Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5c2ec0e9-a5cb-3706-9415-38eed4862b69.roa
File:                     5c2ec0e9-a5cb-3706-9415-38eed4862b69.roa (raw, json)
Hash identifier:          c9KuuKxosyovVpFForkY0OLBth5TD6s30fGLiEVpiDk=
Subject key identifier:   34:46:E4:B0:59:68:FC:6A:C3:95:77:A8:02:84:2F:28:B0:00:7A:3E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665D25D458
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5c2ec0e9-a5cb-3706-9415-38eed4862b69.roa
Signing time:             Wed 10 Oct 2018 08:44:12 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.251.144.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5d:25:d4:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=b9c0c56e-96e2-423f-ac76-676168c1d6a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:11:f9:7c:fb:b6:38:56:e4:92:0b:e1:de:
                    79:ea:b5:5d:3b:63:5d:fb:41:00:54:73:1c:fd:85:
                    2f:79:a2:c4:53:7d:fb:c3:84:ea:5b:80:ec:8c:df:
                    6a:94:48:5b:ac:ab:92:e6:69:12:9f:80:11:3a:a3:
                    5a:7a:72:30:a0:6f:9e:40:a2:08:c3:70:59:01:62:
                    cb:09:7b:e5:fc:84:65:28:b1:f7:52:c3:47:f0:a7:
                    d9:b8:9f:3f:24:90:cc:e2:1d:d2:38:c2:2c:10:94:
                    94:04:bc:aa:cb:0d:02:31:cc:55:46:e3:d4:37:ee:
                    40:f4:7a:d0:c2:8c:cf:bc:30:de:7a:95:2b:95:f6:
                    73:15:70:04:85:1d:ea:cf:e5:63:d2:22:9c:bc:3f:
                    4b:b3:ea:52:0b:a2:8b:7c:cb:82:62:15:38:9a:5e:
                    17:f7:94:ed:d7:cc:26:b4:12:94:69:50:0e:8e:31:
                    4f:20:22:15:44:b3:32:b1:ef:1b:60:1b:ad:d3:e3:
                    0f:73:41:a2:74:4a:7c:f8:db:c8:bb:1c:ff:cb:e4:
                    28:26:a1:b5:00:74:2b:b8:8d:9d:be:16:0f:85:ba:
                    36:18:9d:56:68:c0:18:b0:b0:50:cf:f6:c3:d9:54:
                    06:2e:6a:ed:f3:b2:b6:a4:f2:4d:99:22:e2:ae:9d:
                    4e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:46:E4:B0:59:68:FC:6A:C3:95:77:A8:02:84:2F:28:B0:00:7A:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5c2ec0e9-a5cb-3706-9415-38eed4862b69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.251.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:d8:9f:4a:49:f5:98:f0:65:57:85:28:20:90:de:02:c4:26:
         9d:37:74:47:eb:68:0a:e4:68:2b:ff:83:55:8f:12:88:2f:5b:
         8c:e3:2e:fb:55:d3:1c:47:5e:a3:58:e3:9b:4c:d0:5c:a1:40:
         b6:bf:0c:83:84:e4:dd:2c:e2:7c:0e:08:40:ad:8d:e5:ac:bf:
         c9:d7:af:7b:11:47:f1:ba:db:bc:b5:b3:a1:6e:83:f5:d8:ea:
         cb:a7:0e:d3:a1:52:b6:a2:50:28:13:d1:23:00:14:b7:c3:8c:
         d7:7b:e4:c5:36:8a:57:27:ed:37:18:a0:8e:72:aa:10:7b:c6:
         6a:c0:bf:60:b4:81:42:9c:ec:74:1a:20:b0:7d:3a:5b:bb:00:
         1f:f9:f1:f2:21:0e:ee:3d:30:77:c4:9c:95:fc:16:fd:70:75:
         e1:60:27:b4:6d:b1:34:1f:2c:ca:d4:2e:25:32:53:7c:da:be:
         ef:11:07:cc:5a:df:c0:26:50:a0:41:d1:5c:ef:ef:ce:7c:9e:
         c5:f3:49:b1:08:ea:18:2f:41:a2:21:df:2f:27:21:a0:77:78:
         cc:8c:db:3b:4b:5c:86:8b:14:a6:26:96:0a:86:12:a9:dc:7a:
         69:d3:ab:65:86:8c:10:68:97:34:56:3b:9d:3a:33:61:53:4a:
         10:97:aa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----