Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3c072719-4b8e-3a63-97ab-c6e1e0f420b5.roa
File:                     3c072719-4b8e-3a63-97ab-c6e1e0f420b5.roa (raw, json)
Hash identifier:          zSeKVf88p2bNcCdkHj2ffLoG4HtwNHdK5z8XOawDpiM=
Subject key identifier:   0F:B2:79:2F:2E:89:2F:A2:E9:E3:39:79:43:D1:92:74:34:68:8D:1C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1664BD10412
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3c072719-4b8e-3a63-97ab-c6e1e0f420b5.roa
Signing time:             Sat 06 Oct 2018 23:58:01 +0000
ROA not before:           Sat 06 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.32.0.0/14 maxlen: 14

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:4b:d1:04:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  6 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=8d9f2da7-d65e-4e26-847e-cd4c2f882ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:15:b2:03:2d:ac:1e:07:09:f5:32:be:40:54:
                    34:ba:0f:8c:a0:59:6b:d6:a2:d0:72:c0:95:1d:8c:
                    6d:d9:7c:3e:e1:55:c5:fa:c4:d1:a9:fc:7c:b8:d2:
                    73:0e:22:ad:f3:d5:04:5a:9d:9b:5a:75:f6:38:60:
                    8d:6d:0d:3c:54:94:5e:44:55:58:bb:78:47:26:7b:
                    aa:8f:e8:e7:c7:e0:7e:c8:0e:5e:54:1f:21:2d:e1:
                    f9:cd:27:2c:1d:b7:19:86:be:1a:5c:6b:a4:4f:8a:
                    9e:ed:86:09:5a:f5:22:5b:b3:11:f9:5f:1e:e8:69:
                    8e:07:f6:a3:21:69:22:41:a6:dc:3d:e9:c9:19:6a:
                    c6:01:e7:e3:0f:07:b2:70:9f:69:22:7b:e0:9b:7c:
                    08:8d:fe:2c:54:7f:5c:62:33:c0:5a:63:70:12:54:
                    7b:47:e6:db:ad:37:74:b2:f7:ce:54:b6:48:1d:41:
                    61:46:10:79:02:f4:f0:3f:0f:4d:be:5f:4e:08:65:
                    0e:b0:30:67:47:90:38:75:7b:93:7c:15:7d:5c:91:
                    bf:f0:61:83:1f:96:31:e2:57:1d:95:fc:a9:e0:cc:
                    7e:c5:d8:ed:7a:14:2d:86:e3:7a:de:cf:67:da:95:
                    c6:b7:79:4b:f5:e7:ad:5a:24:40:ba:96:c5:e5:f0:
                    28:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B2:79:2F:2E:89:2F:A2:E9:E3:39:79:43:D1:92:74:34:68:8D:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3c072719-4b8e-3a63-97ab-c6e1e0f420b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.32.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:1d:fc:7c:1f:b3:18:7d:7e:f3:08:e7:da:47:85:4e:9c:7b:
         f6:fd:ce:58:7e:8b:e5:ef:fc:71:f7:37:4a:f1:5b:d3:fe:8f:
         fb:89:71:13:2f:21:4d:79:67:dc:bb:2f:46:da:f7:92:d0:1c:
         ce:4e:24:fc:4b:90:13:ea:21:e7:c9:a1:39:2e:94:c4:1b:36:
         7c:85:0f:d4:e4:c0:26:83:2e:d4:f0:e5:6a:a9:a4:a7:36:8c:
         66:2a:d2:28:01:82:9d:07:d5:bf:c4:f3:1e:40:c8:47:8f:df:
         64:ed:d9:1a:bd:98:9c:fc:44:8c:e9:ca:ab:73:8b:9e:23:b9:
         39:b1:1c:92:bc:3b:a6:06:ee:10:4d:b1:8c:f9:5f:c7:c8:fe:
         71:82:50:c8:12:ff:96:35:91:2a:91:70:f2:e6:99:d3:22:fb:
         07:4c:f9:7b:db:a4:d4:d5:96:d5:e9:32:40:55:4c:b3:e3:34:
         11:76:82:2b:c9:7e:c5:ec:85:59:53:65:d7:bd:d9:96:43:06:
         4f:d7:53:02:02:44:14:96:34:06:48:93:5c:e6:71:42:a2:0b:
         e5:6f:44:49:56:51:c2:90:f1:e8:ca:4a:1e:b5:c2:4a:fb:ad:
         69:22:bd:e2:6e:75:99:9f:23:33:66:c1:89:6e:0b:25:df:be:
         f9:2d:c4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----