Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/52371030-3f57-4e1b-ba9c-b16d2c6b7084/f6087869-0ad4-3776-afb3-6fb558f00130.roa
File:                     f6087869-0ad4-3776-afb3-6fb558f00130.roa (raw, json)
Hash identifier:          KE4fqytJXzqno/vpSqWQhp82810Yxher3tQ7SMIHIok=
Subject key identifier:   9C:54:17:4A:4A:BA:B7:A1:33:2C:F3:66:21:58:55:12:8A:CE:FA:A0
Certificate issuer:       /CN=52371030-3f57-4e1b-ba9c-b16d2c6b7084
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665EB4D675
Authority key identifier: 27:5A:91:9C:F1:6A:BF:3B:AC:42:51:AA:A4:59:08:0E:97:2C:01:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/52371030-3f57-4e1b-ba9c-b16d2c6b7084.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/52371030-3f57-4e1b-ba9c-b16d2c6b7084/f6087869-0ad4-3776-afb3-6fb558f00130.roa
Signing time:             Wed 10 Oct 2018 16:00:01 +0000
ROA not before:           Mon 24 Jul 2017 04:00:00 +0000
ROA not after:            Sat 24 Jul 2027 04:00:00 +0000
asID:                     395089
IP address blocks:        192.160.102.0/24 maxlen: 24
                          2620:132:3000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5e:b4:d6:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52371030-3f57-4e1b-ba9c-b16d2c6b7084
        Validity
            Not Before: Jul 24 04:00:00 2017 GMT
            Not After : Jul 24 04:00:00 2027 GMT
        Subject: CN=d6759bc8-6150-4eb5-b623-a728b95e288d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:df:b6:8c:d1:7a:3e:90:dd:a5:03:51:09:64:
                    a3:ba:51:f6:8f:5c:f2:fc:0b:a8:53:af:3d:a3:a3:
                    64:c9:5c:b4:a8:63:9b:2d:58:f2:0e:10:d6:49:cb:
                    29:34:ad:76:05:19:6e:bb:d4:48:f0:b6:23:d1:f3:
                    f5:a8:0b:6a:af:60:5d:9d:db:47:7f:b7:99:1a:cc:
                    5e:36:3c:69:56:69:cf:55:ae:8e:8f:82:7a:b9:13:
                    d8:89:28:8c:4a:de:88:58:66:c4:61:42:f2:10:88:
                    de:6f:21:01:2b:70:26:e2:66:58:11:55:59:38:a7:
                    28:42:03:2f:2b:36:da:a2:15:35:4a:90:df:d5:69:
                    e4:6a:86:5a:32:00:ec:be:61:6a:28:b2:8b:99:01:
                    1f:a8:a1:0f:6a:02:42:90:27:00:c4:9b:47:02:c2:
                    e3:73:38:13:2e:2a:dd:5e:b6:86:b3:f4:df:83:93:
                    32:d9:3c:85:4d:b5:5d:9f:e2:8c:4c:41:83:27:a4:
                    8c:a3:ed:4d:f1:70:86:8b:1b:68:0f:5a:e0:af:ec:
                    cb:d1:99:a4:b7:1e:5a:68:47:81:6f:65:10:2e:5a:
                    6e:f7:77:a8:33:4d:16:32:10:88:cd:e1:80:35:53:
                    ae:55:24:10:0a:0e:f0:d8:d8:e8:0a:63:f9:09:de:
                    c4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:54:17:4A:4A:BA:B7:A1:33:2C:F3:66:21:58:55:12:8A:CE:FA:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/52371030-3f57-4e1b-ba9c-b16d2c6b7084/f6087869-0ad4-3776-afb3-6fb558f00130.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/52371030-3f57-4e1b-ba9c-b16d2c6b7084/52371030-3f57-4e1b-ba9c-b16d2c6b7084.crl

            X509v3 Authority Key Identifier:
                keyid:27:5A:91:9C:F1:6A:BF:3B:AC:42:51:AA:A4:59:08:0E:97:2C:01:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/52371030-3f57-4e1b-ba9c-b16d2c6b7084.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.160.102.0/24
                IPv6:
                  2620:132:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:83:79:99:69:69:5e:64:9b:f8:88:75:82:d6:73:90:95:c5:
         f9:d0:3c:fb:7e:a1:80:cc:a3:98:72:c2:e9:fe:af:91:40:dc:
         3d:00:35:4b:f9:58:52:40:c1:db:6f:ec:82:4d:c1:4a:59:b1:
         1d:4f:37:70:86:f8:f2:3b:44:66:fa:84:1a:79:69:a9:f4:f9:
         bb:27:83:a1:be:0d:5e:7b:7f:33:03:92:3f:b8:04:42:36:90:
         24:4c:da:e6:a4:62:eb:32:eb:93:fb:fe:c9:71:86:92:84:28:
         f8:63:90:b5:37:14:3a:e3:45:7a:69:8f:d2:d1:e4:62:61:ea:
         b4:a6:38:de:10:a4:36:99:2f:18:ef:09:25:ed:8e:8c:27:fc:
         05:6d:c7:c0:1a:75:d8:c7:be:49:e0:8e:51:96:5f:82:94:ef:
         7a:8e:73:f7:4d:b5:ff:09:a3:7a:8a:a5:59:f0:6b:c9:f0:a1:
         14:ed:46:50:fc:c8:e6:53:d8:ac:f2:da:cf:72:0b:5d:1f:f5:
         42:d7:55:06:e1:30:37:81:f3:59:79:96:80:99:a3:73:e2:7e:
         5c:2d:a9:5d:ae:b1:03:88:18:fe:51:56:e8:98:8c:03:c4:a2:
         a5:97:44:e8:5b:e7:e4:99:de:0e:37:b5:d7:cc:b0:42:09:3a:
         8c:98:a0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----