Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/117da697-bba7-3716-a163-c0c8e019ceec.roa
File:                     117da697-bba7-3716-a163-c0c8e019ceec.roa (raw, json)
Hash identifier:          aXRiooAMkOJN4Tk8MPHZayQymf0hqPe1DEgAUgdOTb8=
Subject key identifier:   D1:A3:79:31:87:8A:E4:0D:DF:03:77:5A:B7:CE:4A:F8:1F:6E:92:4F
Certificate issuer:       /CN=505332f5-c843-4e04-add6-4ef51984b8f2
Certificate serial:       010D0C9F4328576D51CC73C042CFC1669997D734
Authority key identifier: 4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/117da697-bba7-3716-a163-c0c8e019ceec.roa
Signing time:             Mon 22 Oct 2018 02:25:57 +0000
ROA not before:           Mon 22 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     8987
IP address blocks:        2620:108:d000::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:99:97:d7:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505332f5-c843-4e04-add6-4ef51984b8f2
        Validity
            Not Before: Oct 22 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=3797832d-7878-4747-8b8d-16b5741a3779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:37:f9:64:d4:9b:ff:1c:35:8d:cd:fa:60:7d:
                    30:ac:cd:a4:24:9f:e5:33:10:e7:d4:de:92:9c:82:
                    37:d5:8e:db:96:0b:34:98:fc:2c:a3:63:19:a6:05:
                    e3:5b:40:ae:b6:96:78:9a:1c:a8:7e:54:92:9d:28:
                    7b:1b:5e:e2:db:c3:7e:7f:c4:f5:33:4c:a4:0b:63:
                    cf:2a:1e:22:75:6d:a5:ea:6c:7b:46:b1:64:78:ba:
                    d7:e0:74:06:bd:71:b0:b7:6f:fa:b0:b5:fb:a8:85:
                    d4:55:de:85:3d:fc:6e:12:8e:92:ea:41:4d:fe:d8:
                    22:6c:f5:ec:74:aa:d4:8b:96:fa:b9:cc:bb:f8:87:
                    a4:89:13:a7:77:f3:2a:0e:60:39:25:b6:30:70:d3:
                    66:9b:32:bf:3e:56:05:03:64:c8:f8:99:15:8c:dc:
                    22:92:f6:24:b0:f5:ac:88:71:72:63:b9:64:13:a7:
                    45:3a:d0:51:a2:a8:40:19:9a:96:79:53:f7:9f:17:
                    48:0f:42:c7:39:76:cd:64:0c:be:f8:c8:7e:24:9c:
                    8b:11:83:90:4d:ff:56:0a:6e:e7:9b:60:3c:cb:db:
                    60:c6:c8:ed:5e:ea:25:9e:17:61:4d:53:8e:5a:cf:
                    25:f9:bd:67:9e:e2:8a:40:de:9d:e6:91:6a:5d:d7:
                    14:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A3:79:31:87:8A:E4:0D:DF:03:77:5A:B7:CE:4A:F8:1F:6E:92:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/117da697-bba7-3716-a163-c0c8e019ceec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/505332f5-c843-4e04-add6-4ef51984b8f2.crl

            X509v3 Authority Key Identifier:
                keyid:4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:108:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:9b:78:07:4b:e9:39:bf:78:fa:38:8a:ac:87:c1:4b:95:e7:
         67:09:20:9e:ab:50:b0:6d:cd:85:46:f9:82:ca:7f:7d:86:7a:
         71:60:ca:1c:7c:74:c3:06:2f:cd:4c:7b:af:35:7d:be:86:20:
         9f:3c:96:40:48:e6:3e:1d:f1:10:bf:fa:b0:89:be:7f:a5:fb:
         b0:c6:b9:87:ba:ce:88:7e:ee:42:1c:8e:e7:f6:43:68:27:ff:
         3c:3e:93:1d:87:3b:f8:47:26:e7:e8:98:5f:2b:99:0d:8e:32:
         8c:97:49:a5:93:df:ba:7b:74:60:ff:77:c6:68:83:17:40:e0:
         c2:cd:90:3d:15:08:07:f6:2f:3a:d1:52:0e:fa:ce:00:2e:31:
         49:c8:b2:fd:5e:64:4f:00:08:63:aa:95:b0:73:29:8b:af:a5:
         aa:45:26:c4:89:4f:1c:c6:1f:ec:1f:d1:d5:de:dc:45:70:b1:
         cb:0d:91:fa:7b:f9:5a:28:15:25:a3:1d:01:49:6a:43:75:a0:
         c7:3e:cf:29:9a:ec:18:61:d1:4f:de:72:93:27:4a:90:1a:bb:
         eb:ff:b8:9d:c5:45:d5:6b:d7:80:db:07:a3:cd:4a:a3:93:c4:
         8b:79:8d:86:8e:38:1f:b9:3e:6d:c3:fa:26:dc:4b:f8:67:5a:
         b2:ac:9f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----