Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/468afb18-52f3-39c8-897d-96367ed8c7cd.roa
File:                     468afb18-52f3-39c8-897d-96367ed8c7cd.roa (raw, json)
Hash identifier:          tKwdXfe5LuaXBsHZWcxWTYdeMdTtDnLQanJ16kkOO5A=
Subject key identifier:   DC:4E:B7:9B:2C:73:B4:43:FA:0D:88:B1:A7:DB:4F:22:18:C1:5E:EE
Certificate issuer:       /CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665C06E473
Authority key identifier: 6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/468afb18-52f3-39c8-897d-96367ed8c7cd.roa
Signing time:             Wed 10 Oct 2018 03:30:47 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        50.112.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:06:e4:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=c441abc8-ef09-461c-b278-5b04d967b40b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fd:32:e8:3d:7e:b9:1c:18:0b:fb:7c:53:59:
                    80:07:35:a8:e7:bf:48:34:5e:51:76:31:06:97:3a:
                    5e:e4:f8:20:6e:50:90:f5:a8:19:87:1a:ef:83:a0:
                    96:08:28:05:ca:52:58:84:83:96:23:9c:82:4a:f2:
                    21:d1:f4:9b:5e:5c:4b:8f:ce:70:60:9d:6d:b7:46:
                    bf:24:38:27:42:55:9a:5a:73:e4:33:9c:2a:f5:3b:
                    ab:59:a2:9f:26:d6:2f:29:db:8f:1b:05:57:f6:e1:
                    2c:d7:0c:76:75:08:d2:f2:52:20:28:c7:65:19:e5:
                    ee:84:60:5b:6b:e9:14:1b:d4:db:c3:a1:46:a1:3b:
                    76:91:74:90:c6:cf:4f:dc:39:8e:ef:a2:05:52:b0:
                    21:e7:f8:e1:b3:a0:69:46:31:47:9e:5c:bb:87:60:
                    72:73:e9:85:b2:17:52:56:01:eb:f0:8e:03:af:04:
                    54:38:39:d0:46:72:4e:9e:be:53:8c:80:41:b8:a6:
                    9d:07:82:b1:5f:34:5a:1d:41:9e:03:46:21:e5:64:
                    93:80:c9:4b:bb:d9:f5:28:24:1f:49:ae:0c:0a:1a:
                    cc:db:04:e7:0a:09:ce:b8:cb:99:21:e1:0f:12:5a:
                    1a:af:cb:52:a0:b2:a0:10:28:7b:01:7e:72:2c:52:
                    75:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4E:B7:9B:2C:73:B4:43:FA:0D:88:B1:A7:DB:4F:22:18:C1:5E:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/468afb18-52f3-39c8-897d-96367ed8c7cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.crl

            X509v3 Authority Key Identifier:
                keyid:6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:67:48:8f:58:69:e5:7f:8a:a0:77:08:30:73:e4:6c:c6:70:
         97:13:9f:8d:3a:25:2e:54:4c:d0:f1:91:2d:d2:1e:f0:e6:96:
         9d:53:5f:8c:c3:86:c1:7a:bb:b4:54:8c:2d:f5:3d:7f:ee:43:
         a0:94:75:a2:22:1f:b9:d0:4b:03:7a:7a:7f:c1:62:d1:ae:bd:
         f4:e0:61:3e:61:a0:71:0a:21:94:57:32:2c:42:f8:91:d2:84:
         74:f4:6a:c5:3b:78:65:d6:4d:2e:ee:38:16:8b:14:f6:2b:8d:
         15:34:d3:c1:d9:1a:99:09:6d:46:46:d4:64:19:78:c6:7e:b0:
         ea:b2:30:34:de:e7:b3:b1:96:34:32:13:7d:0d:38:49:a5:a9:
         69:c8:23:ec:c8:d0:73:a2:2a:82:e2:c7:ce:8b:57:e7:b4:86:
         1c:29:98:b6:47:48:7e:7c:b6:57:e0:59:9a:07:8e:d0:71:fa:
         82:7f:e2:a2:03:8d:2e:0b:01:18:20:fc:44:df:36:12:be:db:
         6f:2f:bd:47:d6:9a:a7:e6:47:b7:bd:ab:96:e7:d9:4a:f4:14:
         53:d4:03:00:65:31:96:e5:5f:49:a5:0f:4f:01:66:65:3e:d6:
         4f:fd:1a:9b:94:b6:52:92:a1:75:4f:70:d8:cb:8b:b5:f4:e4:
         79:09:1a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----