Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1affe2c4-9d53-31f0-80e4-8f84046ea766.roa
File:                     1affe2c4-9d53-31f0-80e4-8f84046ea766.roa (raw, json)
Hash identifier:          t0h2VTLlIDOcTr9eUVBLQPvZToolDz4lgxLn1rXdUMQ=
Subject key identifier:   DA:6D:A2:80:D7:9F:46:34:D2:2B:9C:3D:B1:57:94:08:90:72:9F:21
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16834374E4E
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1affe2c4-9d53-31f0-80e4-8f84046ea766.roa
Signing time:             Wed 09 Jan 2019 20:04:26 +0000
ROA not before:           Wed 09 Jan 2019 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        52.32.0.0/11 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:68:34:37:4e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan  9 05:00:00 2019 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=43ce82e7-cfc9-4822-aff9-761a39cd5ddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0a:50:69:40:03:e6:17:d1:dd:b1:2a:39:33:
                    1d:db:7f:9d:22:75:45:57:e4:7b:3e:63:d7:7f:16:
                    cc:19:45:b7:29:36:96:9e:1e:67:59:4e:20:a7:41:
                    18:07:03:ff:f3:9e:76:2e:bf:5b:18:94:e4:1a:eb:
                    a3:32:b5:ad:da:ea:47:71:32:d6:b4:e1:54:eb:05:
                    e2:62:93:04:f3:d1:d1:ff:ff:15:3e:34:14:97:47:
                    69:a2:98:9e:4f:78:a3:63:fe:e0:ba:7a:20:8a:65:
                    b7:a1:84:38:b3:cf:05:03:2d:bc:1b:fa:be:76:9f:
                    48:fa:a3:f7:f6:1f:89:2a:b5:f7:00:c7:df:8d:66:
                    b9:9c:4c:d2:02:4f:cb:37:67:ae:30:59:9a:e3:4b:
                    25:2a:cf:d5:f5:6b:e1:b3:e6:6a:15:d6:fa:7e:4a:
                    c5:d2:f2:a7:5e:9f:95:8f:ff:7e:bf:19:30:2e:78:
                    ee:89:1e:f7:3c:5a:05:b6:5a:69:50:33:3f:71:16:
                    2c:44:9a:28:87:2f:a1:f2:ab:55:bd:bf:e3:4b:af:
                    0d:04:1f:98:eb:e4:a2:30:66:80:1c:14:d5:c1:70:
                    61:77:2a:91:48:9e:73:88:31:42:d0:75:2c:b4:57:
                    d2:a8:f7:24:02:20:00:a6:21:60:b1:93:ca:e0:a1:
                    aa:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6D:A2:80:D7:9F:46:34:D2:2B:9C:3D:B1:57:94:08:90:72:9F:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1affe2c4-9d53-31f0-80e4-8f84046ea766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.32.0.0/11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:8a:0b:f6:2c:42:a3:e5:ed:d9:b0:23:2f:62:fc:85:af:b7:
         ac:09:8c:ab:30:47:d1:83:86:76:fb:77:fa:ac:8e:6f:50:10:
         9b:c9:0c:3f:d0:87:ef:c8:71:25:b1:6e:b1:e3:af:f0:b8:2c:
         20:0c:8e:63:65:eb:70:40:1b:12:f3:b1:b3:63:86:df:e8:84:
         2c:ac:80:11:a7:b3:3e:33:de:37:4b:4a:93:d0:97:39:69:43:
         70:a0:92:d7:2a:32:da:07:72:76:50:bf:51:17:67:15:17:ee:
         c8:62:86:2a:10:57:b1:a5:0e:ef:a6:7e:0d:56:ee:36:ad:36:
         0f:d3:56:73:15:c9:22:40:48:8b:9c:45:75:cd:3f:df:36:57:
         5f:7f:70:4d:d5:83:79:80:f3:7f:d0:4e:1f:e2:6a:a6:d8:1a:
         da:28:ac:7f:c6:0e:f3:61:94:a6:7a:ab:6c:bb:d6:e5:0a:1c:
         53:b1:b1:28:90:77:08:51:50:29:01:9e:ef:84:28:1e:10:13:
         51:76:c2:a2:db:a8:66:5a:3e:24:50:71:95:9f:cd:ae:fb:5d:
         03:a4:a2:b4:ef:4a:44:c9:e5:b0:50:9f:62:9c:ee:18:f7:00:
         57:a8:7f:0a:bb:93:f1:dd:59:f9:60:2f:7b:f9:5c:a0:b7:0a:
         91:74:a4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----