Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190/8f4d5722-18d4-3870-80a0-d969fba2f2d7.roa
File:                     8f4d5722-18d4-3870-80a0-d969fba2f2d7.roa (raw, json)
Hash identifier:          C3Zkj4GIt1b7T0x4VHUEWEusTQBSEYlVDf3qA4XnGuk=
Subject key identifier:   0C:F9:3D:F1:65:8B:55:82:F4:CD:71:8F:0D:4E:D1:29:04:6E:24:A5
Certificate issuer:       /CN=8a69f9d3-746f-47a4-971f-36ee3a52a190
Certificate serial:       010D0C9F4328576D51CC73C042CFC168B2998FB3
Authority key identifier: 16:B3:E8:A9:FC:0C:22:F4:68:BE:86:8C:B0:69:47:3E:55:3A:B0:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190/8f4d5722-18d4-3870-80a0-d969fba2f2d7.roa
Signing time:             Sun 03 Feb 2019 09:03:54 +0000
ROA not before:           Tue 20 Nov 2018 05:00:00 +0000
ROA not after:            Mon 20 Nov 2028 05:00:00 +0000
asID:                     19551
IP address blocks:        45.223.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:68:b2:99:8f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a69f9d3-746f-47a4-971f-36ee3a52a190
        Validity
            Not Before: Nov 20 05:00:00 2018 GMT
            Not After : Nov 20 05:00:00 2028 GMT
        Subject: CN=beb477a2-727b-4fe7-98b2-579ceddb5281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c8:d6:d0:6c:1d:b2:32:ae:ec:a9:d8:c2:48:
                    f6:8c:28:da:91:54:dd:81:3f:54:7b:48:d8:0f:6e:
                    67:c4:4c:90:c1:12:ba:d8:0f:f1:33:5f:f6:d5:3f:
                    36:a2:c3:c3:e7:37:24:46:04:c1:6f:3a:18:1d:02:
                    75:2e:c1:f7:6a:8e:cc:0b:85:13:63:8b:96:90:0a:
                    67:b7:89:32:d2:95:43:18:09:31:61:b2:97:ce:2c:
                    3a:0f:a5:67:19:41:ab:1b:83:24:2c:c6:da:2d:2d:
                    64:5a:13:89:7f:2d:ed:e5:1c:9b:52:11:63:df:d6:
                    a3:cd:ce:d3:5e:d1:51:42:c4:bf:37:5b:81:e5:a3:
                    b8:35:f6:36:6e:89:48:f8:d0:5b:d7:b4:76:e1:08:
                    3a:bb:8d:cf:da:12:78:37:2d:9d:b6:ed:32:56:54:
                    81:95:49:05:8e:0c:84:66:af:72:89:39:22:d2:b6:
                    02:a4:4c:25:c3:55:c7:9a:93:a0:2e:c4:cb:29:f0:
                    fe:11:94:fa:a8:a6:cc:c2:cb:9b:85:81:0c:bb:fc:
                    4e:f2:bc:4a:d9:f6:f3:4a:65:fa:bf:93:28:99:bc:
                    38:d9:7f:cf:d0:c6:88:a9:db:1c:f2:f4:94:0a:81:
                    c5:93:7c:79:fd:99:6a:ab:85:08:7f:1e:7c:4e:91:
                    40:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F9:3D:F1:65:8B:55:82:F4:CD:71:8F:0D:4E:D1:29:04:6E:24:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190/8f4d5722-18d4-3870-80a0-d969fba2f2d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190/8a69f9d3-746f-47a4-971f-36ee3a52a190.crl

            X509v3 Authority Key Identifier:
                keyid:16:B3:E8:A9:FC:0C:22:F4:68:BE:86:8C:B0:69:47:3E:55:3A:B0:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.223.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:f7:c8:64:32:c2:2e:08:70:0a:8c:c2:3f:ea:98:ac:7a:1e:
         69:0a:27:60:12:3a:2a:58:2e:d4:cc:5d:a4:5d:e6:f2:b9:b3:
         bd:1c:20:df:f5:20:1b:24:1d:7a:cf:19:3b:3d:e3:eb:da:4a:
         90:00:0d:6c:be:13:1c:90:23:e5:34:a1:a8:1d:86:4a:9b:50:
         1f:ed:d7:49:18:0b:e4:d4:d3:15:22:5f:5c:01:ca:41:04:df:
         56:47:c1:22:54:26:51:01:f0:51:84:40:81:bf:57:f7:ee:62:
         f7:fc:65:a6:e3:ce:72:c5:ab:ad:44:e3:7c:86:d3:14:6a:af:
         53:54:b2:0c:aa:68:db:3e:c6:a4:ec:28:a2:f1:b7:80:4d:8f:
         3f:11:97:2f:e6:c6:64:b1:00:ce:34:6d:95:94:4d:10:37:b4:
         a1:f0:16:5f:13:b8:0d:8c:b2:68:20:c9:6e:0b:d9:7c:0c:ab:
         73:54:15:1c:8b:91:08:4b:aa:be:26:03:c7:59:93:97:3d:91:
         ab:4d:59:85:c4:5b:d3:e1:05:14:20:68:f7:03:f0:c1:6d:02:
         69:46:5c:81:bb:5e:5f:d5:95:ff:65:15:16:23:db:f7:3e:c5:
         85:44:fd:a9:6f:c9:86:e8:50:0c:c1:7a:02:af:17:fd:3a:59:
         78:d2:c3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----