:3e:8c:03:f8:20:b0:fd:1c:51:fe:8b:27:aa:
                    c4:20:00:5a:ae:ef:15:07:08:e3:ed:8b:de:0b:61:
                    5a:9e:80:5a:b2:34:ab:1d:29:14:7b:a3:fb:ee:17:
                    7c:06:43:fe:40:b7:30:31:68:ec:61:de:fd:0e:b1:
                    59:c3:4e:94:da:49:2c:23:2d:3c:05:1f:11:f9:a3:
                    69:94:7e:49:ec:ee:5d:1b:00:a0:6c:8a:49:d2:ae:
                    13:dc:92:5d:c5:2a:7a:ab:ea:41:93:2d:77:6c:24:
                    7b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:35:53:47:BD:CF:B9:E9:0E:45:50:54:9C:E7:32:40:C4:33:E3:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aa7dbb4c-46db-334d-8a2a-acac3ffed044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.119.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:74:6d:3b:79:d7:ab:8f:03:43:dd:9b:d8:87:bb:10:89:d0:
         56:54:96:95:12:e8:10:bc:97:f5:c4:fd:23:ac:4c:d8:3e:59:
         b2:f0:0c:8f:4d:f1:e5:5f:95:1a:50:19:a5:f6:b9:ac:db:0a:
         71:f9:aa:00:7a:b9:a5:33:c0:4e:0f:37:74:d8:ed:e4:f3:58:
         24:ff:38:6d:19:ae:aa:dc:e7:be:70:78:8b:92:08:1b:8f:d3:
         9d:3a:9e:c2:d7:a6:e8:0b:da:dd:58:61:0e:ee:29:51:70:af:
         26:93:3e:79:f8:3b:e0:40:1a:6e:22:93:f7:08:e9:02:8b:c4:
         ce:72:0a:36:a5:59:d3:24:57:11:64:5c:99:d4:d8:2c:db:2a:
         ea:6e:a4:d8:56:f5:22:8b:bb:dd:74:ba:3a:49:b9:47:04:9d:
         95:2c:83:50:ac:47:ec:9a:16:6a:c2:b6:75:03:7a:c2:71:15:
         a7:6d:a7:8a:f7:a4:8c:3f:b6:f6:a8:8a:df:9b:9b:b9:94:e5:
         4f:27:e3:b6:fb:e7:f1:06:a4:bd:81:03:3d:3a:a8:c4:6c:3e:
         98:f0:ab:3d:33:56:4c:54:0c:19:62:00:75:98:69:3b:cf:54:
         bb:dc:5b:85:0e:69:1d:40:7f:8d:f1:a4:63:cc:fb:d6:c4:ef:
         d5:0d:2d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----