Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/09042eac-7120-3016-81a8-6859cfd5c75e.roa
File:                     09042eac-7120-3016-81a8-6859cfd5c75e.roa (raw, json)
Hash identifier:          qzfSr7d0GfzAm+hmciw8BdUhK83Zy6ifJK4Mh1mivFI=
Subject key identifier:   AA:60:1A:E3:85:84:B7:7C:6F:0D:4E:AD:AA:43:D7:6E:DD:4F:E2:B1
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665C2E495F
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/09042eac-7120-3016-81a8-6859cfd5c75e.roa
Signing time:             Wed 10 Oct 2018 04:13:49 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.240.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:2e:49:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=35548802-18dd-4219-839a-12ecff3e4a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:af:d5:99:ea:26:83:2a:55:09:0e:0f:e9:b4:
                    10:33:36:ec:3b:0f:c9:86:59:01:e5:1b:0e:94:df:
                    0b:a0:5b:6a:19:1b:37:ea:58:88:37:1d:9c:a1:58:
                    82:30:75:d2:85:66:b5:91:d7:4e:64:87:94:46:55:
                    5b:c6:90:0d:93:80:15:a9:9a:19:21:d0:0a:6a:a1:
                    b6:9b:1c:b4:bb:88:44:1d:f8:ae:e3:ae:86:95:5a:
                    c6:5e:16:5b:97:9a:2c:5f:cc:d4:dd:85:10:a8:13:
                    08:39:64:bd:c6:c8:11:28:9c:61:20:cf:78:15:c0:
                    6b:63:a1:86:8a:84:52:b7:a6:b1:d3:d8:3f:33:f7:
                    e1:37:a2:a6:c1:f4:a4:43:de:03:ea:6f:db:84:f7:
                    b6:15:14:e4:c5:71:08:f2:10:4f:55:a8:20:dd:35:
                    9b:01:5b:cd:a4:45:71:d7:92:f3:6e:8e:ab:9f:da:
                    fc:d3:db:6b:f6:45:67:db:1d:df:96:ed:1a:73:24:
                    3c:17:9a:f6:60:db:3a:ae:09:74:ff:9a:38:9a:86:
                    fb:b1:a8:c9:80:f6:b6:3a:23:00:71:15:42:e5:b0:
                    b3:77:c0:7a:67:1e:e3:60:c3:95:f3:2a:9c:d8:9e:
                    f9:ca:d5:47:25:40:22:50:da:8a:bb:87:87:c0:0c:
                    61:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:60:1A:E3:85:84:B7:7C:6F:0D:4E:AD:AA:43:D7:6E:DD:4F:E2:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/09042eac-7120-3016-81a8-6859cfd5c75e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.240.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:47:23:df:44:9c:f0:49:73:df:5c:fa:8f:0a:a2:69:6f:8a:
         ff:04:4d:b6:c7:49:1b:ee:a8:b3:f3:21:83:ec:dc:7f:6d:13:
         8f:06:a0:b3:6f:da:f0:18:8a:58:c3:3f:e6:72:74:9e:2d:bc:
         0d:9e:e8:f9:f9:08:67:8d:5f:ee:f4:10:38:5c:8d:93:81:b5:
         bb:18:d1:c6:44:5d:21:5a:43:bc:24:1e:d1:b1:93:cb:57:b6:
         b9:df:3c:2f:b8:ed:81:d6:6f:38:d5:29:5d:00:6b:74:ba:4a:
         c4:7b:ba:e3:a7:69:8d:8d:1e:f6:9f:ad:64:b1:6e:e4:da:93:
         2b:55:4b:d7:8c:8f:10:30:d6:fc:a5:f6:8e:df:40:77:49:17:
         fe:b3:3c:7a:a0:7d:5e:9d:0e:11:c2:cc:ea:c9:3c:e6:a4:d7:
         48:88:c4:65:3c:d3:ce:e6:70:54:da:bd:c4:96:db:ec:db:e0:
         7a:e4:35:18:a5:a3:2f:24:30:82:7f:52:c3:e6:69:86:39:f4:
         1a:00:a8:51:20:9c:59:f1:03:18:b1:a9:a8:5f:a0:7a:1f:26:
         40:24:7c:4f:42:31:29:67:d2:9c:88:1d:e5:50:5e:2e:3d:b6:
         2c:b2:61:7c:32:72:e4:87:11:16:d3:9c:cb:e6:69:21:75:08:
         66:c4:2c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----