Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/aadb77ad-f614-3aa8-b841-53d2afa4625e.roa
File:                     aadb77ad-f614-3aa8-b841-53d2afa4625e.roa (raw, json)
Hash identifier:          KCtxD7Kuci9umxNBGrUzeNuhadSJl8/ryWDpwCm+Cyw=
Subject key identifier:   17:46:3F:C8:A1:19:A1:2D:EC:CD:CC:25:72:CB:ED:BC:FB:D5:8F:F3
Certificate issuer:       /CN=872ab566-07c0-4d6b-ab98-45aed75350ff
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665A9B40F4
Authority key identifier: BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/aadb77ad-f614-3aa8-b841-53d2afa4625e.roa
Signing time:             Tue 09 Oct 2018 20:53:36 +0000
ROA not before:           Tue 09 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        184.169.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5a:9b:40:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=872ab566-07c0-4d6b-ab98-45aed75350ff
        Validity
            Not Before: Oct  9 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=6f4e404e-06f7-4176-99ed-3a2aa1905083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8d:2d:2f:3e:bf:b8:27:af:0e:f5:c2:7d:c5:
                    d7:4f:e8:0e:dc:fe:7d:c5:7f:84:1b:2b:e5:8a:2d:
                    db:b1:5f:33:6a:0f:72:6d:bb:1d:1b:23:68:5b:21:
                    a9:cb:22:7a:f7:42:c9:45:ef:4a:c8:f8:d4:54:f6:
                    df:dc:ba:e6:32:43:ac:54:60:bc:bf:ac:39:18:d7:
                    bf:fa:9b:f9:24:e3:74:a8:23:fc:02:ce:22:ec:2a:
                    46:6a:df:97:3e:16:4b:3d:d3:41:36:62:d3:13:57:
                    64:87:98:4b:e6:23:b8:66:b5:2f:59:de:dc:95:8e:
                    fa:a7:4a:55:0f:30:04:a1:f4:f5:e1:27:ad:fe:94:
                    94:cd:79:13:13:53:8d:d0:ab:50:7f:f3:93:2a:70:
                    99:04:3a:c5:78:6b:db:6c:da:27:1e:29:36:de:5e:
                    24:81:0b:92:d7:96:8c:96:62:b0:ba:1a:8c:0d:f3:
                    3c:9a:71:83:c0:da:72:c4:23:32:e6:00:b5:c4:f6:
                    29:23:e5:d0:b6:5a:c2:1b:30:98:db:0e:ea:75:c0:
                    87:7e:31:72:3b:a6:e6:5c:46:85:cf:c7:7f:74:92:
                    d2:d4:dc:21:8f:4e:ae:cb:e2:f2:12:1a:33:59:87:
                    c3:53:a2:3c:82:54:f5:9b:a0:6f:14:e6:8f:52:17:
                    ed:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:46:3F:C8:A1:19:A1:2D:EC:CD:CC:25:72:CB:ED:BC:FB:D5:8F:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/aadb77ad-f614-3aa8-b841-53d2afa4625e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/872ab566-07c0-4d6b-ab98-45aed75350ff.crl

            X509v3 Authority Key Identifier:
                keyid:BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:6d:d1:05:f2:ca:a5:bf:f7:30:0a:a7:31:cb:57:a1:a9:41:
         12:ed:5a:3e:94:76:16:7f:56:7b:b0:41:5e:d4:e7:de:66:46:
         a9:ad:0f:a7:d6:0a:b0:b5:3e:97:28:6b:09:63:ce:28:f3:31:
         4f:25:75:1d:fa:50:d3:6b:30:b3:6b:2c:62:b9:02:e1:a7:f2:
         18:a8:2a:7a:8c:f8:f2:b9:6a:bf:06:09:23:63:a2:f8:86:d9:
         32:78:70:5b:39:82:59:93:3a:fb:6d:c3:d0:0e:e4:9e:7b:28:
         c6:db:04:ad:6a:70:15:a9:03:87:1f:c5:64:7a:61:cb:1e:12:
         e0:4e:ca:92:d7:b7:17:4d:19:93:c1:97:3b:7b:43:f5:f0:62:
         78:fa:47:b5:30:f6:5d:bb:06:8a:34:37:ce:f9:be:12:1d:e3:
         53:44:34:7d:e2:05:f6:51:ef:5e:29:a8:26:8c:10:15:ff:23:
         22:73:42:bf:5e:d9:ad:6a:a6:10:c8:ff:82:c6:f3:4a:be:1d:
         58:c5:7e:67:8b:ac:a3:55:ba:c2:4d:52:2c:18:6c:87:bc:10:
         e3:05:fa:03:a3:b7:9b:ba:3f:15:0a:4c:04:05:8e:b1:37:5c:
         19:1f:0f:0a:e2:0d:bb:36:d1:35:bb:eb:94:f0:f5:1e:a2:d0:
         19:2e:6f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----